Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/N1W_6tFlFU9dhP_q_d61NvZO95s.roa
File: N1W_6tFlFU9dhP_q_d61NvZO95s.roa (raw, json)
Hash identifier: Th/1DN8gJSSmYCw26zdVpT4rK7fF8D2Zg0ue29okiKI=
Subject key identifier: 37:55:BF:EA:D1:65:15:4F:5D:84:FF:EA:FD:DE:B5:36:F6:4E:F7:9B
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E2A
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/N1W_6tFlFU9dhP_q_d61NvZO95s.roa
Signing time: Wed 29 Sep 2021 02:40:02 +0000
ROA not before: Wed 29 Sep 2021 02:40:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7482
IP address blocks: 219.91.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3626 (0xe2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:40:02 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3755BFEAD165154F5D84FFEAFDDEB536F64EF79B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:d0:c7:47:44:b5:0c:a6:61:f9:b6:b8:f3:
38:d2:00:29:5c:4f:58:a3:32:07:31:52:ca:c3:3b:
d0:2b:6b:fb:ac:5b:07:ce:21:7e:42:70:44:02:99:
d6:fb:94:ab:85:32:3b:52:21:bd:82:37:2f:9e:94:
22:84:db:9c:32:85:ae:d0:00:34:4a:83:50:52:28:
f5:ed:7a:e1:bc:b8:57:2f:35:c3:84:01:5b:2b:2b:
19:3d:da:66:50:18:53:19:c9:70:43:f8:42:d8:6e:
f5:a1:8f:48:1c:d6:b8:4a:83:2e:c6:8f:7d:b2:15:
e2:64:91:a4:2e:e3:6b:d0:f5:2b:8e:4c:49:97:84:
9d:2c:e0:3b:03:e1:64:30:f0:76:9f:82:2b:21:ba:
79:8a:f0:a7:02:c7:6e:87:97:8f:1d:76:d8:bc:c3:
3f:3c:92:99:d0:81:14:90:2d:13:78:53:f4:f0:3d:
fd:05:44:25:73:de:bf:06:54:ca:1b:30:94:a1:89:
4c:ce:7e:22:a1:42:9d:45:7a:cb:b7:92:14:84:ed:
05:bb:7a:96:4f:4a:57:a5:bb:a2:fb:1c:7d:68:3a:
c8:e7:f2:95:12:48:87:f0:8b:20:b2:d2:a3:6b:cf:
ac:6e:bf:cc:4b:36:d1:67:f8:4b:c5:c3:c2:8f:ab:
99:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:55:BF:EA:D1:65:15:4F:5D:84:FF:EA:FD:DE:B5:36:F6:4E:F7:9B
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/N1W_6tFlFU9dhP_q_d61NvZO95s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.91.0.0/17
Signature Algorithm: sha256WithRSAEncryption
91:29:b7:c3:d1:78:58:78:6a:ae:d4:fd:a8:43:b5:eb:bb:61:
3f:d5:63:3d:52:57:bc:cf:3b:58:33:eb:4b:34:01:79:fd:3a:
0f:bc:f5:96:5a:b6:0e:f2:6e:7a:67:47:b7:ae:6b:11:d9:55:
a8:a1:65:d1:8a:d5:22:4b:10:a8:86:d1:8d:88:27:5a:74:ed:
72:88:4d:d6:77:50:38:17:27:ec:0a:19:6e:86:51:4a:81:8e:
48:4f:63:69:62:91:1a:74:8c:9c:e5:86:b7:8a:2c:43:24:89:
d9:f3:07:c4:90:ed:32:38:bd:a7:d1:26:e4:8b:fa:e6:96:a6:
8a:92:3e:04:09:f8:ab:8e:59:f8:42:25:21:5b:ff:a5:28:58:
44:7d:26:1e:3f:3b:82:1c:ac:38:68:ee:3d:27:ec:df:1d:e3:
85:56:21:3f:98:7e:32:b9:ef:68:a6:97:50:0b:0b:b3:47:bf:
c2:03:6a:62:b6:f6:b2:00:26:63:73:4f:53:51:f3:36:37:03:
9e:f9:29:92:0f:ef:2a:5d:e3:b5:ac:37:6f:d4:82:77:1f:ed:
ea:3e:fa:d4:94:8c:94:cb:ff:2b:17:81:45:a7:4b:29:05:0c:
86:c3:f4:22:d9:1f:bc:28:cf:da:ae:30:a2:67:e9:97:bf:91:
45:ce:cb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org