Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/IxXLwwpyQiWQbjnioPVvBwWBY4Y.roa
File: IxXLwwpyQiWQbjnioPVvBwWBY4Y.roa (raw, json)
Hash identifier: iBKbBuWdsuPtUWyWY82kX47ZkyQlh5lku2c8OhTfkDk=
Subject key identifier: 23:15:CB:C3:0A:72:42:25:90:6E:39:E2:A0:F5:6F:07:05:81:63:86
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1290
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/IxXLwwpyQiWQbjnioPVvBwWBY4Y.roa
Signing time: Fri 01 Sep 2023 08:04:38 +0000
ROA not before: Fri 01 Sep 2023 08:04:38 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24154
IP address blocks: 210.202.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4752 (0x1290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:38 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2315CBC30A724225906E39E2A0F56F0705816386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:b6:69:0d:40:f3:dd:b1:b4:3d:42:70:23:
f9:16:7b:e9:6c:8f:96:a6:e6:83:8e:4b:ae:17:07:
c4:03:18:8a:63:fd:8b:9b:87:1e:3c:fd:05:77:48:
eb:39:cf:76:d6:cd:9e:1c:34:cd:0f:5a:33:63:23:
74:6e:72:97:9b:5d:ed:9c:1a:9b:bb:a8:56:fe:1d:
08:64:90:e6:ef:0a:c4:cb:3b:d7:b2:2a:49:45:8b:
2a:66:f1:3f:3c:8c:39:33:43:3d:c9:18:78:be:7d:
20:26:c8:0d:1a:48:e9:3d:d0:e5:86:20:f8:ad:8c:
53:3d:2c:7f:d9:92:a9:bc:0d:c6:2b:25:63:87:37:
eb:40:56:b7:13:03:89:12:0b:4b:86:55:e3:76:f8:
1d:a9:c3:ac:38:da:f5:ab:1c:21:f6:ba:8e:f2:b8:
10:d4:bb:b2:37:57:b2:50:57:48:49:c1:14:8c:43:
2e:5b:90:9c:93:79:21:b9:5f:56:5c:73:3b:5d:f8:
02:85:37:68:f8:04:ac:7b:f9:a6:1a:be:51:16:e3:
ea:f8:ab:bf:34:be:7e:f8:11:f1:74:34:e5:55:2f:
ea:8d:ed:4b:61:8d:15:64:85:2a:dc:72:d8:c7:76:
16:55:8b:0d:56:fa:b8:64:b4:ac:ce:51:9c:c7:27:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:15:CB:C3:0A:72:42:25:90:6E:39:E2:A0:F5:6F:07:05:81:63:86
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/IxXLwwpyQiWQbjnioPVvBwWBY4Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.0.0/19
Signature Algorithm: sha256WithRSAEncryption
82:1c:df:5f:f9:bd:e0:b7:2e:9a:6f:32:16:d0:07:70:c3:bd:
7a:9f:38:5e:9a:90:64:d8:d5:37:de:f4:01:55:f1:69:d6:04:
24:ae:b5:91:f9:1c:03:3e:47:86:d1:6a:aa:21:0b:fd:0f:59:
5e:8e:5c:95:d5:a4:cf:3c:05:02:27:a5:ea:c3:fb:f2:85:0b:
93:32:f5:11:b9:e2:41:35:00:aa:7e:08:d9:9b:83:be:5c:0b:
7d:a0:ab:1e:7b:40:f8:62:34:55:57:70:68:f7:32:c2:d8:50:
00:95:58:b7:1a:48:cc:a9:68:4b:f2:9f:8d:44:c6:cc:2b:45:
09:5b:a1:09:f7:f4:6f:c8:28:23:ad:28:5e:22:46:79:da:59:
cb:d0:dd:59:f9:a9:72:0b:f9:c7:85:1b:b8:db:a4:11:e5:9b:
83:06:00:71:ab:1d:4f:6b:e5:7c:00:00:88:57:b5:c4:ed:00:
e9:e5:e1:23:a5:0b:30:bf:83:f5:88:35:a7:a2:1f:cc:10:1d:
00:23:68:00:af:25:57:95:09:e2:3d:aa:19:4e:7e:9c:82:0a:
e6:0a:fe:27:8f:61:31:cd:66:b9:ac:ae:86:a0:c0:ca:e7:dd:
b6:86:7c:24:f0:d2:bf:36:22:3d:77:0f:52:57:7f:f7:27:81:
0f:39:3c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org