Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/DgvXjlBTO6BonkoGhD1NFe04GJY.roa
File: DgvXjlBTO6BonkoGhD1NFe04GJY.roa (raw, json)
Hash identifier: D8JrAbi0xCHRzffAZs59qZgVAxOjPieamRtqSSVkIoM=
Subject key identifier: 0E:0B:D7:8E:50:53:3B:A0:68:9E:4A:06:84:3D:4D:15:ED:38:18:96
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 091B
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/DgvXjlBTO6BonkoGhD1NFe04GJY.roa
Signing time: Tue 29 Sep 2020 10:01:28 +0000
ROA not before: Tue 29 Sep 2020 10:01:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 203.79.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2331 (0x91b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0E0BD78E50533BA0689E4A06843D4D15ED381896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5a:16:07:af:13:e0:31:11:8c:ad:b1:2f:29:
0e:06:f2:c7:89:e7:f2:21:1e:8c:05:e7:b3:ce:de:
3e:23:df:16:a6:c0:e3:53:da:08:9d:ee:43:95:b5:
52:41:98:fb:a0:0f:4c:f9:f0:66:bc:0b:92:0c:26:
f8:14:50:81:5e:86:76:1c:d3:c8:c3:6c:c1:1b:70:
e3:65:84:6b:8d:46:60:39:71:45:63:fa:a1:05:55:
df:a6:a1:be:e9:3a:a9:45:c5:65:e6:17:11:c0:ba:
73:f0:a8:87:48:09:e1:1c:79:6b:58:2b:fe:52:63:
bc:61:ac:c0:6e:92:95:ed:ab:e1:c3:28:d0:cb:d0:
38:0e:6a:6f:4b:5a:f5:d5:1b:08:f7:ac:3a:92:c7:
57:e9:63:5d:83:25:7e:7a:02:c0:91:40:77:9f:fc:
c4:dd:fc:14:70:7c:06:c1:c3:ab:73:b7:fe:fb:9a:
f4:4e:4c:13:b6:95:ca:1d:01:50:6e:f7:a4:2c:8d:
58:51:46:0a:e7:df:9a:12:07:e5:98:48:21:8b:56:
ec:a0:5b:68:fc:79:d1:da:9e:8b:61:4e:a0:97:9b:
00:57:cc:7e:19:5b:e6:d8:36:9d:fd:1f:c3:a1:0a:
f4:fb:09:a3:5e:27:25:e0:91:1f:f8:5f:78:04:40:
0d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0B:D7:8E:50:53:3B:A0:68:9E:4A:06:84:3D:4D:15:ED:38:18:96
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/DgvXjlBTO6BonkoGhD1NFe04GJY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.235.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8a:aa:36:02:69:b4:6f:44:8f:9e:73:73:d6:76:4b:52:dd:
e1:b7:32:a3:4b:72:11:f5:e5:9b:31:a0:04:ff:6a:4e:15:57:
a2:77:18:28:70:ed:82:c2:e9:de:26:79:29:aa:4f:2e:66:70:
32:f7:df:d2:e9:6c:2a:c1:a8:cc:70:17:37:f9:78:ff:b0:4c:
29:34:71:67:48:97:53:aa:96:3d:fe:f3:a8:9d:99:ef:41:49:
69:42:a8:b5:8f:c7:83:50:8c:85:98:c2:4b:4a:23:77:e4:89:
51:37:22:e5:66:36:7b:af:84:3d:6c:8e:cd:00:75:9d:eb:5e:
2f:90:95:dd:0b:d1:8a:7d:e7:59:6b:ae:dd:4e:74:3d:52:6c:
48:bb:c4:80:9a:ea:99:5e:bb:a5:f3:85:3d:e2:56:35:bb:d0:
a2:ce:70:0e:31:c3:a4:30:c2:34:9d:f8:b8:b3:94:84:b3:d5:
ce:64:57:56:60:27:58:ce:55:b1:18:9a:f5:e1:3b:90:ff:56:
50:d2:04:e9:ac:0b:58:3c:95:86:e8:44:6c:31:d0:8d:8c:6b:
23:b2:1a:fe:07:58:5f:5b:ad:82:e7:dc:71:ea:02:b4:6f:9a:
54:68:0b:0a:46:52:fc:88:3c:24:37:fc:f1:cb:55:08:9b:0d:
95:fa:8e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org