Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/C1Ryy7KmSO0V6dsN098dPoQXUBA.roa
File: C1Ryy7KmSO0V6dsN098dPoQXUBA.roa (raw, json)
Hash identifier: +1tl//pXaQYbiZpVXv8BVCVo8JGA9mhskXCfTOzsEJA=
Subject key identifier: 0B:54:72:CB:B2:A6:48:ED:15:E9:DB:0D:D3:DF:1D:3E:84:17:50:10
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 094F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/C1Ryy7KmSO0V6dsN098dPoQXUBA.roa
Signing time: Tue 29 Sep 2020 10:01:42 +0000
ROA not before: Tue 29 Sep 2020 10:01:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7539
IP address blocks: 210.200.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2383 (0x94f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0B5472CBB2A648ED15E9DB0DD3DF1D3E84175010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b4:a4:8a:2b:af:17:06:88:38:ef:8c:34:26:
33:77:09:dc:e6:07:a0:1c:4a:b7:61:86:0a:7f:da:
b5:99:0f:42:3c:78:28:6e:b4:53:ed:b2:d0:21:95:
d8:bd:5d:05:e7:ac:0a:4a:2a:b9:5c:8a:c8:6b:72:
11:4d:d1:24:d0:4f:b9:cf:80:a3:4c:61:39:bf:b7:
b3:f5:c6:4a:c4:a3:be:3a:55:81:f9:50:3c:db:f0:
cc:64:4f:8e:5f:32:05:7f:83:0b:84:c0:87:2d:5f:
50:5d:54:2d:76:e5:bb:0d:ef:c8:66:8a:ec:9a:18:
ba:89:06:26:98:cc:7a:62:37:1b:5e:e0:f3:98:36:
8e:28:42:38:7c:b6:82:c5:e7:8a:f4:a6:d3:8f:95:
cf:cc:0f:50:7a:9b:8c:76:9a:df:6e:1d:24:7d:61:
73:b3:9a:77:ef:f7:70:03:5a:b5:46:87:cb:84:24:
78:51:8b:9e:bc:3c:f7:03:7e:59:6d:52:5a:cc:1d:
2a:94:24:21:b5:0c:8a:85:88:27:45:42:9c:c4:17:
aa:64:4b:1e:06:c6:f9:28:dd:e4:a2:4a:bb:d6:f3:
4d:2e:f2:f1:07:c7:dc:64:05:17:3b:9e:c7:10:49:
08:fa:72:12:9e:9c:67:1b:61:07:b0:80:52:b9:cc:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:54:72:CB:B2:A6:48:ED:15:E9:DB:0D:D3:DF:1D:3E:84:17:50:10
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/C1Ryy7KmSO0V6dsN098dPoQXUBA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.32.0/20
Signature Algorithm: sha256WithRSAEncryption
72:fd:f6:0f:a8:86:41:aa:ef:5d:16:13:55:b8:a9:e3:c2:c8:
b5:7f:eb:31:12:d9:ae:00:24:7a:98:cc:f9:b7:1b:96:24:53:
26:ba:e6:a7:af:46:4a:8a:20:07:70:de:d6:b7:01:b2:27:ba:
89:33:c4:01:bc:89:6a:f1:b2:ec:f6:b2:94:24:93:4a:64:ff:
4d:46:db:92:25:9a:ae:04:c0:9c:16:08:09:ac:70:03:02:dd:
a1:df:59:f0:5b:d0:9a:95:61:9a:a9:05:36:d9:84:d0:a7:e0:
81:17:94:e5:b3:fa:d1:9e:10:bb:26:67:31:1b:16:eb:93:7d:
c8:bf:af:f1:5c:4e:1a:c0:2a:e5:62:0c:82:98:e1:f2:10:d9:
68:34:82:d7:cc:37:bf:35:b3:93:70:03:85:28:42:1c:f9:91:
7a:15:62:40:20:25:1f:c3:0b:e7:09:5c:25:01:be:75:f5:43:
99:24:79:a8:32:21:63:18:66:03:34:af:64:fc:78:a6:cd:20:
87:a4:0b:93:01:7e:7f:d4:3e:65:90:d3:df:de:3b:f3:8b:3d:
67:6d:b8:fa:9a:2c:57:8c:55:08:7a:bf:b4:18:57:26:92:8e:
85:38:3b:dc:33:92:db:e9:af:ff:0e:2d:88:9a:c6:d4:e8:59:
a2:29:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org