Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/CMmqBY81jBSmqk2Pm6aTmjDkkHk.roa
File: CMmqBY81jBSmqk2Pm6aTmjDkkHk.roa (raw, json)
Hash identifier: CRBp18flRIaG8yGQGtLYCnapIQJjC6ngRxi+gzflscQ=
Subject key identifier: 08:C9:AA:05:8F:35:8C:14:A6:AA:4D:8F:9B:A6:93:9A:30:E4:90:79
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0920
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/CMmqBY81jBSmqk2Pm6aTmjDkkHk.roa
Signing time: Tue 29 Sep 2020 10:01:30 +0000
ROA not before: Tue 29 Sep 2020 10:01:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18419
IP address blocks: 218.35.160.0/19 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2336 (0x920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:30 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=08C9AA058F358C14A6AA4D8F9BA6939A30E49079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:94:84:1b:e1:65:27:bd:26:49:46:d2:8c:
70:b3:e8:bc:69:4e:03:b1:2b:de:a0:77:72:d4:99:
3b:32:07:f5:aa:53:f1:ec:3f:fd:17:cc:ef:32:85:
84:72:40:39:1e:15:80:ee:27:5b:01:2b:1d:98:06:
e0:b1:be:af:b3:23:c3:b9:64:05:33:f1:92:c4:96:
0a:f9:4f:03:43:da:58:37:04:5b:d8:08:54:0f:15:
07:d8:cf:49:7b:a5:67:17:f3:9f:d5:fa:b0:91:a4:
3f:d5:b7:6b:2f:53:76:fd:66:25:ad:d2:23:5d:cb:
f4:d1:e6:f2:a0:49:51:51:0e:d2:d2:2c:0f:78:64:
90:05:74:78:e2:80:4e:36:97:d0:0a:62:f1:8e:9f:
a2:3f:8b:46:19:fe:f7:a0:b7:15:17:16:cd:86:cc:
64:2d:0d:07:f5:9d:b0:7f:87:c4:90:2b:83:20:5b:
90:1e:8e:64:4c:7a:79:1a:ea:21:5e:b0:e5:ac:1a:
47:21:cc:33:50:74:02:d4:80:55:93:76:21:e8:a9:
89:15:fc:90:cd:3a:5c:3a:28:c0:33:64:c0:80:d3:
4b:c0:ba:59:94:b2:4e:a8:5c:8b:8e:14:fc:ac:e6:
72:7f:6c:43:d7:e0:fc:c8:c6:4e:89:0d:78:cb:db:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C9:AA:05:8F:35:8C:14:A6:AA:4D:8F:9B:A6:93:9A:30:E4:90:79
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/CMmqBY81jBSmqk2Pm6aTmjDkkHk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.160.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:42:aa:f4:90:34:91:db:82:2f:aa:08:2e:21:18:4b:0e:ef:
17:14:6a:4c:15:c1:cd:74:cb:11:68:32:dd:b1:70:37:77:f2:
a2:fd:ff:4d:34:55:1f:49:5e:98:0f:6b:45:a5:3d:12:62:64:
4a:c3:9a:af:9a:5e:73:cc:9e:24:fd:15:3e:72:a8:e5:72:c9:
49:d2:33:b5:09:ec:eb:34:d5:d3:7f:d5:64:22:7b:89:1e:ae:
08:a8:dc:69:a7:3b:a8:d0:39:da:79:84:4b:c4:60:2d:50:1e:
2e:8f:71:0f:b0:7e:94:5d:e7:48:bd:af:7e:bd:c1:cb:99:cc:
bf:ac:c4:ce:75:5b:b1:6b:b4:78:9e:9a:97:22:52:2d:04:8e:
56:97:c3:41:7a:ef:cf:58:89:fe:7b:06:f3:e8:df:c2:71:de:
26:98:ba:03:1f:4c:5b:90:40:75:26:8a:4e:18:5d:3e:c0:f9:
66:ea:bc:e1:89:6d:27:53:f4:12:f8:51:5a:1f:dc:7e:49:eb:
7d:7a:0a:11:f8:5a:91:19:92:6d:25:02:75:32:65:69:1a:69:
0c:9e:4c:74:0b:0b:1c:67:fd:cc:60:a5:92:37:4e:4b:64:5a:
8a:ab:8f:8b:e3:95:49:11:92:59:f0:64:a2:ab:6d:82:85:ec:
82:45:f3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org