Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/FaySlcxlS3cY0gPKwTIhiu_Sbb4.roa
File: FaySlcxlS3cY0gPKwTIhiu_Sbb4.roa (raw, json)
Hash identifier: Qwh4+/fbOQ4Mccq+FxW+8El/DqR2SBryohf3Zwt3TOQ=
Subject key identifier: 15:AC:92:95:CC:65:4B:77:18:D2:03:CA:C1:32:21:8A:EF:D2:6D:BE
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12AE
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/FaySlcxlS3cY0gPKwTIhiu_Sbb4.roa
Signing time: Fri 01 Sep 2023 08:04:50 +0000
ROA not before: Fri 01 Sep 2023 08:04:50 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9311
IP address blocks: 210.203.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4782 (0x12ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:50 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=15AC9295CC654B7718D203CAC132218AEFD26DBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:27:4f:6d:25:d9:b6:6b:bf:de:fe:88:6b:82:
60:d1:cc:a0:99:fd:88:30:0a:32:13:43:b2:1e:88:
ce:8a:35:a4:bb:29:8d:fb:cb:95:6b:62:2d:73:b6:
bf:a0:04:ef:48:e5:e7:f1:03:99:17:bf:80:5e:fc:
93:3c:16:76:27:33:ec:d2:f4:10:35:03:17:57:d9:
2a:84:06:83:4c:d0:32:4b:9f:68:56:62:41:6b:e6:
a4:9f:e5:b2:28:98:b9:7f:39:c9:c1:8a:cd:8a:b1:
0b:76:35:cf:d8:cc:81:2c:e4:c4:92:2f:44:05:20:
7c:3e:81:31:64:97:4d:2e:33:a1:61:f0:87:a3:96:
e9:cc:90:38:46:a8:a5:5c:04:75:3b:23:50:d6:3b:
87:fe:1a:37:28:50:44:31:5c:1f:b0:22:64:2b:90:
03:d0:81:7b:5e:cd:23:17:d4:3b:e8:6c:75:27:58:
24:e8:7b:6a:6c:96:01:e3:ab:8f:ce:34:f3:67:ec:
33:a4:c7:57:7c:71:78:2b:3d:ae:ba:7f:46:c3:79:
21:47:c0:f9:c2:c7:d5:19:54:2c:24:47:4c:f6:52:
f5:f3:b4:f5:b0:b7:c6:71:b5:79:e9:c5:d0:c4:e1:
86:72:8f:39:59:4e:1b:c5:0b:4e:36:75:bb:af:f8:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AC:92:95:CC:65:4B:77:18:D2:03:CA:C1:32:21:8A:EF:D2:6D:BE
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/FaySlcxlS3cY0gPKwTIhiu_Sbb4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.0.0/17
Signature Algorithm: sha256WithRSAEncryption
26:51:94:a1:fe:8f:5a:8d:c6:66:29:ff:e7:d6:b5:b5:8f:c1:
70:7b:04:9e:36:47:b5:be:d0:05:54:3a:65:5d:e4:bc:01:8b:
0b:ca:dd:f0:d5:7e:fb:87:a9:c7:17:20:7a:38:cd:a5:f2:b3:
9c:7d:6d:62:bf:86:d8:f2:ba:4e:7e:7e:40:fb:e4:68:9d:65:
b8:bb:f5:68:1f:a4:02:4d:0e:38:2e:0d:0d:e3:71:7d:b9:5f:
71:df:3e:6f:28:b1:e8:46:8d:91:cd:91:3d:e2:0f:f2:ce:0d:
a9:68:0f:85:ab:0b:6f:e4:5f:dc:f3:e5:be:f0:1e:b6:bf:b3:
52:84:a5:c4:0d:1a:21:bf:7d:11:9b:c4:80:e6:de:21:1b:d7:
0b:d0:c9:d4:4f:6e:5e:b8:ba:39:6a:76:8f:ce:cc:01:84:5a:
d8:bd:3d:ab:19:4d:4e:45:4c:e4:ca:2c:c8:9f:3d:26:24:44:
f8:36:85:07:98:e6:fe:ac:03:bc:5e:b9:73:3b:4b:99:ee:b4:
33:7d:0c:8a:4c:8a:f4:69:a9:31:2c:2d:5c:0e:13:bf:58:84:
11:d4:74:13:15:07:d9:46:87:a3:79:93:78:fd:ba:22:59:62:
22:f8:6a:1c:fb:a0:08:6b:49:b8:5f:66:2d:e4:fe:87:4f:95:
a3:8a:14:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:50:43 2024 by rpki-client on console-fra.rpki-client.org