Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/EGhG1Z69hD3bsDYhGHTThgGz7FY.roa
File: EGhG1Z69hD3bsDYhGHTThgGz7FY.roa (raw, json)
Hash identifier: WmUs3P3RY3+Ytt9fXrkiOhKxwFtyWrHJT+YcjCuO7Qg=
Subject key identifier: 10:68:46:D5:9E:BD:84:3D:DB:B0:36:21:18:74:D3:86:01:B3:EC:56
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0970
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/EGhG1Z69hD3bsDYhGHTThgGz7FY.roa
Signing time: Tue 29 Sep 2020 10:01:50 +0000
ROA not before: Tue 29 Sep 2020 10:01:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131142
IP address blocks: 210.200.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2416 (0x970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=106846D59EBD843DDBB036211874D38601B3EC56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:43:49:50:9a:80:cc:bd:e4:d6:c4:8f:41:
a5:2b:8a:99:c3:20:de:97:b5:3e:d6:2f:0e:c8:94:
bf:a3:a2:0c:96:c6:59:81:5b:f6:cd:9e:3f:e0:36:
de:f3:08:8c:de:78:e4:86:72:3c:01:96:ec:c5:a5:
43:ea:d6:fc:66:91:e3:e1:c7:7d:19:36:14:88:86:
0d:04:e7:04:7a:c2:e7:e3:f9:ed:f7:81:4d:e8:23:
5a:c3:40:c5:b5:20:f1:5d:41:98:9c:28:97:3f:1e:
52:78:18:70:34:f6:a2:fe:07:d0:bd:3c:0f:5b:41:
4e:4a:c2:c3:15:5e:da:3d:f2:ba:75:ed:b4:ca:ba:
01:f5:ab:32:39:77:be:67:de:8d:1a:54:a8:00:ee:
e7:fc:1a:21:44:16:f8:77:d7:06:2e:7a:68:a5:00:
ce:4a:96:88:cf:f8:75:b2:a0:64:40:bb:95:82:9f:
0e:af:b5:27:d6:c6:a0:ff:ca:bf:08:bc:49:9f:fb:
dd:9a:ee:55:e6:52:9f:aa:d8:1a:c7:29:c1:e7:cb:
e5:8c:13:9e:e3:05:d2:08:88:2d:d9:3e:45:54:0a:
d7:ba:c1:15:aa:e6:de:96:90:83:15:4d:7c:c6:de:
c4:7f:ec:b7:6c:4e:87:0d:fc:fb:92:6c:6d:5c:50:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:68:46:D5:9E:BD:84:3D:DB:B0:36:21:18:74:D3:86:01:B3:EC:56
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/EGhG1Z69hD3bsDYhGHTThgGz7FY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.64.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:d5:39:93:21:f1:7c:6e:53:11:cc:e9:ed:9d:0e:93:69:69:
43:fe:68:87:9b:0f:a3:9f:d3:5a:84:d7:d2:66:99:e0:a7:5a:
c4:5e:2e:c2:3c:8c:e2:e6:d2:b0:3f:97:46:66:46:17:f8:79:
79:3f:fb:c0:32:82:9b:e9:ef:c8:65:f4:d6:b2:97:99:cc:84:
76:70:dc:41:0c:f8:fe:c4:d9:0d:7b:f2:21:bd:ad:85:d1:c5:
0d:c9:26:8b:43:4a:56:c8:95:9e:d3:24:b1:d8:78:4b:aa:47:
b0:12:d4:e1:c6:a9:7e:a3:9c:86:9a:01:42:88:01:3c:98:e9:
41:af:b7:54:92:97:70:f2:27:83:a6:e5:31:a9:2e:ab:02:2c:
86:41:94:2b:82:88:e8:3b:7b:49:9a:a2:aa:20:2e:74:2e:88:
53:bc:ae:6f:88:25:41:97:5f:95:1c:53:29:b0:fd:34:50:20:
bb:f1:5a:87:b2:2b:67:ef:ce:3b:13:7c:e2:59:68:8d:67:94:
44:e5:a5:0f:88:2b:41:a9:88:fd:b9:30:85:e0:3e:12:e8:09:
29:0e:d0:88:b4:e6:84:39:8b:cc:57:14:80:cf:75:a5:fa:a3:
4b:62:03:db:92:3d:31:26:82:39:bf:5b:2f:40:81:de:56:4b:
63:7a:73:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org