Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/EbOaJo88EaG8CzBk93dCnVYVIWU.roa
File: EbOaJo88EaG8CzBk93dCnVYVIWU.roa (raw, json)
Hash identifier: BSzDY1DNjLKkC52cGhDw9GuD38nErdHGD4I4U38bFHc=
Subject key identifier: 11:B3:9A:26:8F:3C:11:A1:BC:0B:30:64:F7:77:42:9D:56:15:21:65
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 105E
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/EbOaJo88EaG8CzBk93dCnVYVIWU.roa
Signing time: Tue 16 May 2023 08:36:06 +0000
ROA not before: Tue 16 May 2023 08:36:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 210.200.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4190 (0x105e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:06 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=11B39A268F3C11A1BC0B3064F777429D56152165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:d6:25:db:54:c6:3b:ec:f8:85:ac:54:ab:
33:49:b1:8e:9b:f9:3a:01:28:1c:1d:f7:be:72:bf:
0a:2a:f8:d5:c9:0e:ec:3d:e3:e9:0b:8c:bf:87:0a:
28:6b:2f:74:04:2a:d6:73:74:5a:c1:4e:00:7e:59:
50:37:2c:12:35:aa:20:0d:25:ef:29:73:b3:77:4a:
34:da:e1:6f:ed:0d:c2:19:00:a3:ae:65:97:68:87:
e5:03:a8:c1:85:97:cb:64:5c:9f:18:c3:a6:b4:23:
6e:6a:b0:85:28:56:7c:82:83:7f:53:d5:d6:7c:b1:
0a:20:9e:c3:8d:cf:5f:a3:2a:0a:50:c9:40:df:98:
2f:9a:67:26:80:49:20:eb:a5:b0:92:16:37:55:49:
f5:8f:df:00:3f:5c:ee:b7:8d:ca:ce:3d:3a:5e:08:
10:35:23:85:4f:c2:0d:4c:c5:09:14:b4:e3:49:d8:
8b:c8:3d:7a:5f:e3:63:fb:f8:1d:d7:ff:f7:95:29:
76:d2:99:cf:b6:b3:45:6b:bf:66:d8:16:9b:6c:2b:
a1:ee:6b:81:70:7a:a2:18:d1:6c:98:84:78:64:5a:
3b:1f:cc:15:61:fd:b7:0e:c8:ff:b1:47:8a:a7:8d:
b7:23:e8:d0:1e:91:aa:33:30:c2:47:fd:2c:15:59:
38:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B3:9A:26:8F:3C:11:A1:BC:0B:30:64:F7:77:42:9D:56:15:21:65
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/EbOaJo88EaG8CzBk93dCnVYVIWU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
84:09:2f:18:ea:d8:62:28:14:4f:2c:36:b5:07:0e:f5:0b:35:
92:c2:3f:2b:ca:0d:dc:46:1b:a7:5a:72:d2:c3:81:89:52:63:
b6:00:d0:51:0a:f1:d9:92:6a:28:84:7f:47:a4:b6:2a:86:c1:
d0:e6:ad:3e:00:39:35:38:a5:bc:ca:60:0a:89:96:6e:f6:5c:
b9:fe:79:c5:92:1c:23:b0:f1:3f:66:77:6b:cd:bd:f0:ba:77:
26:f5:be:f7:6e:6d:4e:b7:5f:d7:88:20:23:cd:10:3c:dd:54:
19:17:44:fd:27:df:38:59:8b:99:65:c2:2b:4d:1b:04:68:83:
57:53:54:cf:be:ab:d2:b9:32:ec:77:17:c6:13:38:64:a3:88:
38:b0:a0:53:94:0f:b2:0d:b3:be:bd:89:35:96:1e:db:4a:5b:
bb:b7:56:3d:20:bc:fc:62:59:18:f5:b3:9a:0b:c0:f8:2d:65:
0d:26:34:16:63:79:17:61:61:96:22:ae:15:76:06:2d:cd:ce:
70:7b:ed:88:40:d1:70:a2:36:16:69:7c:e8:d8:0a:ad:b4:57:
79:c6:0a:e6:9c:4b:28:a0:a1:e3:16:bc:4e:c5:6e:82:19:76:
ca:30:8a:69:e5:f3:37:52:ce:40:72:6f:79:70:17:fb:55:5c:
02:ae:27:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org