Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/JNR1oJN_1IUgwkhTEWAF_JxZG74.roa
File: JNR1oJN_1IUgwkhTEWAF_JxZG74.roa (raw, json)
Hash identifier: SFpVnxesN52yzUcyEtE/EX6sN/asZ7Sp0FgtRhZkrj8=
Subject key identifier: 24:D4:75:A0:93:7F:D4:85:20:C2:48:53:11:60:05:FC:9C:59:1B:BE
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 108F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/JNR1oJN_1IUgwkhTEWAF_JxZG74.roa
Signing time: Tue 16 May 2023 08:36:20 +0000
ROA not before: Tue 16 May 2023 08:36:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 218.35.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4239 (0x108f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:20 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=24D475A0937FD48520C24853116005FC9C591BBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:99:2d:fa:b9:c9:b8:69:29:7c:68:a5:2b:b5:
43:88:8e:03:78:64:93:d1:a2:6c:98:25:c9:9f:34:
fd:79:d6:cd:1d:f9:4a:02:2d:64:66:7e:d4:84:f2:
34:74:68:21:45:0d:3f:92:54:04:93:67:74:0b:80:
4c:95:88:73:4d:a0:56:83:68:68:70:01:ca:70:3f:
f1:93:c0:bf:b0:69:f3:f9:d8:63:94:06:0e:30:3b:
32:4a:8b:79:57:12:3b:63:40:f4:e5:ed:cf:18:96:
cd:39:1b:96:e9:47:df:be:2d:42:2a:b2:a6:a2:0b:
3c:1a:61:f9:70:8a:c0:b6:df:75:cb:fb:d2:45:14:
7a:d0:19:cd:c7:38:47:d1:ff:31:5c:2f:e9:1e:00:
4a:4f:6e:43:1c:a6:67:be:df:84:a9:32:fb:0c:af:
cd:e1:96:b7:68:18:32:bf:1b:96:66:43:ee:8e:56:
17:7c:93:00:af:87:f2:9b:9a:e9:b0:f4:9d:c1:62:
0c:42:d6:ac:5c:c9:a1:71:cf:33:13:b9:ac:f9:46:
83:ea:3c:d1:43:da:72:5b:82:ea:d1:70:ca:58:00:
16:2d:73:24:8e:d8:c5:6c:3a:e5:6d:39:7f:96:93:
a9:e0:c7:41:aa:75:a5:b0:ec:e7:7a:b1:38:d2:6b:
de:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D4:75:A0:93:7F:D4:85:20:C2:48:53:11:60:05:FC:9C:59:1B:BE
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/JNR1oJN_1IUgwkhTEWAF_JxZG74.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.8.0/21
Signature Algorithm: sha256WithRSAEncryption
90:38:ec:37:91:14:d6:d2:27:c6:97:0a:61:ef:5a:31:f7:c1:
4b:0d:fb:93:ce:3f:c7:26:ab:4b:28:64:43:26:d3:e8:83:4a:
e1:0b:76:9f:d5:55:2c:50:f1:7f:f6:f2:fe:8b:91:25:5a:d5:
6d:9a:60:18:97:34:56:eb:cd:02:52:02:70:be:4f:6d:c8:4f:
32:a4:62:12:39:e9:b9:ed:29:3c:de:d4:2f:5e:ec:2d:8f:0e:
47:80:35:99:16:fc:3d:1a:e2:3b:5f:fc:37:e0:c9:06:ac:38:
1d:5b:8b:e5:95:6c:e4:a0:bc:82:f6:6b:6b:c6:9a:c7:64:83:
f3:74:0d:7c:3e:e4:e7:b2:fd:5f:a1:79:cb:9c:68:06:9f:66:
32:3e:59:df:e7:4f:04:5a:87:d6:19:5c:94:58:51:50:7a:c4:
49:35:e0:28:f2:63:1b:7f:7f:7f:c5:21:4f:a1:4d:8b:d3:65:
70:29:5a:ed:a0:57:bf:80:1a:63:1e:8e:0e:47:2a:f5:07:c0:
53:54:a4:c7:4c:e3:b9:b4:2a:08:08:f8:5a:e0:87:5a:7e:36:
fa:e5:33:11:7d:2b:52:82:4f:b3:9b:1d:e5:75:1d:b9:8b:a2:
df:f1:4d:ff:e6:dd:7a:3a:4d:98:6a:89:8b:74:d5:e6:e7:02:
fc:41:bd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org