Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/JDSattdBzJf8z-n8jKKP-FYlhFs.roa
File: JDSattdBzJf8z-n8jKKP-FYlhFs.roa (raw, json)
Hash identifier: jVBSCbAoc0YPtWxgng1jf8eDj4rcUOU+xgOqYEhtOM4=
Subject key identifier: 24:34:9A:B6:D7:41:CC:97:FC:CF:E9:FC:8C:A2:8F:F8:56:25:84:5B
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0BD5
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/JDSattdBzJf8z-n8jKKP-FYlhFs.roa
Signing time: Sun 07 Feb 2021 11:34:02 +0000
ROA not before: Sun 07 Feb 2021 11:34:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 210.200.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3029 (0xbd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:34:02 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=24349AB6D741CC97FCCFE9FC8CA28FF85625845B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:82:4d:8e:03:8b:d9:11:62:6d:91:4b:20:
17:64:67:75:78:6f:36:42:df:e8:50:5d:60:da:69:
64:a5:c7:33:d5:ee:fd:99:47:6f:d2:78:76:46:9c:
69:59:59:f6:37:f2:96:58:12:0d:45:3f:4e:2c:0e:
fd:7c:fb:21:c5:c2:7c:11:d5:ce:25:8e:6f:17:9b:
a9:3e:65:f9:8a:10:a4:eb:21:ab:62:02:94:4a:0f:
74:46:d1:ac:70:37:a2:20:29:77:a9:d2:83:44:e7:
28:2e:a7:fc:c6:07:4b:39:d6:fb:c1:f9:cd:e4:9f:
f4:8f:2c:4a:8e:f4:a4:5a:42:3e:4b:b7:ce:da:e2:
85:91:be:0f:1b:4c:3d:dd:51:de:6f:88:74:47:dd:
ab:f2:b2:e9:82:a6:9c:31:6e:ea:77:52:a9:30:d7:
db:f7:56:57:30:34:48:4b:d0:ee:21:de:8c:b8:46:
04:d8:04:b4:2d:bd:ee:21:70:8b:06:6f:42:03:04:
ec:b5:6b:82:55:f9:a9:cd:5f:d2:6e:d2:6d:5b:09:
7a:c2:78:56:a8:36:95:c3:c2:ab:60:a3:cb:4b:24:
d4:54:c1:53:10:44:fc:bc:c0:44:e2:60:ee:57:c8:
bb:05:65:e4:ba:c4:37:a0:fb:41:55:21:0d:02:ed:
16:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:34:9A:B6:D7:41:CC:97:FC:CF:E9:FC:8C:A2:8F:F8:56:25:84:5B
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/JDSattdBzJf8z-n8jKKP-FYlhFs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.17.0/24
Signature Algorithm: sha256WithRSAEncryption
60:76:b7:c7:bf:89:6a:de:4b:67:1e:1b:2e:61:f9:5f:4c:aa:
08:36:10:3e:30:ef:1a:b2:3a:fb:05:1e:c1:6d:a3:95:23:ae:
16:80:a9:e8:b1:07:51:22:b0:ea:3f:83:fe:ac:0d:ae:7b:e4:
2e:d1:fe:85:38:ef:55:c3:d9:1f:45:53:0a:75:b4:cd:44:36:
73:bd:c3:53:13:5e:98:38:5c:b9:7e:6b:c5:fc:d5:80:c7:7b:
da:38:6b:3a:e5:d3:a9:71:be:35:f6:22:6b:ec:c7:48:5a:23:
fa:42:80:89:98:76:57:8c:9a:cc:55:fe:3a:18:38:11:0c:7f:
77:72:48:b5:8e:33:80:b7:a4:eb:61:11:9f:18:38:e8:ff:24:
3c:e8:f5:f5:ac:d4:f8:c7:19:43:75:1c:8d:31:b9:08:67:41:
f8:ea:a3:c4:b0:3d:e4:2e:5e:ac:81:6e:49:d9:e6:79:5b:fa:
06:24:62:55:de:5e:ef:6e:0c:cd:9b:79:88:3f:b7:0c:a5:99:
46:d7:d2:4e:5b:25:db:92:db:a3:ed:24:00:d1:c8:a2:bd:d0:
f3:b4:37:2f:89:7c:2d:b7:03:80:29:d5:c8:58:c2:05:14:60:
d2:8e:b3:79:2a:06:6e:23:c1:95:de:ca:ec:d0:6b:8f:bd:f8:
10:6b:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org