Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/H-xgT_x1zrW-3wGtvIuYPsimYWQ.roa
File: H-xgT_x1zrW-3wGtvIuYPsimYWQ.roa (raw, json)
Hash identifier: uthR78aRa5R1rkmTs1W7d93gCaoNMfQOnvP8uGWfIZQ=
Subject key identifier: 1F:EC:60:4F:FC:75:CE:B5:BE:DF:01:AD:BC:8B:98:3E:C8:A6:61:64
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C4F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/H-xgT_x1zrW-3wGtvIuYPsimYWQ.roa
Signing time: Sun 07 Feb 2021 11:35:39 +0000
ROA not before: Sun 07 Feb 2021 11:35:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 222.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3151 (0xc4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:35:39 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1FEC604FFC75CEB5BEDF01ADBC8B983EC8A66164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:54:62:c2:66:b2:6a:37:15:7a:f3:25:07:
24:82:93:89:c8:35:04:2c:e4:d0:21:eb:08:c7:bb:
76:f8:46:23:9d:c5:71:7b:e0:3d:1a:34:0a:64:ee:
c4:47:9c:00:90:42:22:02:1a:06:e3:78:8e:b5:c4:
f4:69:42:35:c1:c2:87:5c:41:44:f0:6c:68:6f:ba:
e9:4d:6f:4d:40:16:3b:66:8e:24:b0:d0:f6:2d:12:
9e:e0:fc:b3:68:19:8d:70:f4:37:74:32:b4:67:71:
5f:57:b7:23:06:db:e2:37:12:55:8b:91:e4:fe:a4:
09:b2:0c:90:f9:c5:04:62:0e:3d:dd:78:02:db:94:
39:c5:8a:3e:11:7d:59:0e:3a:4e:51:61:bc:cf:ed:
e2:27:01:5d:08:e5:9b:42:c8:ea:90:b4:ed:5e:99:
75:2b:93:8e:f3:fb:04:df:f0:35:9e:a2:81:81:5f:
33:63:f9:ed:62:00:9a:27:bb:ee:1e:f0:94:44:ca:
31:10:ac:a2:e7:fa:3d:e1:31:5b:81:d7:5c:b1:bd:
ef:d5:27:3c:f6:b4:a8:93:2f:97:b1:29:be:3e:70:
8a:28:ae:7b:af:8e:26:28:19:d6:c2:b6:63:ee:1b:
0a:58:6b:49:4b:28:d4:17:73:a9:0e:ac:ce:61:ca:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EC:60:4F:FC:75:CE:B5:BE:DF:01:AD:BC:8B:98:3E:C8:A6:61:64
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/H-xgT_x1zrW-3wGtvIuYPsimYWQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.156.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:f5:3c:fc:06:81:40:f3:26:66:68:31:fa:19:57:c6:e4:47:
62:fc:ea:30:ad:05:ba:d7:24:18:2c:e5:72:29:5b:2a:78:72:
d2:f9:f6:cc:fa:d4:30:a5:47:37:b4:46:6c:7d:d5:95:47:cf:
8e:ff:c2:16:3e:8b:c6:08:fc:e7:b2:52:6d:cc:85:70:53:fd:
89:4c:8f:66:ba:48:ba:12:3e:c8:74:59:82:63:19:5f:8f:78:
21:15:82:66:ab:7d:ce:31:da:f5:98:c8:19:77:ca:da:7e:ee:
a9:b9:ee:33:08:76:76:f5:85:82:73:23:06:a9:4e:25:5b:c4:
68:1b:fc:ec:9c:48:cd:27:79:7b:d0:41:38:53:20:78:b4:ea:
3d:d4:fe:5b:b0:23:28:21:0f:a4:21:03:69:01:72:dd:26:45:
67:cf:1d:91:05:a8:1e:23:97:e6:6a:cc:f8:62:02:33:3d:0a:
ce:92:97:b1:91:3b:d8:6f:c8:37:8a:7a:3f:9c:f0:e4:ec:f4:
61:12:69:c5:cc:8f:cc:50:68:20:1e:d4:e6:d9:ae:75:d5:40:
e0:d2:32:cc:59:84:a8:4b:5c:e1:e4:43:74:ab:2d:10:23:39:
22:b4:3f:23:32:9a:49:84:a7:f6:64:a2:b9:47:70:05:4b:38:
2f:2a:fc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org