Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/FO9Xc6x4xBi-t36UAYuRO5h-BvY.roa
File: FO9Xc6x4xBi-t36UAYuRO5h-BvY.roa (raw, json)
Hash identifier: td6oh7GtpumKCGDaMx+OELJMEy0mhp6AO8zHMJDv2fM=
Subject key identifier: 14:EF:57:73:AC:78:C4:18:BE:B7:7E:94:01:8B:91:3B:98:7E:06:F6
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 13A1
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/FO9Xc6x4xBi-t36UAYuRO5h-BvY.roa
Signing time: Wed 13 Dec 2023 02:47:39 +0000
ROA not before: Wed 13 Dec 2023 02:47:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 222.250.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5025 (0x13a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Dec 13 02:47:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=14EF5773AC78C418BEB77E94018B913B987E06F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:05:7c:ab:67:fb:3c:36:f3:84:b0:cc:ae:
63:5c:72:53:f8:5a:c1:a3:3d:31:1b:4a:00:20:51:
b9:64:fb:63:3a:2e:58:63:c9:ef:8a:46:b6:a7:80:
6a:48:2f:20:5e:fa:06:b1:d1:8b:aa:0b:23:a2:13:
fa:89:e9:21:f5:31:cc:56:50:84:bc:66:68:a9:5d:
a0:01:10:71:3e:1c:d4:9d:2f:85:1e:7e:9f:33:4c:
4c:e3:7a:8c:a9:64:1e:80:81:42:1d:ee:a5:0a:6b:
35:5f:65:77:a8:e3:6c:0a:ab:a6:ce:29:6e:de:83:
9c:23:40:02:ae:c2:89:fb:d3:75:dd:31:21:60:5c:
30:ea:db:9a:56:ef:35:44:ab:5e:4d:88:86:c8:04:
40:34:13:24:1e:f0:70:7a:36:b7:f5:16:c8:e1:1a:
32:aa:40:8e:3d:01:f5:58:6b:df:49:83:89:b9:fa:
fa:aa:fb:03:86:52:c4:20:dc:0d:05:13:16:0b:f7:
cb:78:de:40:05:ef:2d:3c:d4:71:02:11:2e:36:c7:
02:5c:c3:7c:a8:bc:f9:8a:88:91:0a:fd:cc:d0:94:
1d:75:cf:e1:f9:19:78:43:b9:19:8b:8c:5b:21:69:
f4:18:7f:5a:0d:97:d2:84:6d:26:c4:b5:49:35:ba:
18:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EF:57:73:AC:78:C4:18:BE:B7:7E:94:01:8B:91:3B:98:7E:06:F6
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/FO9Xc6x4xBi-t36UAYuRO5h-BvY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.250.0.0/18
Signature Algorithm: sha256WithRSAEncryption
b1:21:75:10:0a:00:90:ec:3a:a9:6f:d0:0d:34:ad:af:8b:95:
06:98:f3:cb:bd:1b:c4:06:d9:a1:4e:f6:ff:0a:f9:4d:c0:27:
54:a5:e5:9b:08:98:fe:f2:5d:dc:bb:d0:af:3c:33:e9:12:57:
d3:be:46:74:34:fb:f7:cd:9f:c1:90:53:d3:18:1b:3f:40:58:
88:71:b0:48:c6:f7:61:24:db:00:6b:8a:e0:21:a0:28:f4:7a:
4a:ee:4b:2d:fb:f0:71:ba:66:32:83:fc:6c:67:cd:d0:38:f0:
05:6c:1e:fe:a3:74:12:de:01:04:4f:76:d5:80:91:1c:fc:20:
d1:df:b2:d6:92:7b:22:bc:cd:e0:e5:e7:31:69:02:66:ed:f5:
d3:cb:3e:6b:82:ae:d4:96:bd:67:e5:7f:5c:d0:10:0b:6a:c6:
2f:a1:28:ce:ad:b3:32:85:24:65:62:92:ad:0d:70:c5:8e:39:
75:5a:1f:48:af:c9:fe:98:2a:f7:69:31:32:4e:ac:9c:8d:da:
6c:9f:01:3b:a8:16:23:07:e8:d7:15:fb:00:e6:2b:6f:0b:77:
47:f2:45:14:5b:36:30:ae:5b:eb:e1:10:7c:c7:77:db:66:e3:
e4:b5:cc:0d:d1:59:27:88:5e:0c:f0:8b:3d:c7:64:77:b3:11:
b4:37:04:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org