Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/IvUITr6Ti9X-aLn8U-_rkWNXKMM.roa
File: IvUITr6Ti9X-aLn8U-_rkWNXKMM.roa (raw, json)
Hash identifier: n8ZBqeJ20kltysQ7MKatys8IA+kngIRxTHMFspcAkck=
Subject key identifier: 22:F5:08:4E:BE:93:8B:D5:FE:68:B9:FC:53:EF:EB:91:63:57:28:C3
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/IvUITr6Ti9X-aLn8U-_rkWNXKMM.roa
Signing time: Thu 15 Sep 2022 02:39:42 +0000
ROA not before: Thu 15 Sep 2022 02:39:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 218.187.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=22F5084EBE938BD5FE68B9FC53EFEB91635728C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:df:11:5d:e7:67:cf:86:19:6f:1f:d4:6b:
87:1c:af:a2:3d:32:e3:00:e9:53:38:fe:c4:1e:55:
63:7a:3a:9d:2f:0f:9e:01:06:de:a7:a5:3d:d7:45:
a2:15:99:3d:ee:18:76:a5:d7:2a:ce:6a:99:e1:8c:
0a:e9:1c:0b:cd:fe:3d:a5:5e:fe:e3:dd:d9:15:49:
52:97:7f:de:77:32:d5:f8:7a:eb:49:0c:70:d4:9c:
95:2b:94:90:cb:e3:03:9a:2f:ab:eb:0b:a0:37:d7:
ab:d0:3f:ea:11:54:c1:14:1f:26:18:f3:f1:d0:64:
3d:13:f4:50:e7:89:ef:3f:1b:4e:de:60:a0:c9:4f:
e1:55:d6:bc:96:9d:41:04:19:52:a2:78:1d:d9:bd:
5e:a3:0a:0f:45:5e:9c:87:8b:28:3c:6f:51:5c:57:
1f:5d:20:64:dd:29:bc:49:e6:b9:55:d2:c9:41:bd:
f4:0a:a7:76:91:92:a4:5b:b5:a5:d0:df:83:72:6c:
18:92:73:15:98:0c:40:71:81:01:23:f8:03:a7:13:
81:d5:e2:42:2d:bc:11:0c:87:8e:f0:7c:f7:47:94:
e4:0b:6a:bd:17:b3:aa:c6:68:0d:d3:3b:f2:57:7b:
21:31:23:0d:7c:e8:c6:c3:b5:70:b4:3c:32:aa:13:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F5:08:4E:BE:93:8B:D5:FE:68:B9:FC:53:EF:EB:91:63:57:28:C3
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/IvUITr6Ti9X-aLn8U-_rkWNXKMM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.187.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b2:f9:9f:2b:55:1e:84:cd:39:ca:82:2e:b2:6b:47:d0:d3:b3:
d0:b0:05:02:7a:6f:d7:9c:ba:aa:3d:e7:d1:f1:58:8b:c0:01:
92:2e:98:4f:65:75:59:8e:9c:1c:dc:90:40:12:57:8f:7d:10:
f7:cc:44:28:ee:ac:0d:7d:c6:7f:a5:7c:a9:f7:93:b3:af:88:
2b:6f:83:bd:68:73:a3:d5:ae:16:99:a0:d1:4e:10:5f:ba:b9:
f9:d2:4a:c4:2a:ea:fc:97:55:38:79:2f:8c:4d:bd:93:a9:50:
a8:d9:f8:f7:da:f4:63:58:03:d7:29:9a:70:ad:1b:ce:0f:86:
2e:6b:bb:15:66:de:a3:50:41:6d:22:a7:76:59:c6:9c:77:75:
78:b1:5c:6f:e8:45:ae:0b:04:33:ba:1d:36:a2:30:2b:2a:46:
7f:5b:9c:a5:15:0f:6b:30:d6:a9:02:e5:24:67:b5:41:61:53:
6b:a6:f1:1c:f7:0c:f4:a8:e0:b9:c4:13:7c:4c:bd:a0:ff:45:
b6:c6:db:9e:10:7b:c9:b5:ea:2d:33:38:0b:30:1e:5a:2c:3c:
03:2b:dc:6f:04:14:64:43:9f:5e:45:61:2d:d7:96:0a:e7:47:
25:37:f3:53:5b:6a:19:b4:fe:3f:da:a7:5e:ae:7f:af:04:d8:
d4:c6:a6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org