Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/K3VIt01oVETn19C4y3lf9q0u2D0.roa
File: K3VIt01oVETn19C4y3lf9q0u2D0.roa (raw, json)
Hash identifier: 3re2ecfgA7lxdBbNXWU4xi1t/AkvH+4l1qxBF9AP5t8=
Subject key identifier: 2B:75:48:B7:4D:68:54:44:E7:D7:D0:B8:CB:79:5F:F6:AD:2E:D8:3D
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DB7
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/K3VIt01oVETn19C4y3lf9q0u2D0.roa
Signing time: Wed 29 Sep 2021 02:39:28 +0000
ROA not before: Wed 29 Sep 2021 02:39:28 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7482
IP address blocks: 203.79.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3511 (0xdb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:28 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2B7548B74D685444E7D7D0B8CB795FF6AD2ED83D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:b3:16:7e:55:64:93:e1:fa:bf:00:cf:d3:
6e:f1:2f:1d:54:41:72:51:81:46:7e:85:a2:3a:2f:
86:43:a7:8b:34:56:d3:20:19:33:a6:ea:6e:ca:78:
35:f5:3e:b7:c5:b2:29:50:1f:a1:19:d3:14:07:a7:
04:ed:9e:0f:30:60:4a:e2:11:33:da:e8:a8:95:e4:
a1:5b:fd:c1:3b:ce:bc:44:fc:3d:a5:ae:0b:b0:e1:
9d:ac:d0:f1:04:8d:f4:3b:9d:4b:a8:a9:78:17:2d:
13:77:f8:ba:c2:2e:03:0f:7d:23:eb:90:13:f0:02:
0f:79:76:aa:a4:d3:4d:ce:07:36:10:8d:f9:ff:a2:
8a:30:33:e9:49:8c:53:28:2f:59:e6:23:01:e1:76:
46:fc:f9:09:97:60:3e:0e:95:b1:34:c5:cf:20:0c:
53:38:fc:25:45:dd:0c:65:1f:34:87:0b:c5:49:d8:
4e:35:a3:a4:22:b9:7c:91:7c:64:ea:77:95:20:0e:
42:b5:20:91:1f:6d:70:bc:5d:58:4f:5e:c7:37:f3:
0b:26:81:da:d1:a4:56:61:e6:77:40:31:e2:d3:ba:
90:d1:ed:cd:c3:e0:9b:1a:b6:b8:cf:41:c3:2b:96:
e0:78:10:ff:d5:94:a3:59:91:43:ee:24:2b:0c:3c:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:75:48:B7:4D:68:54:44:E7:D7:D0:B8:CB:79:5F:F6:AD:2E:D8:3D
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/K3VIt01oVETn19C4y3lf9q0u2D0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.128.0/18
Signature Algorithm: sha256WithRSAEncryption
54:ef:ff:5d:ca:2b:ce:f7:03:d6:31:1a:0e:26:43:af:ab:6d:
fa:8a:92:6d:a4:04:27:eb:e8:1e:95:93:37:35:6e:dd:7e:f7:
d0:78:1a:fb:64:a9:56:5c:b0:f2:97:d1:61:ac:a1:69:ae:41:
cd:35:e3:db:a8:f4:73:a9:cf:76:7c:d1:01:65:fc:c5:e3:68:
3a:fa:2c:d6:10:bc:1d:f2:ac:0a:e4:e8:22:c5:58:2f:c4:b6:
b0:a7:4c:b7:22:20:37:1b:32:57:fb:d4:e2:26:e9:8b:bd:60:
87:ee:86:d5:6a:8c:c3:82:7f:fe:20:6d:9d:79:24:80:9b:39:
f2:f8:fe:3b:1a:7d:fb:29:40:28:c4:f3:55:59:5c:2c:9f:93:
81:e7:a1:b2:1e:39:c3:e1:0a:77:8d:70:49:3b:dd:63:42:07:
3d:94:77:47:79:5e:82:30:12:e2:d6:67:a8:aa:13:27:45:88:
c8:50:2b:f3:28:b6:c8:34:36:50:92:43:70:d0:30:3c:e8:73:
51:fe:e0:59:53:36:5e:27:60:df:3d:09:16:b1:64:6d:df:51:
4a:c6:05:02:ba:c8:68:40:ac:0f:a3:06:32:25:7d:fa:66:53:
0f:86:7d:5d:e9:23:7c:95:2c:57:4b:a6:e4:9c:49:de:21:15:
4e:6a:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org