Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/KM4Bxd9KZGNFcJArlHd2wf6K3e8.roa
File: KM4Bxd9KZGNFcJArlHd2wf6K3e8.roa (raw, json)
Hash identifier: 1WwfNTXH/SU8bo6vTxkO25sTWns7uA3IoLwhaM4bX5Y=
Subject key identifier: 28:CE:01:C5:DF:4A:64:63:45:70:90:2B:94:77:76:C1:FE:8A:DD:EF
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10BA
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/KM4Bxd9KZGNFcJArlHd2wf6K3e8.roa
Signing time: Tue 16 May 2023 08:36:33 +0000
ROA not before: Tue 16 May 2023 08:36:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 210.201.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4282 (0x10ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:33 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=28CE01C5DF4A64634570902B947776C1FE8ADDEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:a5:c4:72:79:43:ab:f1:af:10:cb:76:f3:
a8:0f:a1:23:c6:b1:a4:9d:77:94:2d:99:fb:01:a6:
66:64:46:d4:f9:00:f3:2b:59:95:76:ce:20:2a:ec:
23:a1:0a:c2:1a:f3:ef:a8:00:19:f4:1f:ce:38:e6:
77:d4:9b:66:eb:0c:fa:ce:06:59:30:f9:92:59:f5:
48:c2:06:4c:ab:81:48:61:17:d2:3e:90:e5:54:97:
0f:53:2d:a8:be:29:16:6a:73:2e:51:8a:89:3e:33:
2e:82:f9:fc:33:7e:ea:22:5d:22:e8:16:cc:3f:12:
33:a3:a1:b4:59:a9:41:89:03:c8:cd:b3:65:ba:b0:
1a:d0:d9:7f:46:db:53:5a:de:ff:a9:f4:5f:50:54:
d2:0f:bd:bd:73:15:98:93:09:78:8d:79:82:0f:ee:
2b:9f:09:cc:1e:da:f2:76:32:61:a2:80:81:68:f3:
20:4c:23:51:07:52:c9:a3:86:87:11:f8:66:dc:7d:
e6:23:42:66:e5:b1:fa:34:56:d5:a2:f4:42:2e:dc:
23:7f:0e:75:cf:db:31:9c:1b:89:ce:27:86:d2:79:
b1:d0:f4:91:02:8a:b9:51:25:ce:80:d6:7e:9b:bb:
c6:66:03:15:3d:14:e9:c3:0d:2a:7a:93:74:6d:c9:
62:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CE:01:C5:DF:4A:64:63:45:70:90:2B:94:77:76:C1:FE:8A:DD:EF
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/KM4Bxd9KZGNFcJArlHd2wf6K3e8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.60.0/23
Signature Algorithm: sha256WithRSAEncryption
23:d4:6a:57:33:cb:66:72:56:bd:32:70:a3:4c:e0:14:0c:0d:
36:3f:de:69:a2:43:08:b5:c4:29:b8:5b:b2:f0:c1:69:c5:25:
45:fd:ed:45:28:1b:a8:16:bc:ea:34:3d:4c:56:82:24:a2:58:
90:7c:2e:dc:8a:3d:d8:78:27:d6:d1:97:a4:f1:2e:af:33:0f:
be:b4:28:0b:bf:83:ee:5c:0f:80:6c:59:e2:bb:02:73:33:07:
a1:f1:cb:a9:81:4a:25:71:52:37:01:b2:eb:b9:96:31:cf:da:
d8:e3:7d:f5:16:cf:5a:7e:17:d2:79:e2:bb:e4:f3:cd:21:a5:
95:fc:b8:fa:33:53:cf:1d:78:e0:a1:01:ae:b9:a8:9b:b1:a7:
0f:31:0a:de:a9:1b:f9:29:98:07:61:e6:c3:3c:f2:ff:bd:43:
ac:ab:fd:36:47:26:6c:63:64:56:60:0e:8a:5e:d4:89:bc:71:
1b:d4:89:06:6d:05:47:60:c5:42:b5:0c:e3:f2:07:1e:65:d9:
05:8a:4b:8f:aa:ad:f4:5a:17:2f:ae:26:c0:a9:9c:6d:b0:67:
88:19:db:74:af:da:02:23:98:a9:91:07:63:15:7a:c4:c0:26:
da:b0:0e:14:d9:d6:8d:ed:26:e9:dc:a8:d3:50:e1:58:c8:65:
1b:0e:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org