Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/MVS5cOi5hxprCLbiEcgEJtZZKug.roa
File: MVS5cOi5hxprCLbiEcgEJtZZKug.roa (raw, json)
Hash identifier: XpqHmCBrROrsCV/VqCxOKEuJlYJlnPiyfHUBR9Yok4Q=
Subject key identifier: 31:54:B9:70:E8:B9:87:1A:6B:08:B6:E2:11:C8:04:26:D6:59:2A:E8
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0BF7
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/MVS5cOi5hxprCLbiEcgEJtZZKug.roa
Signing time: Sun 07 Feb 2021 11:34:26 +0000
ROA not before: Sun 07 Feb 2021 11:34:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 210.201.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3063 (0xbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:34:26 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3154B970E8B9871A6B08B6E211C80426D6592AE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:95:ef:5b:17:5d:b1:e2:90:9a:c7:c8:59:3b:
2a:a6:f4:a7:94:d2:d5:5d:eb:b6:a8:82:f0:85:bd:
f5:58:7e:d7:b1:07:de:bb:11:92:38:33:4f:82:81:
17:f1:cd:c3:19:22:41:a0:1a:9e:06:2f:d5:c4:7c:
f3:b5:13:67:6b:1e:68:93:5a:a3:35:f8:ca:b0:4c:
9c:19:74:a1:1d:26:62:f5:7c:ff:6d:dd:a2:cf:07:
80:8e:b3:fa:08:39:f1:c2:3b:7a:25:06:1b:a2:a3:
8f:dc:5a:ea:63:c8:a5:0c:11:19:94:95:e5:c6:5b:
8c:46:e4:18:5b:31:a3:68:1d:a4:81:ac:db:f3:25:
04:a6:d0:26:a7:b5:de:be:2e:94:35:e2:36:a1:ec:
9b:f5:18:21:23:96:9b:a6:af:1c:d2:04:11:2e:12:
3c:c6:bf:23:f5:57:fd:73:07:c7:3f:bb:42:db:e9:
5f:53:b2:59:79:af:ad:ec:56:fd:cc:06:07:98:a3:
38:38:db:2c:9a:5e:aa:32:10:54:a5:59:bb:d3:b0:
6b:83:f9:84:a5:07:5a:ea:05:55:ad:e3:be:59:80:
4c:63:38:32:f3:06:bc:e2:a5:e1:56:b9:9d:16:6e:
c9:67:32:fd:44:62:a9:cb:a9:6a:70:d1:4e:45:db:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:54:B9:70:E8:B9:87:1A:6B:08:B6:E2:11:C8:04:26:D6:59:2A:E8
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/MVS5cOi5hxprCLbiEcgEJtZZKug.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.64.0/18
Signature Algorithm: sha256WithRSAEncryption
73:82:c3:16:1b:5b:a8:9f:e8:2f:7c:99:4f:e5:86:dc:fb:9a:
26:36:c1:a1:c8:f2:fa:a2:30:93:25:e3:10:a8:fc:20:00:b3:
41:b8:53:a4:44:91:ea:56:3a:12:90:7a:f9:91:b0:3d:b7:98:
39:dc:d5:98:ed:35:6b:44:f2:fd:42:5d:cf:d0:7f:83:80:5d:
a1:a2:dd:32:72:2d:6a:c8:36:c5:d4:ce:0c:43:34:96:3a:c5:
42:e1:8b:4c:5e:0f:b4:e8:9d:4d:72:35:6a:67:d2:6e:3c:c4:
1a:92:8f:cd:46:ff:3d:74:ee:72:07:8e:3e:2d:c3:b4:29:4e:
7e:37:0a:ea:17:57:34:9a:1c:b5:ec:79:41:ab:89:e3:94:97:
2b:2d:ab:51:b4:ed:36:15:f5:83:a4:fa:cf:78:c5:9f:81:e0:
09:a1:d6:b8:ca:69:7c:39:90:5e:2a:57:0d:72:36:f3:da:1d:
4c:ee:70:1b:21:cf:69:ba:77:21:a2:e3:59:59:33:75:44:fc:
8d:b1:eb:40:c5:52:34:82:c1:df:81:61:68:bd:77:32:12:09:
fa:c3:e7:a5:2a:00:3a:77:a0:35:0c:5d:d6:ad:6b:52:c9:b9:
b5:35:79:32:32:e1:d1:57:53:ae:f4:92:cd:6c:cb:e8:8e:67:
2d:f1:01:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org