Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/L5PyBYn_A4_fVrWqdjcv81KRMsE.roa
File: L5PyBYn_A4_fVrWqdjcv81KRMsE.roa (raw, json)
Hash identifier: l3NtW4PpcJVIIVzvB7X8j8KpRlQNcT6t9p9UXs10ttA=
Subject key identifier: 2F:93:F2:05:89:FF:03:8F:DF:56:B5:AA:76:37:2F:F3:52:91:32:C1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1053
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/L5PyBYn_A4_fVrWqdjcv81KRMsE.roa
Signing time: Tue 16 May 2023 08:36:03 +0000
ROA not before: Tue 16 May 2023 08:36:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 203.79.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4179 (0x1053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:03 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2F93F20589FF038FDF56B5AA76372FF3529132C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:b5:9b:17:cc:2f:b3:f8:3b:a3:df:13:de:
87:43:22:72:42:20:2c:cc:1f:0c:6d:41:da:c8:44:
21:ad:73:cf:33:68:9f:e5:be:3a:54:49:5c:25:18:
f3:98:f2:e5:ac:7a:b6:a8:48:af:1c:df:a3:29:ce:
bf:66:e7:99:8c:a3:41:91:e2:25:87:ee:f9:94:cd:
28:dc:75:20:70:20:89:24:b2:80:07:c3:a8:4f:12:
a4:26:92:38:89:48:a3:b5:a0:5c:4c:23:90:ff:b1:
55:df:48:67:ad:f3:6f:42:f0:f8:3a:ae:a7:fb:d9:
7a:fc:47:81:1b:d6:d0:09:50:04:37:31:f7:d2:ba:
93:6a:44:2a:94:19:a0:70:f5:d9:6b:e1:76:a3:71:
bc:77:5a:10:6d:92:ec:6d:eb:53:57:aa:68:14:75:
2b:fe:40:73:81:72:de:4a:34:22:94:4f:b4:db:af:
6e:8f:4f:08:96:f5:18:03:04:93:5a:08:c9:1c:72:
82:16:e5:56:2f:79:b1:40:9f:44:d5:05:be:aa:96:
a0:92:c0:13:93:33:c2:60:65:4c:5b:d7:2f:4a:2d:
d0:2f:08:33:6d:8a:b0:f6:be:47:c6:d0:f4:5b:fd:
58:c1:6c:b9:dc:33:d2:52:3e:75:43:b2:d7:96:7d:
85:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:93:F2:05:89:FF:03:8F:DF:56:B5:AA:76:37:2F:F3:52:91:32:C1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/L5PyBYn_A4_fVrWqdjcv81KRMsE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.128.0/18
Signature Algorithm: sha256WithRSAEncryption
20:aa:6d:30:4e:f4:15:80:f9:2e:fd:a1:50:ff:44:dc:e5:e8:
99:ac:39:e3:77:d9:af:8c:f6:db:63:d5:50:5c:64:e1:a1:ee:
42:58:c7:00:25:f1:b7:92:d1:f1:19:dc:2e:64:c5:3e:12:c3:
ac:a6:9f:ee:a0:08:96:66:75:f8:a1:60:39:52:87:00:dd:71:
a6:d2:de:c1:da:b5:28:72:c8:8a:5f:39:4e:1a:f9:b9:06:97:
f1:5d:3d:2e:b9:df:d0:07:47:01:4f:a1:26:35:f3:20:1b:4b:
b1:98:c4:6b:45:7b:19:4e:4f:d2:ad:00:ec:7e:3c:aa:63:bc:
8a:e1:b0:cd:71:70:15:d9:93:b1:4e:77:af:29:32:71:5e:03:
d8:10:84:00:94:a6:1d:dc:8a:06:65:8b:bb:76:45:fe:f7:b5:
aa:7d:2b:10:ad:45:c4:c5:49:68:16:af:2b:9f:9e:72:bf:1b:
a9:c8:dc:1d:2d:a4:f0:7f:86:88:41:74:e6:87:0a:76:ce:a4:
74:e2:45:17:09:30:82:f4:ef:b7:11:2a:40:3f:8f:7b:b8:89:
94:f4:cd:cc:eb:5a:52:70:e9:bc:a2:e1:f6:98:0e:f8:49:83:
8d:2c:36:45:b7:bc:f1:8d:13:69:6e:c3:02:af:87:5a:55:d0:
8d:97:0c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org