Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/G2A9q1rjMxnTEn8L13kIY-cXxwY.roa
File: G2A9q1rjMxnTEn8L13kIY-cXxwY.roa (raw, json)
Hash identifier: 0Ywqft1jxB8sOobFHuFEJSjUEnGgjjXCjmPZCD11vkU=
Subject key identifier: 1B:60:3D:AB:5A:E3:33:19:D3:12:7F:0B:D7:79:08:63:E7:17:C7:06
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/G2A9q1rjMxnTEn8L13kIY-cXxwY.roa
Signing time: Thu 15 Sep 2022 02:40:30 +0000
ROA not before: Thu 15 Sep 2022 02:40:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.200.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1B603DAB5AE33319D3127F0BD7790863E717C706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:0d:c1:18:d6:e0:6e:82:4d:fc:1d:dc:a1:
da:7e:2e:45:83:6b:b6:cb:3a:de:c5:e5:02:d3:c3:
e7:9d:17:13:fd:38:28:03:2b:0b:17:dd:62:17:17:
d2:da:47:a8:89:e7:3b:fd:82:9d:9e:d0:48:c1:14:
dd:1e:ae:9d:d7:92:eb:75:2d:08:15:b3:19:03:54:
59:29:86:c4:a5:dc:17:bf:48:01:0c:08:78:7b:66:
be:20:30:e3:6b:97:a9:16:16:ba:e2:fe:6f:ed:38:
2b:1e:94:53:ff:6d:95:77:f1:dc:a9:cc:5e:36:08:
40:3e:2f:71:f3:93:96:11:0a:5c:cb:ce:15:9e:5a:
88:87:7e:29:43:22:54:85:26:06:4e:bd:15:5f:00:
b8:60:d0:d3:6d:08:15:0b:78:ae:ff:e6:48:42:2e:
dc:64:e0:0c:af:15:78:e8:51:99:c0:ac:dc:90:2a:
40:1e:b0:67:09:24:1c:84:bc:32:7f:7c:de:d4:22:
88:8e:52:22:7c:bb:04:7b:0f:5c:9d:72:4e:33:96:
78:cc:b8:eb:85:6f:5f:cd:39:3a:01:b8:79:fc:db:
59:a9:65:ac:28:08:52:d7:9d:dc:f1:6b:d1:1f:f5:
5a:ab:c8:f2:0f:06:90:d5:8c:1d:f0:74:8e:2d:65:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:60:3D:AB:5A:E3:33:19:D3:12:7F:0B:D7:79:08:63:E7:17:C7:06
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/G2A9q1rjMxnTEn8L13kIY-cXxwY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
3b:9e:86:23:aa:3c:bd:78:63:b6:09:db:ac:4f:88:bc:0f:62:
95:bb:4d:46:89:2d:b2:27:77:94:05:9e:0e:55:aa:b9:35:18:
72:21:f1:38:f9:09:71:0b:ce:96:c1:e1:69:97:b0:e1:e0:31:
c1:8a:7d:7a:c2:d1:13:01:0d:06:b6:36:d1:74:de:0d:b5:55:
2d:6b:49:e3:16:b3:58:cd:80:9b:bc:1a:92:08:31:28:fd:d2:
04:10:ab:be:e9:e1:b1:ab:08:22:84:1a:bf:63:f3:0e:00:43:
f5:77:ee:88:51:18:74:0e:cb:20:d3:5a:1a:13:e4:c4:78:89:
4a:98:1b:e8:8a:81:20:e0:03:bd:a6:8c:d9:42:00:60:25:e6:
90:64:32:e7:fa:d6:86:b9:fa:8e:11:c5:89:04:f1:10:2a:fe:
de:2d:a2:da:5a:ab:98:30:4c:ab:3f:1b:9a:25:11:9a:52:fa:
9f:fe:12:57:70:55:8d:d4:16:90:51:1c:a9:38:70:c4:ae:0c:
d2:59:aa:1c:b9:f0:07:ed:d2:2c:df:27:f4:cd:7e:cf:34:df:
a0:12:64:ef:36:a8:6d:08:b2:5c:76:1d:ff:07:da:ad:24:c3:
09:34:a7:47:8a:a9:d2:34:36:b1:be:ba:25:eb:af:0e:cb:14:
03:7c:16:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org