Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/GZQajuIyWK9ai_-sXnXMcKb2kVQ.roa
File: GZQajuIyWK9ai_-sXnXMcKb2kVQ.roa (raw, json)
Hash identifier: KqNogWWRLQhvpNnfcCaSb4/Uppn4KlDySWoYLS5C8+w=
Subject key identifier: 19:94:1A:8E:E2:32:58:AF:5A:8B:FF:AC:5E:75:CC:70:A6:F6:91:54
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0BDD
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/GZQajuIyWK9ai_-sXnXMcKb2kVQ.roa
Signing time: Sun 07 Feb 2021 11:34:07 +0000
ROA not before: Sun 07 Feb 2021 11:34:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131142
IP address blocks: 210.200.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3037 (0xbdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:34:07 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=19941A8EE23258AF5A8BFFAC5E75CC70A6F69154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:9e:d0:e4:6b:f2:37:94:e5:bb:14:2a:95:
a1:bd:fb:92:91:64:0b:af:7f:74:88:be:06:68:da:
85:ca:27:c3:2b:4b:1f:e5:62:64:33:09:90:f0:b2:
bc:e0:79:08:96:20:05:b7:b6:5a:5b:08:01:ec:6a:
87:74:a6:12:a1:51:5a:eb:1a:49:e0:b6:78:d2:fe:
54:e0:b0:42:54:23:9e:48:d3:9f:6c:b6:22:a8:a1:
63:1d:fa:79:ce:7c:e1:fa:e8:ba:57:60:b9:b8:f2:
eb:7f:0f:f2:41:a9:c2:11:a7:7c:81:77:4b:fd:54:
f2:a8:5c:3f:f2:58:95:84:da:70:c5:0f:24:37:1c:
5d:67:c9:95:0e:63:78:70:92:fc:54:e5:c8:cd:4a:
da:b2:b3:21:32:24:79:56:3e:b9:03:42:af:4b:66:
f9:64:02:4c:c9:ac:1b:3e:49:dc:e7:31:4d:72:cc:
5f:73:0d:7a:af:ad:d0:59:32:40:96:3c:72:d8:5c:
dd:26:aa:cd:f3:fe:6c:f7:ba:86:32:b4:4e:22:8c:
58:84:dc:6e:10:33:5a:65:4b:2c:8e:4c:7a:c1:f6:
f8:e9:8c:4e:ee:36:44:61:e7:6d:f9:0b:32:50:54:
b5:97:c5:3c:3d:99:1a:35:8a:9f:e1:1e:21:c7:3e:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:94:1A:8E:E2:32:58:AF:5A:8B:FF:AC:5E:75:CC:70:A6:F6:91:54
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/GZQajuIyWK9ai_-sXnXMcKb2kVQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.80.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:2b:8d:88:1c:3b:c0:16:43:55:01:e2:b1:01:ca:76:b0:74:
53:a9:6b:88:a3:a9:3a:ae:9e:f4:f1:a3:c5:d8:74:85:5b:f7:
c0:81:7b:66:30:60:9b:e9:d1:b7:4d:28:0c:93:2a:e9:8a:bb:
61:7d:aa:ee:f1:fe:1e:24:9d:2b:54:9d:68:92:2b:12:5d:14:
c4:d4:df:22:80:da:5f:51:83:ee:43:3a:0f:0f:a4:23:67:7a:
d1:a9:ce:48:ce:6f:2f:5a:7d:cd:c0:bf:1b:f9:77:07:13:ac:
70:4a:35:d4:6c:e3:98:d7:3b:01:7f:32:a5:e9:03:d1:0a:fb:
58:21:e7:49:da:e7:f1:7b:84:93:e1:33:6c:93:4a:6e:b4:e9:
be:31:69:d6:4c:27:53:cf:b8:9b:b2:0c:bd:a4:7c:39:d5:aa:
1d:98:6b:6b:79:e9:f6:12:25:03:37:51:bf:c4:52:64:af:4f:
a3:f1:12:5b:24:21:38:b6:99:25:2b:df:6f:11:72:90:52:56:
38:91:22:89:4a:79:c1:c3:f2:df:db:85:4d:19:85:6c:81:7a:
4a:08:c4:3d:64:ab:f8:eb:69:94:5a:36:b7:c3:37:de:a6:cb:
1f:22:e9:72:82:78:f3:c3:0a:e0:7b:d0:18:d4:4e:8b:e7:26:
9a:ac:19:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org