Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Md07CTAAAlBcMr6Ibd1ZvFryfsI.roa
File: Md07CTAAAlBcMr6Ibd1ZvFryfsI.roa (raw, json)
Hash identifier: CAbQMpp3B51UmqRqPSUOUCuVpLERbrLpe2MaiWIZyFQ=
Subject key identifier: 31:DD:3B:09:30:00:02:50:5C:32:BE:88:6D:DD:59:BC:5A:F2:7E:C2
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0CBF
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Md07CTAAAlBcMr6Ibd1ZvFryfsI.roa
Signing time: Sun 07 Feb 2021 12:58:05 +0000
ROA not before: Sun 07 Feb 2021 12:58:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131597
IP address blocks: 218.35.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3263 (0xcbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 12:58:05 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=31DD3B09300002505C32BE886DDD59BC5AF27EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:97:76:f9:9a:c3:1f:15:b4:68:c5:e5:6a:ea:
30:1f:80:01:8d:3d:11:82:12:24:b4:a5:f5:d3:ad:
65:0a:fa:b0:9a:ef:33:ac:b3:cc:cd:95:24:a8:96:
c3:82:26:5b:89:56:21:33:ff:01:bb:83:f6:c9:a8:
ba:d5:f1:55:07:19:07:d9:f8:04:8d:0e:1d:da:28:
e7:83:82:ba:ee:c1:f0:c8:4d:b8:b1:80:a9:8a:6b:
6e:af:3f:80:21:69:97:44:64:22:14:be:e5:f6:69:
5e:a8:2a:69:77:07:4c:0a:62:99:f9:2c:b4:a4:09:
50:19:80:8c:c1:2d:de:85:ec:dc:04:4e:ca:61:41:
cb:e9:b6:01:09:b9:6a:92:e7:9d:13:99:cf:b8:bc:
a6:99:68:13:aa:bf:7f:ab:4e:f6:98:17:d5:9d:49:
83:66:ed:00:38:ad:4c:a0:a9:c2:5e:17:95:c3:3b:
76:bc:6b:9a:fd:38:5f:6a:35:e4:d5:e5:1b:56:24:
e1:09:04:20:f9:5a:b1:04:aa:75:c5:de:79:eb:59:
e0:46:78:e7:c3:91:b7:91:34:83:95:26:73:b7:81:
d8:bc:cd:01:a1:0d:3d:dc:c2:09:2e:87:c3:8b:04:
7a:c3:91:ec:80:1c:e9:b6:46:44:61:b8:a1:8f:bc:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DD:3B:09:30:00:02:50:5C:32:BE:88:6D:DD:59:BC:5A:F2:7E:C2
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Md07CTAAAlBcMr6Ibd1ZvFryfsI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.64.0/19
Signature Algorithm: sha256WithRSAEncryption
77:5b:63:28:3d:a2:15:d0:07:15:ac:77:ce:96:97:c8:95:35:
e8:66:15:89:fc:10:ab:bd:22:26:30:02:55:d9:82:62:9a:c1:
dc:51:4e:3c:72:7e:a2:8e:10:8c:a8:62:63:1a:f4:fb:5d:ec:
e5:53:8e:10:db:0a:f2:41:75:a1:52:f0:d9:fa:d8:b7:fb:c1:
9d:b1:44:87:5e:84:7b:e4:e0:56:b7:b4:d3:87:05:9d:ea:3b:
b2:5a:39:af:ff:dc:6a:08:b9:cb:d8:31:76:f9:35:2f:b0:28:
bd:aa:41:c8:e4:e2:c4:f4:10:bb:9b:8b:62:3f:43:ac:c0:1d:
af:99:9f:67:bd:e9:9a:e3:24:d7:88:bf:83:94:af:64:bf:1e:
2a:d9:59:93:09:ba:06:95:04:e0:0a:7a:c1:c2:a2:fb:30:7d:
b7:c9:18:8b:ec:6c:63:b6:0e:8f:20:49:d0:63:59:e6:03:3b:
4a:bf:92:2f:15:b8:73:ed:93:c7:32:fd:b4:08:67:21:65:e9:
69:5e:4d:60:9b:d5:e5:19:a8:c8:4b:d2:6b:2b:9f:6a:72:d1:
db:7c:21:ef:e7:a2:ed:18:4d:90:51:9b:9f:b4:f5:4d:cb:0a:
b5:45:fc:2a:1d:c1:19:33:94:32:60:42:00:2f:69:d6:cc:9e:
d5:42:9b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:58:17 2025 by rpki-client