Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/OpKC0mNMB7jxGbvuWSUe0zbt7u8.roa
File: OpKC0mNMB7jxGbvuWSUe0zbt7u8.roa (raw, json)
Hash identifier: BPd29C3aXTR7KFIgUOLh2Fvk4W3weg3+tbeIo3C9p+s=
Subject key identifier: 3A:92:82:D2:63:4C:07:B8:F1:19:BB:EE:59:25:1E:D3:36:ED:EE:EF
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DAA
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/OpKC0mNMB7jxGbvuWSUe0zbt7u8.roa
Signing time: Wed 29 Sep 2021 02:39:24 +0000
ROA not before: Wed 29 Sep 2021 02:39:24 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7482
IP address blocks: 124.218.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3498 (0xdaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:24 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3A9282D2634C07B8F119BBEE59251ED336EDEEEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:7f:8a:d1:f4:50:d8:b5:e8:08:b6:a6:fd:
ae:2b:4e:8e:5b:ba:32:9f:f1:16:5f:d4:44:2e:ca:
05:67:67:e5:88:ab:37:75:0b:01:71:00:52:33:89:
3d:d2:a4:ec:69:61:38:5d:cb:d9:42:fb:f2:ba:cd:
c5:f6:8f:ab:8c:4d:c7:f3:bb:73:41:06:74:f6:2d:
e8:72:ca:26:68:b5:36:b2:7b:e3:53:31:5b:73:b2:
1f:cf:f6:b4:e4:d3:2a:40:4c:98:19:10:b2:f2:7b:
40:2e:50:40:46:14:4e:83:b0:66:2f:22:e8:66:ba:
ea:43:2a:df:5d:32:fd:fe:a1:88:2b:1c:82:ae:6e:
aa:22:b2:70:83:e7:b5:d5:1d:39:2c:fd:0b:16:7a:
0f:99:4b:83:a8:ba:e6:38:9a:ec:fa:ba:81:97:61:
ce:3a:b8:1f:ec:40:55:c8:fd:59:6f:a5:20:10:c9:
36:fd:1d:54:8a:bc:94:e5:3d:59:50:86:9a:48:6b:
e7:2f:77:17:76:ad:74:3e:82:cc:c0:03:68:6c:94:
ef:39:20:73:ea:27:47:ee:c0:b6:ed:c5:bf:5d:2d:
c3:c6:a3:8b:53:82:28:65:d3:ee:8d:ca:88:81:16:
cf:d9:39:e9:19:25:80:db:79:83:7f:9f:32:aa:71:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:92:82:D2:63:4C:07:B8:F1:19:BB:EE:59:25:1E:D3:36:ED:EE:EF
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/OpKC0mNMB7jxGbvuWSUe0zbt7u8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:e8:46:dd:72:d5:c4:0c:58:6d:ae:31:ba:ec:97:d9:a1:ff:
3f:4d:97:f8:0d:e4:19:31:09:ec:e6:32:54:fc:11:af:fb:f5:
a4:78:ab:80:49:08:61:29:8d:95:7e:ab:4d:fd:81:b9:ad:ae:
ca:19:12:7c:ec:37:0f:0d:77:ec:40:3f:d2:e6:87:c0:4b:11:
e5:e8:fb:65:2e:c6:3b:31:12:d6:ef:30:b5:c6:ce:b4:1c:c7:
e4:00:a3:a3:89:ce:e7:ab:68:bf:a1:ba:dc:2a:7f:5a:66:40:
d7:f4:07:15:79:c3:66:94:b4:b7:a2:d5:9b:91:eb:b1:d3:c9:
0d:b5:2a:fd:d2:60:6c:2f:cb:33:dd:44:d8:89:78:38:2e:31:
b0:10:46:56:52:ac:5e:8d:56:c8:21:45:d8:47:fb:9b:28:57:
83:71:22:f7:14:a5:56:cc:6f:d8:6a:fc:19:10:ff:49:8e:b5:
1a:5b:a7:0f:29:46:78:d6:a6:75:0c:11:9e:f2:13:94:52:8f:
c1:71:e6:72:e0:a2:d9:86:ad:ff:2e:2c:cb:6c:82:70:c8:57:
ad:f7:b3:78:66:4e:ba:51:ea:ae:65:c5:bb:20:23:dd:00:66:
46:00:bd:b0:2d:cb:62:9d:8c:a1:a2:0b:3f:3c:33:26:2e:82:
fb:15:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org