Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Jbj2jEdb1QXJ0EGcFnP2EtewJ-s.roa
File: Jbj2jEdb1QXJ0EGcFnP2EtewJ-s.roa (raw, json)
Hash identifier: p3PecF6Phf/XjVq4FAJgX2eFT5qdE6Fb8vOb/lpYjwk=
Subject key identifier: 25:B8:F6:8C:47:5B:D5:05:C9:D0:41:9C:16:73:F6:12:D7:B0:27:EB
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0979
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Jbj2jEdb1QXJ0EGcFnP2EtewJ-s.roa
Signing time: Tue 29 Sep 2020 10:01:52 +0000
ROA not before: Tue 29 Sep 2020 10:01:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.202.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2425 (0x979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:52 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=25B8F68C475BD505C9D0419C1673F612D7B027EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:40:72:a8:d6:f9:bc:66:5a:5c:e2:0d:bc:
d5:e5:04:f4:35:f0:6a:54:9a:4c:a9:fe:44:3a:7a:
67:09:d8:36:01:4d:c3:d1:84:fb:b2:99:9d:83:ab:
13:8d:14:e6:ef:5a:f5:c7:4b:fc:5a:44:41:a9:ff:
70:bd:e4:1d:d4:66:ad:74:54:fa:a7:1c:a9:48:93:
da:10:69:0d:86:8f:09:84:9e:b0:27:cf:d9:a2:8c:
51:04:40:c9:4d:d0:c5:fb:74:6f:4c:98:e3:63:69:
a1:1c:09:bb:1a:ee:26:ea:33:3c:b5:33:be:33:2b:
52:8a:5d:d9:5b:1c:1b:b4:37:1b:a1:d6:9a:73:b0:
31:f7:b3:8c:ed:1b:f0:32:64:fc:18:4c:57:f2:a3:
52:4b:bf:5d:04:69:5d:db:62:5f:d1:e9:f0:3b:5e:
0b:bf:28:ef:b3:27:0f:82:28:78:93:d0:c3:8b:b6:
4d:30:74:4d:ea:01:ef:cb:3a:8c:59:be:90:29:00:
93:11:0d:94:0d:62:7d:bb:53:be:9e:20:43:33:d9:
9d:7d:bb:f0:d9:fe:f2:39:2c:eb:03:7d:c2:a4:5a:
a8:22:ed:e5:6c:f7:28:88:37:f1:97:d0:d9:92:67:
58:11:49:85:05:e4:7d:69:1d:4e:d1:1d:1f:ba:13:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B8:F6:8C:47:5B:D5:05:C9:D0:41:9C:16:73:F6:12:D7:B0:27:EB
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Jbj2jEdb1QXJ0EGcFnP2EtewJ-s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.0.0/19
Signature Algorithm: sha256WithRSAEncryption
76:04:ff:6b:79:66:4f:2a:df:0c:db:68:69:58:69:5c:b8:f9:
92:8e:4f:a5:c9:17:35:d3:0a:7c:be:86:8d:cc:4b:63:89:01:
a8:56:7e:9f:85:83:b9:5c:98:36:71:b9:02:38:de:27:4e:6b:
93:94:79:8b:ab:da:1a:26:95:c0:0e:3d:1a:02:a5:5d:cc:6e:
91:f6:b3:41:d1:51:62:fa:6d:3c:b3:0f:e3:7a:17:b0:f9:9c:
c9:86:18:94:05:4d:1c:27:c2:fd:93:ca:fa:36:7b:cf:96:c0:
f6:bc:e1:7e:ec:eb:45:4b:cf:3c:10:2d:c4:72:41:74:ff:06:
ee:7a:54:78:f6:6b:33:52:d0:d9:4f:fa:bb:db:a0:b2:41:16:
1a:39:f9:d6:37:e7:3a:9b:67:ee:ba:d9:a2:15:b0:b9:a5:85:
1c:7f:cb:26:6c:8f:d9:58:44:1f:a0:f1:b2:f2:18:0c:47:80:
bf:2b:0e:07:29:34:ca:bc:92:6c:83:39:fc:c2:44:c6:e2:c6:
96:01:8c:02:9a:59:b5:28:89:b4:6d:44:3f:82:51:d0:66:99:
2e:59:b4:b1:20:6f:15:10:b7:29:d1:1c:e2:e8:b1:d6:0c:f9:
09:2b:cd:d8:ac:80:6a:a0:d9:4f:e1:4e:75:7c:f1:41:4d:00:
4e:75:9b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org