Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/IGRz_eYlDLeugj_1xBNxEbfFors.roa
File: IGRz_eYlDLeugj_1xBNxEbfFors.roa (raw, json)
Hash identifier: JP6KZ//ArI2EYdmk6JpIYqfUvbjEUOh2mx84GMGKMfo=
Subject key identifier: 20:64:73:FD:E6:25:0C:B7:AE:82:3F:F5:C4:13:71:11:B7:C5:A2:BB
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E20
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/IGRz_eYlDLeugj_1xBNxEbfFors.roa
Signing time: Wed 29 Sep 2021 02:40:00 +0000
ROA not before: Wed 29 Sep 2021 02:40:00 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7482
IP address blocks: 210.201.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3616 (0xe20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:40:00 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=206473FDE6250CB7AE823FF5C4137111B7C5A2BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:75:58:f8:68:bc:b8:df:36:cd:da:fb:b9:
92:08:7f:2e:95:57:8f:28:ab:cf:87:e9:ee:e2:28:
ff:45:1b:7b:3b:80:9c:dd:c2:b7:d6:b9:d3:b0:60:
83:5a:3d:34:d9:fc:8e:37:80:ac:e3:ab:7f:09:a6:
f5:21:0e:db:84:02:ef:04:42:eb:54:99:61:67:72:
11:a7:db:7a:68:59:9d:d9:a3:47:fc:d6:b5:8f:a3:
90:5c:7e:86:fc:20:27:4d:72:0b:b1:82:74:09:30:
e9:93:4c:07:b1:d8:d4:ea:9c:79:f8:87:be:53:77:
f0:76:a2:b6:7d:6b:81:e3:71:b3:49:e6:55:01:98:
1a:00:d8:94:17:1f:00:13:cd:ae:1d:4c:79:c1:29:
56:eb:e6:ee:5d:3a:4f:ed:a8:fc:3a:70:bc:c6:9f:
46:31:b1:45:e2:b8:eb:ea:f6:22:84:b0:fd:ca:cb:
cd:81:7d:4b:c6:9a:d1:dd:14:a6:6b:c2:5a:e4:d5:
d0:1d:de:60:93:9f:ed:4e:01:55:65:f1:16:15:44:
07:5a:0d:d8:2a:8e:48:79:2c:bd:19:71:75:35:b9:
bc:54:6a:d2:d0:22:2a:a1:47:9b:7d:05:76:88:af:
a6:cb:05:7a:8e:16:42:3c:2a:30:93:5b:66:45:7b:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:64:73:FD:E6:25:0C:B7:AE:82:3F:F5:C4:13:71:11:B7:C5:A2:BB
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/IGRz_eYlDLeugj_1xBNxEbfFors.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:b0:c6:9d:f5:09:11:51:a8:98:80:0c:5f:c3:db:3e:3f:3a:
8b:b5:55:75:83:6a:3f:29:d4:3c:5e:74:54:07:a6:80:92:51:
2f:b3:79:4f:71:ff:b7:84:55:f8:27:c8:18:52:e9:1d:a1:ac:
59:e2:85:bc:08:37:b6:0a:66:53:c1:b9:59:bc:23:ce:44:ab:
b5:a7:e8:06:07:ee:1b:e5:11:b5:a8:b7:5f:2c:ad:00:29:1e:
3c:b3:b3:b2:ac:42:3b:68:20:6d:1d:dd:50:ed:f4:fd:d1:f6:
e8:99:c8:09:93:fa:51:ef:b8:c8:16:1e:b6:69:4d:21:8c:cb:
c0:6e:bc:58:99:0a:bd:b8:87:6d:69:b1:58:94:b9:d3:44:36:
d4:a2:74:61:68:fa:a9:2d:f7:75:ff:48:70:53:0a:d7:ee:ff:
57:18:67:6a:a7:ab:0a:37:31:34:2b:51:61:b2:b5:e6:3d:e6:
15:64:a9:ab:48:9d:47:52:59:7c:55:f4:de:b1:07:fa:d9:b5:
89:2b:da:d9:d6:22:bd:6f:08:fe:72:18:3a:b8:57:9f:bb:55:
e9:fa:72:4d:55:a5:6c:48:77:05:db:1b:09:9b:14:33:07:48:
7c:0e:d9:69:bb:5a:20:f4:50:b8:38:bc:9e:f8:be:94:33:c6:
03:09:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org