Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/PIgxChmCvwfu8eRbq8RfD9RH-8E.roa
File: PIgxChmCvwfu8eRbq8RfD9RH-8E.roa (raw, json)
Hash identifier: imj/EW/HyU9xgbuEiu4TernAswvIpR1KXXuicGkVcNw=
Subject key identifier: 3C:88:31:0A:19:82:BF:07:EE:F1:E4:5B:AB:C4:5F:0F:D4:47:FB:C1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12A8
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/PIgxChmCvwfu8eRbq8RfD9RH-8E.roa
Signing time: Fri 01 Sep 2023 08:04:47 +0000
ROA not before: Fri 01 Sep 2023 08:04:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.200.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4776 (0x12a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3C88310A1982BF07EEF1E45BABC45F0FD447FBC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:85:87:e8:83:71:2f:80:81:ba:75:70:42:
1e:e0:1c:11:d2:3f:e9:c8:20:5b:3e:3a:63:eb:15:
5a:31:cd:7b:b7:81:db:32:70:c1:e2:39:2e:6b:2b:
a3:e3:20:53:43:81:49:3c:37:56:bd:92:81:8e:d2:
70:ea:2d:35:b2:ad:1d:05:36:98:65:b0:78:a0:28:
fc:1e:7f:34:8f:6a:8c:da:a4:19:b7:53:e7:30:89:
63:53:c1:be:76:87:8e:81:38:6e:cb:78:f5:62:a2:
20:46:ed:d1:94:44:73:01:a5:c8:5d:2c:70:24:7f:
ac:f7:a4:d5:7f:19:ae:09:9b:85:12:7e:71:bb:9c:
98:32:bb:44:e4:2d:c5:7c:f3:b3:10:8b:35:8b:94:
d2:0a:48:e7:7d:b2:b1:10:62:ab:8e:18:fa:71:1e:
12:7e:d3:16:68:85:2d:44:41:9e:b3:1c:2e:98:cc:
f6:12:23:8f:24:8e:da:d2:ca:10:f0:90:55:14:f1:
bf:fb:38:ce:52:5d:18:a9:26:ca:ed:7f:3b:cb:a7:
46:36:d8:99:23:0b:a8:45:67:e6:4e:d2:f3:6e:6b:
37:aa:b5:51:fd:c4:b3:41:1d:04:b5:74:56:f7:23:
71:6a:4d:34:8e:67:ba:94:64:b6:95:66:91:d4:67:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:88:31:0A:19:82:BF:07:EE:F1:E4:5B:AB:C4:5F:0F:D4:47:FB:C1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/PIgxChmCvwfu8eRbq8RfD9RH-8E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:18:b8:6b:e8:1b:ee:82:0c:93:fb:69:8c:bd:6c:f1:cf:6e:
47:2a:4f:cc:53:96:cd:44:ab:ff:7a:e8:93:13:d1:ff:5c:8e:
ff:47:e9:0f:b7:fa:33:e9:7e:a4:4d:0d:8e:4c:35:51:c4:8b:
31:e4:50:36:90:ee:2d:7b:86:57:9c:a7:02:6a:ce:b3:50:a8:
10:2f:3e:b6:9a:7c:de:59:a1:3e:42:c7:84:c3:cb:70:e0:5a:
18:95:72:b3:aa:e5:67:43:dc:bd:ab:b4:fa:3d:37:d1:a1:df:
57:26:5d:14:00:d9:39:78:28:15:eb:05:29:2d:c8:7d:3f:73:
16:20:c1:b9:2c:19:5c:2b:10:79:59:f0:82:24:67:12:49:af:
0f:fa:e1:41:32:af:f3:f8:0d:d2:b6:7c:14:dc:13:7a:ab:47:
37:e1:6e:92:e7:07:f3:9e:11:f0:16:26:a1:33:13:58:c0:45:
aa:61:0c:7e:c9:33:dc:02:6c:cc:7a:18:ad:d0:cd:5c:3f:69:
3d:4d:f4:77:d2:19:99:c2:2d:f1:52:04:66:c7:e0:13:57:1c:
fe:40:2b:7f:1e:9e:45:d5:eb:22:79:02:7d:41:6d:78:ee:cd:
1b:80:1e:4c:8f:22:b9:b3:1d:a8:b7:f9:82:9b:ab:4a:81:d3:
36:0d:b9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:54:32 2024 by rpki-client on console-ams.rpki-client.org