Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/IvXGFOjuc847isKJ4W_5DsQC4Vg.roa
File: IvXGFOjuc847isKJ4W_5DsQC4Vg.roa (raw, json)
Hash identifier: hGvjl7isjTV0nYSfxYomcf8+gzCAkLX/sDd/lUs75vc=
Subject key identifier: 22:F5:C6:14:E8:EE:73:CE:3B:8A:C2:89:E1:6F:F9:0E:C4:02:E1:58
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DE0
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/IvXGFOjuc847isKJ4W_5DsQC4Vg.roa
Signing time: Wed 29 Sep 2021 02:39:40 +0000
ROA not before: Wed 29 Sep 2021 02:39:40 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9311
IP address blocks: 210.201.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3552 (0xde0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:40 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=22F5C614E8EE73CE3B8AC289E16FF90EC402E158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:5f:96:f9:2d:b2:a1:b6:ee:06:62:a5:e5:
f3:f6:e3:f4:85:ac:65:94:6d:c0:52:f6:7d:fc:4b:
53:cb:dd:24:aa:f6:6c:d6:65:a8:61:94:8c:c2:39:
30:d2:00:9d:93:ff:ed:d3:9d:1c:34:21:5f:9e:3b:
44:f4:e9:53:65:b9:66:9f:89:f2:26:b5:3e:a4:c6:
6e:fb:62:9a:75:7d:9a:34:c3:c5:a1:7f:a3:ba:83:
c2:21:e3:87:87:0f:5e:eb:b3:0e:a1:2c:05:55:4e:
17:75:32:94:57:65:2e:43:e5:d4:a1:f5:fd:5e:39:
2f:bb:11:1f:73:a4:3b:75:e3:e2:71:c0:33:fa:98:
f0:df:14:7a:b1:99:9e:4f:77:43:7c:f7:eb:3e:cc:
15:23:86:40:f9:73:ff:89:b2:d0:61:8a:7b:e1:a5:
6e:c0:f4:0e:c0:9c:fb:c1:3d:4f:88:47:d4:17:99:
66:a8:9b:90:a5:ad:9b:fb:08:46:05:be:30:6c:90:
2d:5f:cc:8f:6c:30:2d:81:78:6a:54:dd:af:52:cc:
f9:6a:d7:c7:05:fe:57:b5:84:a4:55:7c:c6:77:6a:
e2:ee:26:7b:26:1b:4a:bd:d8:27:9b:2b:65:49:ba:
9b:b2:2e:fa:ab:98:06:74:5f:5a:f4:3f:dd:30:49:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F5:C6:14:E8:EE:73:CE:3B:8A:C2:89:E1:6F:F9:0E:C4:02:E1:58
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/IvXGFOjuc847isKJ4W_5DsQC4Vg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.76.0/22
Signature Algorithm: sha256WithRSAEncryption
57:32:07:ee:ba:ab:84:f3:a5:e1:be:85:49:2b:93:33:f0:e0:
a7:ff:1b:6c:75:7f:73:fd:7e:74:05:b6:7d:48:83:8f:f3:45:
f4:9e:9a:ef:db:21:cd:85:e9:44:02:66:7a:73:09:53:a1:83:
a9:3d:de:e5:c9:3b:ae:4f:17:d8:41:88:ac:c3:5b:d9:58:8b:
eb:74:9a:83:54:ec:13:18:bc:14:dd:10:9f:ca:86:73:9b:c6:
13:c9:1d:12:22:37:09:7f:a7:30:70:d5:9c:be:29:74:b9:d1:
09:d5:e7:38:df:b9:03:9e:83:8c:98:c4:12:34:af:8c:d7:bb:
ce:5b:af:19:6f:ec:d4:da:20:06:58:be:30:4d:da:2a:80:1b:
86:22:1b:d2:fa:d7:b3:fe:cd:fb:55:ce:0d:6e:d2:28:04:ab:
32:4a:27:fb:b9:f0:0a:30:98:53:27:e9:c1:b6:c5:df:21:e2:
50:45:20:81:47:66:c9:92:45:ab:6e:65:0d:8a:9e:e0:1a:a7:
37:38:5e:76:79:39:fb:14:85:6f:59:ed:e0:96:a1:9e:bf:4c:
26:15:71:e0:7f:54:02:e9:bf:44:c5:08:75:e7:b4:c1:01:f1:
5a:dc:ca:5c:ea:8d:8e:a4:cf:33:ca:0b:c2:45:80:71:4d:54:
6d:53:76:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org