Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/HPrPFP6QsJWF5tLgHwA7HtL-SNI.roa
File: HPrPFP6QsJWF5tLgHwA7HtL-SNI.roa (raw, json)
Hash identifier: PJvpNMaK1UcAtH1o1sghaVHRIx+X9aBE1BlHfA5ZScA=
Subject key identifier: 1C:FA:CF:14:FE:90:B0:95:85:E6:D2:E0:1F:00:3B:1E:D2:FE:48:D2
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 095F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/HPrPFP6QsJWF5tLgHwA7HtL-SNI.roa
Signing time: Tue 29 Sep 2020 10:01:45 +0000
ROA not before: Tue 29 Sep 2020 10:01:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24155
IP address blocks: 2404:0:6000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2399 (0x95f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1CFACF14FE90B09585E6D2E01F003B1ED2FE48D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:2f:c0:2c:71:f8:85:8b:d6:b8:94:e8:c9:
b8:93:d1:15:9f:6b:0b:64:2d:86:1e:3d:23:44:62:
da:a3:da:67:30:62:d4:53:8b:38:70:58:e1:b7:82:
0f:c0:28:39:7f:0c:b3:69:84:37:a5:df:1d:bf:87:
03:d7:22:ef:08:0e:22:43:aa:36:b1:8f:6e:92:79:
20:26:2c:a5:bb:aa:d3:49:26:ae:de:b5:e4:95:bb:
cb:6d:92:50:04:1f:39:7d:15:4d:58:e4:8b:04:d8:
90:7d:64:9e:cc:cb:ff:c9:cf:6c:53:47:3b:fc:b5:
c7:dc:1c:64:af:65:eb:ce:de:19:99:6c:9b:ee:2e:
ee:0f:9d:40:48:93:43:2c:8d:0c:34:38:a0:f5:e3:
5d:a8:f3:34:b4:6b:a9:e9:1a:8c:ab:07:bd:95:45:
f3:75:72:5b:86:31:f0:32:d1:76:1c:fe:b1:9a:bb:
94:fe:50:a3:c3:84:a7:e5:c1:6d:13:4d:d9:6a:02:
85:d1:93:67:92:90:f7:b5:04:ce:4a:c4:2f:e1:e4:
06:c8:c3:50:d3:a6:a0:2e:60:db:6f:02:7f:b8:90:
7e:35:f6:c7:f4:5e:5e:f3:00:1f:b5:e0:19:36:df:
53:44:f3:a6:47:89:e3:96:22:f3:d9:e9:9a:7d:62:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:CF:14:FE:90:B0:95:85:E6:D2:E0:1F:00:3B:1E:D2:FE:48:D2
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/HPrPFP6QsJWF5tLgHwA7HtL-SNI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:6000::/36
Signature Algorithm: sha256WithRSAEncryption
85:29:0f:50:65:9f:54:af:ee:01:86:23:47:64:88:fd:84:33:
62:fa:fa:78:dd:86:4f:34:74:dc:96:05:6c:a3:4f:ed:39:55:
15:65:8a:e0:ec:5b:88:2e:22:f1:7f:4b:aa:ca:fc:8a:b9:42:
dc:05:f9:5a:ae:07:bc:48:8f:33:10:f8:9a:d8:95:ce:49:5b:
b2:8a:94:f1:5c:47:26:46:34:bc:38:7e:ec:4e:92:a4:31:2d:
c3:65:ac:c1:5e:9f:f2:39:74:5e:b9:0f:dd:f5:f3:83:eb:15:
32:34:4d:5c:fc:35:75:5e:2b:a4:e1:9b:2d:65:1c:d7:c3:c5:
79:2d:b0:35:63:df:17:50:2b:0d:22:45:dc:bc:97:3b:81:b5:
ba:bc:ef:da:68:e6:84:56:c7:c0:0c:be:db:db:04:08:a3:37:
37:a6:1d:d5:76:00:9e:e5:26:fb:a8:02:2c:78:fb:61:59:d4:
fc:58:07:a1:71:ce:14:9c:48:65:42:7b:40:eb:86:5e:4d:ae:
d5:77:09:41:f9:5c:4f:3a:65:bd:3e:cb:34:31:18:0a:85:37:
20:84:a9:65:c0:cc:cf:aa:93:bb:1c:c7:4e:3a:f5:1d:c3:a6:
2f:41:37:1a:37:05:87:4e:2d:9a:ea:10:7d:24:91:fa:c4:74:
3c:e6:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org