Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/IYYElY-4nRSsbptD4LbuA3kCvdA.roa
File: IYYElY-4nRSsbptD4LbuA3kCvdA.roa (raw, json)
Hash identifier: 7oqklyI6VIQnuFRgVvzUSpEB5SOExjLBGziKr/h2XE4=
Subject key identifier: 21:86:04:95:8F:B8:9D:14:AC:6E:9B:43:E0:B6:EE:03:79:02:BD:D0
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0966
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/IYYElY-4nRSsbptD4LbuA3kCvdA.roa
Signing time: Tue 29 Sep 2020 10:01:47 +0000
ROA not before: Tue 29 Sep 2020 10:01:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.200.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2406 (0x966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:47 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=218604958FB89D14AC6E9B43E0B6EE037902BDD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:05:3d:c5:d3:ea:15:ba:c7:6e:6f:6a:d3:
39:5c:dd:05:cb:cf:5a:81:8e:8a:54:a2:f1:a7:d2:
f8:f5:11:87:d4:da:f9:d1:72:2c:cc:4c:ea:85:37:
74:9f:21:5c:e0:87:49:2c:f5:07:6d:02:a1:6a:6a:
d2:be:f8:02:05:fa:45:d4:b0:9b:33:fa:b2:6a:ca:
11:bd:9f:25:f5:e2:66:03:d4:e3:dc:c3:24:02:c8:
8d:44:a5:96:7c:16:64:85:7e:b1:73:ce:ab:fc:45:
40:0e:3b:2c:61:c1:7d:1a:a4:ef:e7:7b:a7:67:ac:
39:f7:b7:01:c5:75:f4:5b:f9:40:f2:39:c4:a2:20:
f6:cc:3a:51:55:6d:30:a8:52:b2:92:f8:ac:6f:31:
01:58:8f:03:8f:3d:24:3e:3a:77:8f:5a:db:2c:91:
f3:f5:2d:b4:79:e0:ff:d7:20:90:4d:a9:17:cf:13:
e1:fb:d2:fa:30:ec:b3:f3:57:d4:74:f4:97:3d:24:
c7:df:f4:d2:2c:5e:d1:41:4d:12:92:da:2b:82:6a:
10:bf:85:7d:bc:33:91:17:79:7d:d5:37:86:15:9c:
41:2c:c1:58:c8:ca:33:c8:fa:81:e8:b5:90:a8:13:
a0:06:ca:a4:7d:77:14:4c:1d:ce:23:23:cf:6e:98:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:86:04:95:8F:B8:9D:14:AC:6E:9B:43:E0:B6:EE:03:79:02:BD:D0
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/IYYElY-4nRSsbptD4LbuA3kCvdA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.148.0/22
Signature Algorithm: sha256WithRSAEncryption
78:ca:a5:d5:ca:b1:79:01:62:b7:53:8c:9d:42:2e:f1:7a:ea:
f6:78:b6:a9:47:5d:b6:5e:3f:6b:70:57:d9:5f:53:92:72:8c:
d1:c4:86:a7:b3:37:c3:97:ba:b2:d7:67:c2:e1:8f:45:54:79:
00:a9:d2:e8:3f:32:18:be:d7:a6:0e:34:36:89:ef:b7:6b:41:
23:4b:d0:e2:13:17:ca:37:31:30:2b:26:32:56:4c:19:d7:fe:
42:5a:16:67:15:31:e2:0e:18:b4:81:24:f1:d7:6b:a7:fe:12:
15:04:43:3f:06:08:b7:6e:81:96:43:05:cc:a8:a4:57:f7:fb:
54:4d:54:d2:d0:44:48:36:ef:7a:fe:c2:80:35:ec:2e:16:6d:
88:7a:2a:47:bd:60:81:a8:09:99:2b:2b:14:ca:b1:29:8b:8f:
a7:56:bd:c9:97:b7:6b:c4:25:ce:67:be:f8:e1:fb:49:c7:e0:
6d:1c:47:91:6b:a5:65:ec:58:0b:6c:18:7f:b4:22:49:60:83:
40:e2:84:0c:9a:9d:61:4b:73:17:de:19:16:bd:38:f3:26:91:
5e:36:9e:1a:32:3c:e9:d1:be:a8:70:89:07:d9:8d:8c:99:38:
8c:e8:3c:0f:28:25:0b:a3:72:f6:3d:cb:5c:b4:47:ee:1d:f3:
39:87:08:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org