Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/MffZtN6V2Uwbq7CtBl0MKbOzvxo.roa
File: MffZtN6V2Uwbq7CtBl0MKbOzvxo.roa (raw, json)
Hash identifier: rv0oRiuAwNgmjRZ/g8e4FhVS7DKG1yqpUpRJAAIn1/o=
Subject key identifier: 31:F7:D9:B4:DE:95:D9:4C:1B:AB:B0:AD:06:5D:0C:29:B3:B3:BF:1A
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/MffZtN6V2Uwbq7CtBl0MKbOzvxo.roa
Signing time: Thu 15 Sep 2022 02:40:26 +0000
ROA not before: Thu 15 Sep 2022 02:40:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 218.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=31F7D9B4DE95D94C1BABB0AD065D0C29B3B3BF1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:e9:60:a6:50:43:22:81:4b:d9:bf:2b:7b:
15:dc:69:aa:60:f6:11:20:59:b0:e9:8d:b6:a1:c3:
d5:35:db:fd:fa:c3:bc:d4:d8:43:cc:4a:53:bc:3c:
fd:d0:9e:f9:93:d0:8e:67:4c:48:7e:98:3f:fe:1d:
ed:ba:89:9b:61:d5:1e:3b:07:bf:fb:5b:84:ab:4c:
80:fd:1d:58:7d:0e:5a:80:90:ec:4d:73:5e:5e:f1:
48:41:6e:e1:02:15:66:0a:f8:e8:0b:f1:61:e9:b7:
cf:f3:a8:ef:3a:6a:df:73:30:7f:6a:75:ab:d5:bd:
cd:aa:6b:6e:15:90:6b:e2:a5:41:26:cf:3b:4b:6b:
22:eb:17:f5:ba:3e:d7:54:d1:40:35:e3:49:22:09:
de:ca:6e:56:c1:ba:a0:4f:2f:f2:32:bc:84:c9:d4:
28:64:40:06:4b:20:86:32:25:f5:22:c1:2a:78:cd:
ee:d4:08:f4:b1:12:b0:0d:e1:af:92:d5:6c:21:3e:
c9:58:cb:10:db:98:c1:b8:be:78:32:75:c3:1e:0c:
74:32:fc:b3:d5:a2:32:5e:d6:98:c0:45:79:76:e1:
7d:eb:9e:a4:23:40:cd:e2:e1:2d:e0:ce:f6:65:6f:
53:19:9c:d9:cf:81:58:82:d4:c8:d8:bf:54:1c:bf:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F7:D9:B4:DE:95:D9:4C:1B:AB:B0:AD:06:5D:0C:29:B3:B3:BF:1A
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/MffZtN6V2Uwbq7CtBl0MKbOzvxo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:b7:ae:12:9d:d7:9d:67:51:9f:bd:7f:56:11:00:a9:bb:f4:
7c:f8:51:f5:33:0c:96:61:9c:6f:83:76:8a:b2:d5:c0:e0:78:
dc:bb:13:4d:17:de:4c:6b:d7:36:5a:50:bc:4f:f3:1a:73:a6:
8a:5a:3c:53:58:ff:5b:4e:e1:1e:7f:8c:b0:a1:1b:26:6d:c0:
d3:9e:00:39:ef:65:61:6f:35:53:bb:d0:d2:e6:db:c9:18:e8:
7b:69:bc:c9:2c:9d:10:e8:a2:37:90:91:dc:32:09:71:e0:29:
be:56:ac:87:be:0c:0d:47:f2:37:18:a1:0d:c5:9a:8d:89:20:
a1:e9:66:a4:a6:6a:72:bd:28:85:b2:db:96:2f:7a:e1:0c:65:
d6:fa:98:a1:a6:a4:5a:51:9a:05:3f:5a:c1:f8:bd:21:cf:b3:
5a:ea:43:7e:6d:3b:a0:3e:74:bd:b1:c3:0f:d8:28:b6:7d:75:
04:8c:b8:aa:9d:69:f5:29:f0:3c:30:d4:27:a7:26:61:c0:bb:
9b:66:8e:28:90:c4:52:ac:49:17:0b:90:dc:e1:c8:34:de:3c:
ca:70:24:ae:07:a7:df:89:53:c5:11:06:52:54:d8:7a:fd:b3:
70:82:9d:51:ef:55:6f:24:c0:6f:73:cf:0c:11:10:82:4f:92:
7f:5e:8d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org