Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/JfzckdTlb7TdgEAHUxTWa2CGU-Q.roa
File: JfzckdTlb7TdgEAHUxTWa2CGU-Q.roa (raw, json)
Hash identifier: KLDQsPe2IzTANJzgB2LUpY1HZpFdwF/hVbZR2COJ2T8=
Subject key identifier: 25:FC:DC:91:D4:E5:6F:B4:DD:80:40:07:53:14:D6:6B:60:86:53:E4
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0BED
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/JfzckdTlb7TdgEAHUxTWa2CGU-Q.roa
Signing time: Sun 07 Feb 2021 11:34:19 +0000
ROA not before: Sun 07 Feb 2021 11:34:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 210.200.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3053 (0xbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:34:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=25FCDC91D4E56FB4DD8040075314D66B608653E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:57:7e:12:04:bb:4a:ae:4c:2d:24:76:a5:
f0:59:09:9f:06:a3:9f:c7:3c:e5:28:68:6c:50:85:
21:17:6e:7c:0c:aa:dd:af:3a:89:a3:be:b3:69:0f:
f9:13:fd:52:65:26:76:a9:f1:be:22:b6:74:09:4e:
ea:49:81:6a:18:99:c5:80:34:15:46:f0:fc:84:1f:
6e:2c:b9:dd:9e:07:7b:ac:79:ce:7a:2b:bd:cc:cb:
4a:4d:b0:f2:02:ed:e2:23:c1:9f:ea:c4:92:95:84:
b9:4b:75:16:c3:46:f6:61:2a:b5:1f:69:f4:c4:1a:
f4:4b:a4:fa:82:c2:ee:03:97:8d:47:e4:be:08:5b:
51:e6:9a:1b:bb:c7:2f:aa:78:38:6e:84:3c:a3:62:
ab:67:eb:b9:9b:62:98:93:8a:f1:d1:a9:6d:13:32:
00:ba:1c:4c:b6:fb:3d:8e:df:86:43:47:76:2b:1e:
f9:78:1a:de:fa:56:1c:f0:7e:90:33:9f:6a:28:d8:
c0:cd:ab:94:36:36:47:e1:38:51:95:01:2f:b6:5b:
8e:84:d1:ae:0e:a3:b6:c1:cd:ed:38:cc:cf:c2:f9:
d0:4a:a1:9c:66:7a:d3:01:bd:b2:35:19:d4:89:e9:
be:bd:d3:6a:63:b6:95:84:7a:ea:58:0d:74:ff:fb:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FC:DC:91:D4:E5:6F:B4:DD:80:40:07:53:14:D6:6B:60:86:53:E4
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/JfzckdTlb7TdgEAHUxTWa2CGU-Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4e:af:8c:81:11:06:90:2f:b4:11:21:d2:2f:76:8f:16:e7:12:
12:40:fe:05:29:f9:78:c9:22:a4:80:16:4c:8a:70:7d:e4:a3:
a5:88:aa:cc:64:e6:04:47:2e:df:56:da:55:40:ec:af:00:db:
83:53:52:a7:d3:3f:e1:2c:84:9f:f1:78:ac:d0:f3:49:0c:83:
e9:df:93:c0:c6:6e:64:02:8d:7e:62:3f:e8:e1:fa:d7:40:53:
fb:b0:75:7f:fc:dc:08:d7:4d:26:50:b8:8e:a9:a3:aa:7a:7e:
f8:5b:4b:1d:67:b2:cf:3f:ab:2e:9b:1d:b6:8e:56:75:6c:eb:
9d:d5:ac:95:f1:37:8c:01:a4:a6:18:09:0c:51:1a:61:20:24:
b1:f3:54:27:12:17:a4:4f:a8:eb:e9:52:d9:82:b3:f9:1f:fd:
11:8a:67:94:96:cb:21:9b:e2:8e:88:f7:f3:32:62:af:1e:1f:
77:c6:56:d9:e2:ff:6f:cf:69:54:96:ae:7d:c5:9b:fd:38:7a:
f0:57:d1:54:30:69:ec:d6:9b:91:e2:25:1e:72:a4:a1:ea:7b:
65:84:20:d4:7b:a9:20:39:b3:25:cd:14:35:29:56:6c:87:14:
de:51:ee:34:29:9a:b1:da:42:01:bb:e5:36:22:75:7c:a4:74:
37:2a:e4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org