Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/E7I-iZcSAKT_-GFQ0kjhXzOcngE.roa
File: E7I-iZcSAKT_-GFQ0kjhXzOcngE.roa (raw, json)
Hash identifier: Zye/lprAeopTcSL8TIteJZOJwzkBk15ugthvkCBa280=
Subject key identifier: 13:B2:3E:89:97:12:00:A4:FF:F8:61:50:D2:48:E1:5F:33:9C:9E:01
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 124B
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/E7I-iZcSAKT_-GFQ0kjhXzOcngE.roa
Signing time: Fri 01 Sep 2023 08:04:17 +0000
ROA not before: Fri 01 Sep 2023 08:04:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 203.79.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4683 (0x124b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=13B23E89971200A4FFF86150D248E15F339C9E01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4e:33:e0:7f:77:7d:ca:98:70:e3:58:4e:d0:
ff:c9:df:44:42:fc:6f:b6:e1:3a:94:52:2f:26:7a:
ce:ba:4e:e8:21:13:e2:a1:b8:df:25:8b:6b:08:dc:
ed:4f:53:4e:b4:49:e8:3c:14:6e:9b:51:ac:07:15:
08:6d:bc:b7:ea:23:4d:4f:35:a0:6e:fd:4c:81:56:
b0:79:64:3c:aa:d1:1f:6f:e7:a6:b1:55:20:3c:28:
9f:8f:11:0a:36:be:e4:cf:f3:46:1a:97:31:7b:a0:
8b:4e:b8:31:e8:99:de:bb:a4:7d:d5:97:50:19:8e:
27:ea:f5:e3:ac:b7:0d:c7:f4:87:63:41:cc:e5:ce:
9c:9e:dc:a1:cc:70:a2:5f:ff:89:aa:48:c5:b0:98:
8b:ce:d6:43:f2:b8:9d:ff:a2:8b:56:f8:77:2f:77:
6c:0e:ad:99:7c:46:66:c6:19:ed:1e:e4:6e:7a:1a:
6a:03:60:d4:8e:77:00:59:e6:bd:12:b9:b3:ff:bb:
77:b8:4f:91:af:58:c6:0f:3d:55:43:82:00:f4:a3:
2a:58:52:49:f4:41:2f:0a:e4:af:d6:32:15:b0:71:
8d:29:35:25:b0:88:fc:11:f4:ec:84:15:83:86:82:
06:41:a2:cf:b2:5d:04:3b:b6:73:90:99:b1:4e:92:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B2:3E:89:97:12:00:A4:FF:F8:61:50:D2:48:E1:5F:33:9C:9E:01
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/E7I-iZcSAKT_-GFQ0kjhXzOcngE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.192.0/22
Signature Algorithm: sha256WithRSAEncryption
31:f8:23:90:52:f5:ae:5b:bd:0f:1d:02:5b:f3:7e:2c:06:d8:
d2:97:17:ac:9b:78:a5:31:81:ee:2a:cb:6f:59:01:c4:67:03:
e9:f8:30:16:44:2f:73:61:40:61:d6:be:29:cc:01:8b:9c:e5:
9d:ff:9c:cd:a2:ef:07:49:21:03:76:9f:de:ec:61:0c:84:b8:
7f:e9:31:12:13:e3:58:d2:5c:57:f0:3b:82:09:99:5f:7c:1c:
75:87:33:08:3d:b4:bb:a3:4f:58:d3:c2:4a:e7:94:0b:a4:40:
ee:61:a6:18:f9:e3:a6:bd:97:11:8c:3e:5e:4c:79:62:92:66:
6a:0e:13:f9:5b:09:66:db:10:9c:11:de:47:8b:fd:0e:81:71:
56:c6:6d:4f:83:5e:10:fb:15:fb:49:a0:04:d1:5c:11:5b:28:
4c:38:90:ed:4c:45:86:1a:e1:8c:55:b8:6c:40:4b:c5:1d:ba:
88:60:e1:8f:a8:88:16:3e:da:78:5e:ed:08:dc:65:9a:71:44:
b0:7e:1d:6b:63:27:58:53:9c:54:ae:46:1c:ad:cc:55:d8:6c:
b5:8e:12:c4:ad:a1:27:b2:db:9d:56:12:3a:b7:93:8c:9b:25:
22:e7:9f:3f:07:70:71:23:90:2b:36:3d:ad:c3:25:ad:2d:a5:
bd:6f:b2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org