Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/GjstuEGbSZwAg8zEDQR2DZQhQ9w.roa
File: GjstuEGbSZwAg8zEDQR2DZQhQ9w.roa (raw, json)
Hash identifier: LSwqRk9pd63Fypb/VLfrst6knyfv6y/05IWC+hkXdYA=
Subject key identifier: 1A:3B:2D:B8:41:9B:49:9C:00:83:CC:C4:0D:04:76:0D:94:21:43:DC
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1266
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/GjstuEGbSZwAg8zEDQR2DZQhQ9w.roa
Signing time: Fri 01 Sep 2023 08:04:24 +0000
ROA not before: Fri 01 Sep 2023 08:04:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 218.35.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4710 (0x1266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1A3B2DB8419B499C0083CCC40D04760D942143DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:29:39:d0:44:82:52:af:3d:29:99:01:28:
95:67:d0:fb:22:a2:25:0e:5a:68:ce:9c:b3:4a:a2:
32:45:7a:95:cf:dd:65:48:e4:bd:53:ee:5a:a1:06:
53:32:3b:92:78:bd:e1:b0:e0:b5:e0:a7:f8:7d:42:
26:c1:f2:94:39:b3:7f:f5:27:a4:5b:4b:d7:5d:ff:
e5:f5:a3:db:40:70:52:d5:7a:2a:0f:ad:82:cc:b2:
96:c3:cb:31:0a:99:77:17:51:3d:b5:c7:fe:74:28:
e9:a3:bf:5d:d5:db:93:21:cd:cc:19:b3:25:be:9d:
2f:02:47:4e:2a:cd:19:7a:69:39:bf:ce:db:f9:9c:
c6:08:eb:dc:21:3a:4b:75:67:41:6c:37:44:a9:a6:
cd:8b:e9:34:13:fc:12:e7:ce:ea:47:74:fb:ff:0f:
67:9b:d0:78:dd:3f:1f:8f:1d:5a:d0:c4:29:fc:68:
8f:6a:47:99:3e:59:eb:e2:e2:a9:ab:98:ba:93:89:
1d:6a:d3:b1:fd:fb:76:47:69:45:fd:1c:6f:72:cf:
a4:a8:c7:28:07:f5:1a:b2:e1:8b:fa:4c:91:19:40:
f6:11:7b:6e:96:8b:92:dd:44:08:35:54:c0:bd:b0:
91:63:22:12:ef:00:59:d9:a4:5f:02:81:10:17:44:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:2D:B8:41:9B:49:9C:00:83:CC:C4:0D:04:76:0D:94:21:43:DC
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/GjstuEGbSZwAg8zEDQR2DZQhQ9w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.0.0/21
Signature Algorithm: sha256WithRSAEncryption
b9:33:48:4e:fc:11:46:6c:10:a3:ba:55:58:1f:20:83:04:59:
48:12:43:ad:50:72:0d:ef:0a:cb:55:de:ab:d1:51:51:07:b6:
92:ae:61:58:ed:7a:db:e4:22:e2:28:35:51:6f:c2:ed:35:87:
0d:2c:d4:2f:d2:1f:1a:e0:bb:47:23:1b:0b:bd:47:74:73:87:
34:24:6f:16:25:0e:7e:9e:20:ed:34:51:f3:f9:98:8b:cd:ce:
d8:38:0b:e9:75:b6:10:ad:78:0a:f9:07:97:82:2a:09:c7:27:
9f:cd:8e:46:53:8c:34:65:bd:96:06:ba:d3:65:44:c2:c3:e1:
06:c2:9d:aa:ed:c8:54:f6:e8:ba:78:5c:1d:68:b5:11:8c:01:
96:01:62:29:4d:bc:80:25:b7:05:e7:5f:ca:27:12:af:e7:4b:
31:69:79:ad:8e:6f:2d:e7:f1:03:db:32:66:1d:2f:bc:b4:7f:
5e:82:84:f4:96:c6:55:dd:85:c3:9d:8a:2f:36:b2:76:3c:06:
6c:f9:2e:90:1e:cb:ef:b0:fb:8d:00:42:3c:4b:9a:48:e2:4c:
b1:4a:73:62:df:0b:0e:9f:81:72:a1:9a:4f:dc:2d:32:a8:9f:
75:15:19:da:ed:50:a4:f0:cf:ac:26:98:ba:2b:63:79:db:5c:
8c:f7:57:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org