Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/P8J_odQFuSSsyR-1urx3jt6C1So.roa
File: P8J_odQFuSSsyR-1urx3jt6C1So.roa (raw, json)
Hash identifier: ycXEoi9MDpB+0hjN+kiH9PqTx8o5p5l1sCG33+KXLAM=
Subject key identifier: 3F:C2:7F:A1:D4:05:B9:24:AC:C9:1F:B5:BA:BC:77:8E:DE:82:D5:2A
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1289
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/P8J_odQFuSSsyR-1urx3jt6C1So.roa
Signing time: Fri 01 Sep 2023 08:04:36 +0000
ROA not before: Fri 01 Sep 2023 08:04:36 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9311
IP address blocks: 210.200.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4745 (0x1289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:36 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3FC27FA1D405B924ACC91FB5BABC778EDE82D52A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:28:0c:8e:30:bf:71:2e:0a:8d:da:f9:72:
9b:ef:c4:ad:c9:2e:c1:92:f7:4f:70:53:90:51:4f:
72:0a:1e:6b:9f:9c:a1:fc:25:d7:b3:3c:7a:c8:87:
73:a2:a3:47:6a:77:bb:24:14:77:1e:7b:52:9b:be:
62:96:83:34:40:7b:b6:be:f7:95:9c:d2:7f:a5:b5:
7b:e6:ea:d9:9c:79:76:3d:f3:f5:11:6a:ad:1f:1e:
10:6a:83:d3:f5:56:7c:18:94:20:ee:33:5e:b9:93:
a9:09:f9:95:5f:42:48:6b:2f:51:a3:56:fd:a6:12:
19:aa:4e:6e:ad:c8:28:78:72:e0:fe:d5:3a:d0:8d:
d9:09:5c:3b:83:38:7c:9a:1b:5c:b1:6f:58:19:c7:
cf:0d:09:67:6d:e5:e9:ce:07:08:a6:ef:18:26:08:
aa:be:c4:b7:75:cc:c6:9c:11:af:a0:85:87:f3:47:
25:51:2e:18:b1:f4:8c:42:b4:ad:2c:d3:88:19:74:
95:fb:99:0c:91:8d:fe:7f:2d:ba:52:e5:89:5e:f5:
a5:df:8f:8e:6f:10:c5:ae:16:9f:f3:b2:ea:9a:10:
19:3c:cd:91:af:4a:66:73:79:0b:f4:f2:36:4c:24:
9e:a9:1b:39:89:f6:9d:a0:69:37:5a:57:a2:13:9a:
f7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C2:7F:A1:D4:05:B9:24:AC:C9:1F:B5:BA:BC:77:8E:DE:82:D5:2A
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/P8J_odQFuSSsyR-1urx3jt6C1So.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0d:c8:e6:7f:69:25:6e:e8:a6:1a:93:8d:ee:07:cc:b6:73:95:
f4:16:4f:21:c0:53:db:d4:f0:5b:ff:6d:16:4d:77:f8:99:3f:
b3:79:1a:45:83:e7:c6:eb:48:98:ce:13:57:3c:60:11:8d:6f:
df:c1:c8:5a:5f:e3:93:c2:88:bd:14:1b:7a:bc:98:6d:38:dc:
65:4d:4e:18:7b:91:8e:b9:fd:33:8d:70:64:1d:09:bd:bd:25:
16:58:0e:c2:d7:40:48:fe:91:a7:ba:b2:e9:bc:a1:26:72:8c:
eb:f1:e4:35:9a:be:61:f4:13:29:5c:e7:ca:f8:bf:06:ff:a4:
63:8b:ca:c6:39:6f:5a:4f:fe:c4:44:66:b7:2b:55:1e:ac:48:
f1:58:03:b1:65:17:e6:1b:2d:8c:48:4f:ed:bf:95:e8:67:2a:
72:1b:e0:ad:70:86:57:c2:fe:3e:ac:41:4d:a0:91:a6:89:94:
f7:9e:10:0a:18:a1:92:28:02:d7:f5:94:8d:30:1d:f0:9e:d0:
30:7e:34:e6:72:6f:82:66:70:8b:92:d6:5f:74:f7:72:41:3e:
f0:3b:c2:99:67:e3:eb:bf:a2:7e:88:3f:0b:bb:b4:df:05:41:
6c:68:dd:8d:fd:2b:a3:54:62:e3:0e:1d:0b:f6:c2:d8:d9:de:
af:1a:56:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:50:43 2024 by rpki-client on console-fra.rpki-client.org