Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/KG0p3K8mVgbvKWAbmAe0IFKD-9E.roa
File: KG0p3K8mVgbvKWAbmAe0IFKD-9E.roa (raw, json)
Hash identifier: qVGqZNJRt7pdJVehvrBiatdzuXAc73zcROeEIyvx34I=
Subject key identifier: 28:6D:29:DC:AF:26:56:06:EF:29:60:1B:98:07:B4:20:52:83:FB:D1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0BB3
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/KG0p3K8mVgbvKWAbmAe0IFKD-9E.roa
Signing time: Sun 07 Feb 2021 11:33:36 +0000
ROA not before: Sun 07 Feb 2021 11:33:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24154
IP address blocks: 203.79.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2995 (0xbb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:33:36 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=286D29DCAF265606EF29601B9807B4205283FBD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:4e:7a:20:80:f8:53:86:5a:57:d9:d2:ba:
94:44:0a:fe:aa:21:b1:7d:57:c6:e2:79:a1:6a:7b:
20:62:a5:09:34:e5:d0:fc:98:89:22:33:bc:0e:ff:
31:35:37:15:40:d9:bf:2c:cf:c9:f2:19:b8:cb:83:
23:25:0e:bb:89:bc:8a:93:b8:fa:68:dc:08:c3:b5:
87:a1:29:ad:57:c0:30:ff:40:a4:9d:ca:36:be:a9:
bd:0c:12:38:f4:60:57:b5:6d:55:2f:ce:22:3f:c7:
73:8f:8b:d0:f2:e9:4a:71:7d:27:9f:df:d5:47:a0:
a6:06:38:29:bd:d9:33:9c:6c:3f:f3:71:fa:a6:a0:
1c:e4:fa:f6:48:07:fb:89:a1:ee:af:f8:0d:22:e1:
44:ce:a8:d8:bc:15:05:c5:a3:5f:f3:5e:75:8f:59:
10:36:26:f1:3f:db:a9:d6:39:07:c5:55:29:44:5c:
41:ca:37:f4:c7:95:d8:3f:8d:fb:24:e2:22:c9:86:
ec:77:0f:4a:04:ef:9e:9a:e7:a8:db:c3:b6:b6:1f:
6c:0c:73:4a:9e:0a:c7:c6:08:fc:63:a3:38:26:7c:
8b:ba:6c:c4:a7:09:e3:40:b8:4d:a4:12:50:a5:05:
8d:54:34:63:39:80:64:76:0a:16:58:67:b6:10:69:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6D:29:DC:AF:26:56:06:EF:29:60:1B:98:07:B4:20:52:83:FB:D1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/KG0p3K8mVgbvKWAbmAe0IFKD-9E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.200.0/22
Signature Algorithm: sha256WithRSAEncryption
91:6e:c6:7a:3f:4d:3b:f4:09:da:a1:55:3d:7a:84:ec:c2:ad:
64:bb:45:ce:86:bb:31:13:e7:48:13:d6:84:e8:d8:5b:18:32:
fa:b1:3b:ea:0e:6c:e3:05:a8:54:3b:a1:1b:27:b9:ac:02:4f:
5c:24:ef:c9:c5:a4:34:c1:95:bf:ad:d6:94:66:fb:d6:d5:02:
a3:f3:f1:67:5f:a4:ae:94:f6:41:1a:dc:4e:4c:63:e7:1a:20:
2d:da:54:3d:cf:f2:68:41:63:9c:58:1d:2e:77:56:87:09:54:
4a:8d:e6:8a:69:66:3b:f8:58:e2:43:c5:fb:8d:8b:7a:e5:d6:
ef:9f:c0:a4:0f:87:9d:ed:c9:e5:9a:fe:4d:20:54:22:30:32:
16:c0:01:37:e8:dd:65:79:a6:70:37:dc:4d:b7:f2:21:07:e1:
64:01:97:94:6a:50:90:c3:82:47:12:70:5b:ef:df:1e:b7:ba:
59:1c:30:67:8c:fe:43:cf:5e:2b:ed:e3:64:55:96:20:e3:2e:
d9:f2:60:dd:d7:2a:05:64:f4:40:f6:da:86:a5:34:dd:8b:45:
3b:7b:c8:01:7e:57:50:bf:f2:6c:c1:1c:b9:cc:80:9e:02:e6:
da:09:0f:f0:c1:94:6b:d0:82:55:9f:78:6b:dd:e3:7f:a1:e7:
b8:a2:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org