Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Ll8D0tN47u4rmvvzxvtmr5mJoBY.roa
File: Ll8D0tN47u4rmvvzxvtmr5mJoBY.roa (raw, json)
Hash identifier: VHhXjG4xaBwcpyi2kmMNqgjSj+ni4I/R0TswiZztmn4=
Subject key identifier: 2E:5F:03:D2:D3:78:EE:EE:2B:9A:FB:F3:C6:FB:66:AF:99:89:A0:16
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Ll8D0tN47u4rmvvzxvtmr5mJoBY.roa
Signing time: Thu 15 Sep 2022 02:40:32 +0000
ROA not before: Thu 15 Sep 2022 02:40:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.201.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2E5F03D2D378EEEE2B9AFBF3C6FB66AF9989A016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:7f:06:e0:5d:fe:87:24:cc:80:da:97:a7:
b0:ac:a6:f0:cb:6c:ce:2e:d6:1a:1f:63:b2:91:f4:
b0:56:b3:77:29:62:d7:0d:16:aa:08:14:c3:b0:3f:
29:7f:a4:f3:e3:1e:45:7c:62:b2:aa:7f:3d:44:53:
17:b2:55:66:c3:ca:df:f9:d8:1f:a7:08:46:c5:a1:
14:a4:f9:0d:a7:f6:26:de:38:16:ce:2f:13:a5:45:
2a:b9:ac:70:53:c7:e5:46:ab:d4:b1:ae:2c:0d:a1:
37:21:1f:69:2c:f1:6c:37:7e:94:97:4c:3f:06:7b:
04:ea:67:52:1b:ec:99:03:9a:b4:ca:e0:c7:a5:2b:
50:c1:51:7e:44:28:e4:75:01:c3:95:ae:d8:1a:1c:
36:31:7f:52:4a:5a:fe:72:3a:1a:db:c6:64:38:78:
03:16:d8:4b:0e:d4:dc:9f:54:7c:9e:25:77:2d:ec:
c5:ba:5a:5b:f9:22:6c:04:58:d3:85:5e:0a:bf:54:
8f:0f:06:6d:24:33:0c:c3:d2:0b:65:35:1f:f3:b1:
82:bd:37:1d:90:d3:b7:1a:e5:0c:83:d6:97:41:72:
be:82:3d:f9:0b:85:85:11:7b:66:d9:27:48:6c:bf:
e5:31:df:c3:88:dd:23:e6:16:bc:cc:37:30:f8:62:
ab:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5F:03:D2:D3:78:EE:EE:2B:9A:FB:F3:C6:FB:66:AF:99:89:A0:16
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Ll8D0tN47u4rmvvzxvtmr5mJoBY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:82:de:84:55:d8:10:c0:76:c5:80:72:6d:09:e7:be:4b:02:
05:f9:59:59:d1:b8:6b:fc:93:db:6f:90:de:08:c4:3b:ee:d1:
10:d8:ad:67:57:d0:1d:68:e5:77:50:4b:63:fa:76:4d:72:11:
aa:ee:02:70:40:d9:34:2e:bd:8b:26:69:c7:88:8e:43:90:64:
82:26:47:f9:26:f0:e5:e8:b0:5a:66:3e:17:dd:d0:a6:c2:d2:
f9:ff:3d:e3:e4:dd:c2:28:08:60:a0:dd:79:40:2e:e8:01:9c:
6a:1b:90:10:b2:27:59:7e:56:b6:9c:6c:d1:f2:17:31:e0:e1:
1e:14:40:0c:0d:85:73:e3:88:23:4a:4c:4d:07:be:86:6e:c4:
49:5b:5e:8c:b2:a4:0d:87:0f:a5:f0:cd:b4:10:6d:21:7c:35:
44:f4:b1:54:3f:8a:45:de:aa:02:f1:1f:64:9e:98:f5:03:b6:
03:76:9a:72:87:b5:af:cb:51:1c:88:e9:0c:39:7e:28:a1:4d:
7c:cb:5e:56:2e:c4:07:60:4c:46:5f:47:bd:04:ff:92:d0:56:
31:bb:33:5b:2c:ef:fe:72:ad:42:11:5f:4b:b0:b3:09:af:d2:
1a:f2:6b:3c:ee:c4:7b:f4:22:22:11:04:be:34:58:3d:0c:5c:
41:e4:b5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org