Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Jey6GBkjkjNNQsfgfJ75UgzfcPE.roa
File: Jey6GBkjkjNNQsfgfJ75UgzfcPE.roa (raw, json)
Hash identifier: SoM8zQt+U8B/uWzHcaEKMYz9gixh6HrmoZVUJETZHEY=
Subject key identifier: 25:EC:BA:18:19:23:92:33:4D:42:C7:E0:7C:9E:F9:52:0C:DF:70:F1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Jey6GBkjkjNNQsfgfJ75UgzfcPE.roa
Signing time: Thu 15 Sep 2022 02:40:13 +0000
ROA not before: Thu 15 Sep 2022 02:40:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.202.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=25ECBA18192392334D42C7E07C9EF9520CDF70F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:b6:eb:20:36:79:99:e4:13:98:4a:4b:8d:
c2:56:0d:c0:5e:07:55:a4:29:a8:80:2b:b3:16:04:
ed:94:c2:98:00:64:ac:04:02:f8:a1:ee:43:d3:e0:
da:a0:ab:b1:6b:59:73:7c:f1:9d:2f:83:52:02:13:
a2:8f:93:7c:93:38:77:72:40:0c:24:8e:40:6d:57:
22:21:f9:39:73:d4:0e:d3:ed:28:36:4a:19:96:58:
70:32:f1:f1:92:b4:7c:85:0d:68:c5:8a:72:da:9b:
56:95:d0:22:cb:15:62:02:02:b4:48:0d:fc:1d:ab:
41:c2:9e:9a:c4:d5:12:35:ce:55:c4:8a:5d:82:a9:
a4:6f:3b:da:13:62:2b:30:0a:51:cd:6e:66:b2:96:
50:26:d1:ed:2d:82:40:04:85:81:f7:71:34:ff:9c:
38:50:56:e4:65:6a:59:6b:c0:94:a8:af:64:37:8e:
7b:9b:64:35:e6:73:d5:40:c4:92:4d:b2:83:4d:6f:
1e:6e:e0:40:b3:53:4a:9c:25:5c:e0:64:a4:b7:b5:
e9:a6:ec:d0:6a:2a:69:6e:9c:e3:ae:c4:eb:c1:49:
52:23:f8:6f:78:3b:d6:c6:15:3d:47:cc:0c:f2:e0:
cd:85:c6:b0:f7:9d:62:61:b1:57:29:59:67:e3:dc:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EC:BA:18:19:23:92:33:4D:42:C7:E0:7C:9E:F9:52:0C:DF:70:F1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Jey6GBkjkjNNQsfgfJ75UgzfcPE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.192.0/18
Signature Algorithm: sha256WithRSAEncryption
3b:63:d8:57:59:e9:e1:4d:dc:4d:97:6e:b8:e6:f8:90:6e:05:
02:a7:19:80:69:d6:9a:6c:ca:23:69:64:c2:97:ea:55:42:a3:
b5:2d:db:45:39:a8:d5:d4:a8:e2:f8:ce:b1:68:5b:39:27:fc:
a9:ec:67:0d:07:3d:59:59:aa:df:88:17:7a:5e:10:d2:db:64:
01:e8:09:3f:0f:72:f2:d1:e7:5e:4f:82:e6:4e:f8:60:51:ed:
08:6a:16:dd:52:48:07:ca:ca:5a:3b:3c:2a:21:1d:96:9d:28:
49:4c:b1:0c:7b:ce:b6:aa:6a:db:48:d3:91:37:a1:f6:68:60:
30:9c:25:55:2a:d9:19:34:77:d5:b4:fc:c5:be:77:ec:69:62:
26:6b:d0:4b:45:68:ae:92:2e:cb:10:c9:d7:f6:0a:ff:cb:0e:
0d:58:34:36:17:3f:32:ee:46:99:7d:10:db:0a:e8:02:fb:f9:
f3:7e:ac:c7:1b:07:be:3d:bc:d8:6f:a8:49:05:ac:e6:6b:76:
cd:88:a8:e2:6a:80:ac:81:96:4a:05:88:55:cc:96:d0:b1:b1:
5b:83:d0:ef:b5:d3:8e:72:68:e7:72:90:ca:d6:97:83:6a:8d:
3e:ce:0a:9f:61:2f:d4:50:23:4e:58:2d:9f:56:76:eb:39:02:
e3:30:f6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org