Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/EPBIXdL82frC3eGQCa_H5RGkbvI.roa
File: EPBIXdL82frC3eGQCa_H5RGkbvI.roa (raw, json)
Hash identifier: PiGMHv6y7YCoc/rELpX2D6FYOs9BA1To5iGSJlK356s=
Subject key identifier: 10:F0:48:5D:D2:FC:D9:FA:C2:DD:E1:90:09:AF:C7:E5:11:A4:6E:F2
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E2F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/EPBIXdL82frC3eGQCa_H5RGkbvI.roa
Signing time: Wed 29 Sep 2021 02:40:04 +0000
ROA not before: Wed 29 Sep 2021 02:40:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 203.79.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3631 (0xe2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:40:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=10F0485DD2FCD9FAC2DDE19009AFC7E511A46EF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:99:64:34:36:8c:57:5d:bf:38:11:a4:ea:
49:97:39:8d:a6:39:37:8f:d6:f7:82:e8:ab:d9:0e:
06:58:7c:93:71:6e:58:9d:14:4d:4c:d8:92:72:90:
6d:74:5c:c8:55:e2:bc:a1:94:d4:b0:78:2a:dd:0d:
7a:35:36:29:13:16:19:e2:18:15:5e:2b:f9:83:c6:
9f:52:80:7a:d8:d8:fd:84:d9:d9:77:5f:55:4f:71:
0b:5d:88:71:d7:07:00:07:cd:0b:ac:ee:02:85:04:
10:0d:5f:3e:b9:55:2b:f0:84:f4:9c:d9:4a:1a:7a:
08:04:04:02:48:e9:3e:30:02:51:a7:99:ef:df:f2:
22:49:8f:26:16:b6:60:bf:54:b4:6a:5d:f7:1a:02:
d2:36:4c:bb:4d:1d:a3:b6:47:82:89:e9:68:59:a7:
a2:3e:f0:fe:43:dd:e8:bb:10:3a:8e:d8:3b:96:1f:
b2:2b:5f:77:f4:be:c3:01:01:eb:2d:b5:60:35:73:
36:3f:b6:18:01:35:df:35:e2:9b:dd:b0:cd:8c:67:
b4:b8:86:0d:47:c6:9d:33:7d:12:4b:92:6d:c7:a5:
39:9c:12:ff:99:77:ee:03:af:d6:a2:5a:27:77:86:
50:9e:54:70:04:4e:7f:9c:c4:fd:5f:4e:d4:aa:0a:
a9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F0:48:5D:D2:FC:D9:FA:C2:DD:E1:90:09:AF:C7:E5:11:A4:6E:F2
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/EPBIXdL82frC3eGQCa_H5RGkbvI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.251.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:11:41:f9:12:57:f5:91:39:cb:4e:42:d1:11:d4:10:37:a9:
05:bc:f9:0c:28:5d:6b:ed:20:8d:48:25:a9:27:63:e3:d1:ef:
1e:85:40:bb:77:dd:4d:7a:9d:b5:93:c8:f4:73:94:e2:b7:5a:
e7:68:e8:7d:60:31:e1:f1:9e:29:d4:dc:a9:97:94:35:c7:86:
65:6c:d3:67:49:72:27:4b:d9:bc:71:74:7b:ec:9e:16:2d:bc:
b3:b5:be:89:a1:67:4d:b7:ac:26:a2:3c:20:23:62:97:47:be:
66:bf:d6:ac:c6:20:b9:9e:07:6b:14:81:e5:c1:29:df:40:c0:
6b:89:ab:f2:be:5c:7a:a3:01:bd:1f:e0:76:a7:9b:b1:6d:ab:
78:4b:c7:f0:59:88:7b:44:98:11:f0:7f:ff:9a:f4:06:a0:90:
95:88:36:cf:57:01:b9:db:33:a1:e2:25:34:b5:31:52:b3:b3:
66:c9:df:27:99:06:00:f9:0a:52:11:e4:d0:47:71:6a:28:93:
4f:f5:b3:b7:a9:9d:09:40:b9:91:40:83:39:47:82:e8:6b:8a:
5a:0b:8f:3d:30:f0:d4:48:36:78:fe:34:25:ce:7e:ef:a1:b8:
bd:5e:33:d0:f4:f6:45:0a:78:3e:86:39:ac:b2:61:96:cf:02:
3c:8f:51:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org