Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/N7lIcb7doSp1WbHxF7dHBd_CcLw.roa
File: N7lIcb7doSp1WbHxF7dHBd_CcLw.roa (raw, json)
Hash identifier: hk78XoveLQZoBC74FqTS0Iz1gF1aVIrwctzF1DRtE8Q=
Subject key identifier: 37:B9:48:71:BE:DD:A1:2A:75:59:B1:F1:17:B7:47:05:DF:C2:70:BC
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0927
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/N7lIcb7doSp1WbHxF7dHBd_CcLw.roa
Signing time: Tue 29 Sep 2020 10:01:32 +0000
ROA not before: Tue 29 Sep 2020 10:01:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.203.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2343 (0x927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=37B94871BEDDA12A7559B1F117B74705DFC270BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:ba:04:0a:49:11:fb:3e:db:40:af:c5:62:
c0:ae:03:f7:65:86:f5:39:d7:87:54:8a:ee:eb:db:
33:21:73:a9:3a:3d:12:df:ea:1f:57:d1:66:16:bf:
33:4e:5f:7a:1a:2b:92:61:09:28:62:d1:33:6e:46:
23:c4:f4:85:6f:9c:b5:6f:54:b2:81:29:92:54:da:
ae:69:6f:0c:f1:87:45:71:60:0d:19:f9:5a:7f:41:
36:a3:ba:9a:c0:e3:09:83:67:4f:8a:da:78:e9:fb:
37:7b:5f:8a:76:cd:89:83:9a:82:96:d5:5c:bf:d5:
3b:5b:7d:0e:65:12:32:69:63:07:10:9b:28:53:d3:
d6:d6:83:2f:f9:37:b5:f2:9a:ec:e7:b1:91:88:21:
85:ca:2c:a2:ce:c8:af:28:72:3f:6a:e5:74:ad:3e:
12:7b:6a:25:b1:64:3b:f2:2d:85:bc:e5:40:e5:30:
23:dd:65:40:56:2c:17:70:79:05:6a:84:8a:e6:87:
9b:66:e3:db:e7:2e:d8:66:5f:5e:3f:f3:80:87:ec:
3f:bc:c0:39:51:d1:90:5d:aa:b5:e5:f3:70:50:ef:
76:e1:b4:5f:cf:3e:ee:5e:61:e8:7e:42:de:d8:dd:
7d:ba:bb:98:2d:18:ae:a3:40:02:41:f4:e5:07:1b:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B9:48:71:BE:DD:A1:2A:75:59:B1:F1:17:B7:47:05:DF:C2:70:BC
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/N7lIcb7doSp1WbHxF7dHBd_CcLw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6e:60:46:b0:2b:1b:03:9c:9b:d7:fc:5c:c7:71:b1:de:cc:94:
5c:3c:5b:79:a4:1e:12:c2:fe:f5:37:12:ca:7c:72:aa:dc:6e:
c1:77:28:f5:03:62:f5:ba:70:8b:1e:9f:45:b8:d4:b3:e9:32:
78:74:49:a1:43:17:91:1a:84:e5:55:16:bc:9f:08:82:c4:43:
77:0a:d9:b2:3b:97:16:42:fb:68:04:8b:bb:74:14:6a:2f:91:
d7:d2:e9:6b:c1:f5:a1:a3:01:8b:d6:51:cd:a6:6b:a1:ab:92:
1c:3c:6a:81:fb:20:6a:93:5d:7c:c4:87:83:f0:c3:9d:5f:e4:
58:61:6b:88:48:c4:68:59:62:09:c8:19:67:4c:57:20:44:01:
04:9e:bc:d9:88:11:9f:bb:1d:31:63:43:33:6f:ad:a1:ef:5b:
85:a9:87:06:9b:bc:dc:8c:fd:0d:38:c9:7e:a0:87:be:24:a4:
f0:08:c3:9b:10:46:eb:23:fd:db:a7:2c:8a:8a:66:93:12:1e:
5a:d7:fa:0c:20:87:5b:ab:2a:81:0f:0c:04:b1:5d:f3:24:e1:
9f:39:dc:4c:70:e5:60:53:c5:25:6d:36:9a:bb:ce:f1:8b:32:
ae:0b:5c:08:d8:f6:dc:75:f5:33:8e:27:2f:d8:05:c1:fd:77:
29:f6:cd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org