Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/GOEUP0WtoU9eQ5mjQzyi8EsQaeo.roa
File: GOEUP0WtoU9eQ5mjQzyi8EsQaeo.roa (raw, json)
Hash identifier: ix8kP4Q1ItqFvA4xC6vCLaDXmZi0H6hAFlccBjSZTbI=
Subject key identifier: 18:E1:14:3F:45:AD:A1:4F:5E:43:99:A3:43:3C:A2:F0:4B:10:69:EA
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0CE3
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/GOEUP0WtoU9eQ5mjQzyi8EsQaeo.roa
Signing time: Sun 07 Feb 2021 13:15:06 +0000
ROA not before: Sun 07 Feb 2021 13:15:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 103.36.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3299 (0xce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 13:15:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=18E1143F45ADA14F5E4399A3433CA2F04B1069EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:10:4b:0d:43:2a:f1:85:67:ec:4e:0f:14:
48:72:0f:a6:be:dc:45:ff:a8:f0:2d:fc:a8:09:c9:
cf:de:e6:3c:ab:74:3d:3e:65:d2:3e:af:79:31:e2:
2c:12:15:b7:9f:65:56:0b:8a:07:55:77:16:87:43:
d5:4c:da:23:1a:93:32:f3:d3:0e:16:92:13:9d:7c:
a4:dd:d8:59:5e:d1:1b:b9:a8:0b:de:59:54:71:f5:
4e:31:94:4d:8e:56:39:34:ae:9b:f0:f8:6f:c4:23:
f2:6d:9c:b8:6b:16:55:9f:45:ba:a9:bd:f0:cf:8c:
79:5c:74:4f:17:de:d8:f1:92:8e:dc:e1:eb:f3:52:
14:78:fe:f1:3e:96:6f:ab:9b:11:ab:a9:02:69:6c:
8b:cb:d7:a3:d3:b8:18:f9:5f:7b:b5:ee:0c:72:c3:
ac:16:23:34:e4:c7:88:35:bc:fa:20:37:e0:25:02:
4c:d6:30:03:87:01:11:d1:db:17:53:08:89:7a:07:
f6:51:34:e7:91:cb:9d:40:0a:1a:c1:05:bc:a1:a7:
66:49:5e:7d:a5:d9:8a:61:cb:50:fd:68:7e:0b:d9:
0a:98:ac:e7:1b:27:a3:07:58:84:71:f8:ca:8a:33:
ff:91:27:b7:59:66:11:8b:33:25:3c:c6:12:94:c7:
f7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E1:14:3F:45:AD:A1:4F:5E:43:99:A3:43:3C:A2:F0:4B:10:69:EA
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/GOEUP0WtoU9eQ5mjQzyi8EsQaeo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:b5:d7:1d:36:ed:57:ea:0f:c0:88:de:9f:8b:c9:a2:eb:a2:
76:38:b9:27:5b:80:cc:aa:10:6b:b7:8a:e7:00:ab:10:33:23:
24:0b:03:71:42:8e:0c:f1:7b:4d:e7:99:c8:04:08:32:bc:9d:
49:01:45:5f:6d:e2:b0:e2:06:bd:6f:fc:23:81:16:90:b4:09:
78:b1:09:f8:b3:ba:52:2d:96:8d:86:da:d2:b6:6a:00:47:e7:
59:ac:f7:8b:c4:57:4d:71:90:d2:99:cb:ee:cd:38:18:e4:43:
5d:25:9d:d1:e0:90:a2:f5:f1:2f:ec:53:bb:15:cf:1b:d1:9d:
15:af:11:f0:75:b5:79:1a:b1:6d:05:b2:f1:64:38:15:2c:a3:
8d:d1:ce:39:2d:2b:2c:4a:81:ac:c2:73:28:50:a8:96:1f:1b:
90:47:42:69:47:ab:cf:41:70:2e:45:50:16:db:3b:75:fe:c4:
77:db:f6:d8:65:37:aa:63:3c:c2:4d:e5:ce:3b:78:40:80:95:
20:24:ec:a4:94:2b:62:8f:63:06:59:a5:95:44:c8:e2:99:82:
81:8a:64:0c:13:85:b6:79:31:2a:b4:84:1f:d2:50:ea:b7:c3:
ee:60:44:7a:79:32:b4:f4:59:f7:cf:d0:1d:ad:57:ae:ed:ed:
f8:50:cd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org