Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/FAKCoQSIn_RaTPrFsEd4qMGjCiY.roa
File: FAKCoQSIn_RaTPrFsEd4qMGjCiY.roa (raw, json)
Hash identifier: W0Ef5kCazRpNKCd1tK7C5QpOUjUe6gbR/B2FfIRkQXc=
Subject key identifier: 14:02:82:A1:04:88:9F:F4:5A:4C:FA:C5:B0:47:78:A8:C1:A3:0A:26
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/FAKCoQSIn_RaTPrFsEd4qMGjCiY.roa
Signing time: Thu 15 Sep 2022 02:39:49 +0000
ROA not before: Thu 15 Sep 2022 02:39:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 103.36.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=140282A104889FF45A4CFAC5B04778A8C1A30A26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:92:15:d3:cc:41:f9:e1:4f:93:56:46:dd:aa:
66:64:6e:30:c7:a3:bf:f7:f5:b9:4d:11:55:93:24:
d5:37:11:9a:ca:df:95:93:d3:da:d7:b9:0f:26:f4:
1c:65:ff:2e:cb:db:c5:78:aa:f7:be:0e:e4:3e:1f:
76:33:a0:f4:78:b8:7b:1c:8c:a7:c0:a4:b4:d4:2e:
1d:b2:f0:f0:ac:42:89:9c:9d:22:f8:83:2d:96:f7:
2c:fa:ca:33:fd:3e:83:6f:f1:f5:3f:74:f7:14:f6:
d4:92:33:77:6b:cf:7c:23:f6:cb:8b:53:53:eb:56:
05:90:3e:76:0a:32:6e:49:ee:f2:a8:28:ce:1b:88:
b4:3c:17:a4:e5:8e:14:23:66:c0:73:5d:51:c6:98:
47:84:f6:fd:1b:e7:8b:54:f1:72:9c:07:09:a0:de:
df:13:84:84:87:10:06:55:fe:19:42:7f:75:ce:e7:
6f:4c:e0:ca:02:63:f2:8b:08:32:11:d1:d5:71:31:
eb:32:a0:6c:06:81:c8:ed:d3:4f:e5:52:c5:0f:51:
45:13:43:1f:c8:d7:95:00:c3:67:32:4c:01:95:4f:
5b:55:16:aa:e9:f5:53:c7:7e:e6:f7:af:80:e2:aa:
14:34:00:3f:9c:83:f2:a2:36:44:65:dd:75:d6:e0:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:02:82:A1:04:88:9F:F4:5A:4C:FA:C5:B0:47:78:A8:C1:A3:0A:26
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/FAKCoQSIn_RaTPrFsEd4qMGjCiY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.116.0/22
Signature Algorithm: sha256WithRSAEncryption
27:4f:1b:a7:85:1e:0c:af:bb:59:66:f4:e4:9c:12:a1:1d:a6:
cf:de:c2:23:40:13:c2:b2:fb:35:9a:d9:2c:38:b4:bd:1c:ee:
cc:72:63:fd:2b:b8:10:03:54:f6:29:39:96:5e:0a:31:58:37:
49:36:c4:eb:46:a5:01:ce:34:f2:e8:8f:37:64:af:7d:3e:71:
a6:e8:bd:fb:94:4f:47:7b:10:02:f8:8c:be:3c:0f:90:70:f3:
d0:31:7b:a0:c2:b9:0f:65:e3:c9:fc:f5:38:2e:09:42:2e:da:
6d:87:55:71:92:da:f9:d1:c9:3c:65:e5:81:ff:83:c0:e3:90:
30:da:0c:50:13:5b:3f:a2:48:73:46:23:57:68:b6:9c:f4:2b:
bf:05:60:be:c0:d5:c7:c0:56:c0:d9:d4:31:38:87:2c:33:28:
2c:3f:9b:02:87:28:99:84:e6:86:59:0f:76:fc:77:70:f6:65:
ba:bf:52:2f:c8:08:61:01:dd:99:60:77:b9:0d:d5:e0:c8:77:
b8:46:af:33:f2:ac:b4:8a:f4:d2:a4:a4:33:08:2d:62:fe:e0:
de:28:89:eb:4d:ac:46:8b:f1:d5:44:1c:1a:80:32:91:29:62:
12:0e:e1:1b:ea:74:11:d5:9b:60:ca:8a:e4:97:8a:bf:9b:dc:
46:94:23:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org