Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/LsgixaJz-468MkMut6JJlAn0UnQ.roa
File: LsgixaJz-468MkMut6JJlAn0UnQ.roa (raw, json)
Hash identifier: i3Nk2j4UcpPVNtmVhlGLD/7nTJ39+7n4d6Iva6v562o=
Subject key identifier: 2E:C8:22:C5:A2:73:FB:8E:BC:32:43:2E:B7:A2:49:94:09:F4:52:74
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0922
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/LsgixaJz-468MkMut6JJlAn0UnQ.roa
Signing time: Tue 29 Sep 2020 10:01:30 +0000
ROA not before: Tue 29 Sep 2020 10:01:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 124.218.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2338 (0x922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:30 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2EC822C5A273FB8EBC32432EB7A2499409F45274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:96:47:19:17:f5:e0:27:b8:44:a7:83:74:41:
8e:5c:fa:04:24:21:b5:11:42:48:d5:71:f6:34:55:
41:6e:ab:e8:94:da:8d:a2:17:d2:72:bd:37:ed:dc:
22:96:2c:64:13:08:f9:c4:e3:60:34:ee:88:0a:01:
33:9e:2b:22:95:1f:ef:0a:45:c8:43:df:dd:30:94:
84:6a:fb:9a:9a:4c:47:0c:90:24:ec:ad:5d:09:be:
96:bd:80:e6:3b:1d:f8:c4:4d:fa:db:20:f2:bf:18:
13:33:31:6b:6e:d6:2d:f2:11:77:89:bf:51:9b:9c:
f4:8b:a5:29:03:86:a9:bd:be:14:ab:a3:dc:6b:99:
f7:e3:6d:11:17:e0:b0:2e:a2:bf:fa:08:cc:fa:85:
6a:ab:c7:94:51:78:56:11:c4:a1:9f:85:13:5a:9d:
ad:ad:c3:76:f1:74:f1:96:f5:d1:04:e3:e7:2e:aa:
be:29:df:c9:5f:b0:df:8f:22:3d:56:5b:6e:4e:fb:
7d:12:19:f4:01:f4:25:8b:b2:a0:8c:11:29:21:e5:
34:7a:36:ff:19:e3:b6:45:c1:8c:ce:b1:97:99:98:
3a:61:95:4c:a0:b2:59:5f:5f:d4:f9:8c:11:f3:8e:
be:b4:9b:f8:be:fb:8c:7b:0f:40:5d:d4:5b:29:ab:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C8:22:C5:A2:73:FB:8E:BC:32:43:2E:B7:A2:49:94:09:F4:52:74
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/LsgixaJz-468MkMut6JJlAn0UnQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:f8:42:5e:99:b1:7d:70:8e:15:de:64:48:50:7f:33:e8:a7:
3c:e6:6e:a2:78:98:f5:c9:4e:e7:9a:05:06:d3:52:f2:8d:8c:
ef:c6:fc:92:51:44:95:6e:22:43:cd:10:16:9c:48:0d:d8:8a:
a6:f4:3d:3a:5d:52:72:24:89:df:6d:f5:f5:c4:f8:0f:6f:7c:
53:9e:4d:1a:13:61:51:94:40:6f:d0:9d:4f:6f:32:6e:0e:f3:
a7:4d:08:16:07:1e:2f:8c:96:00:37:18:a8:9c:f8:d5:e9:ac:
71:5e:72:73:37:35:10:ce:a7:cc:4a:78:b5:cd:90:b1:09:f8:
b7:e2:42:52:ee:f4:08:22:5a:da:cf:c4:a6:b5:cf:47:93:da:
dd:22:16:d1:38:bf:1d:39:cc:54:19:a9:53:77:c7:83:94:48:
28:2e:44:12:72:82:14:36:81:3c:7a:4f:f4:37:e1:00:a3:99:
ce:50:69:6b:7d:80:bb:7e:78:44:87:81:0b:40:c1:13:47:b6:
78:30:9b:5f:a2:3e:78:7d:1d:aa:1a:55:09:93:ab:f0:ee:83:
41:f6:56:e2:b2:e6:f4:89:ee:d6:0e:2d:7a:2b:78:e3:86:67:
88:b8:b2:34:39:4c:1d:e1:16:00:58:89:2b:65:53:83:4a:6c:
50:3d:65:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org