Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/PMNu6pK9HUo58PPeESzVpvTwEXs.roa
File: PMNu6pK9HUo58PPeESzVpvTwEXs.roa (raw, json)
Hash identifier: iqysQSTjkXAQNkyGnt8x6DWuShk0YscehlzBivFVqU8=
Subject key identifier: 3C:C3:6E:EA:92:BD:1D:4A:39:F0:F3:DE:11:2C:D5:A6:F4:F0:11:7B
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0960
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/PMNu6pK9HUo58PPeESzVpvTwEXs.roa
Signing time: Tue 29 Sep 2020 10:01:46 +0000
ROA not before: Tue 29 Sep 2020 10:01:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 210.200.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2400 (0x960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3CC36EEA92BD1D4A39F0F3DE112CD5A6F4F0117B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:3f:97:8f:58:c9:c5:6c:ff:2e:dd:a6:8c:
22:c3:45:cb:fe:18:98:d2:85:7c:1d:a6:d5:0d:6e:
4d:f8:cb:81:20:36:26:02:d0:1c:d0:31:3d:64:1c:
4a:3a:ab:8d:f1:87:49:3b:b6:5d:bd:13:37:8a:a9:
89:55:13:90:c5:c8:f5:86:f1:2c:0f:4e:c4:51:4c:
bc:19:f8:b1:a2:d2:b5:54:75:52:e0:6b:22:41:89:
1a:26:51:84:3c:b7:55:a6:ef:d8:72:19:e8:5c:18:
c6:f2:1e:61:87:b6:70:6d:39:0a:8a:c6:e2:24:bd:
51:f2:60:61:00:19:3f:1b:9d:0a:74:18:4c:7d:7b:
d1:dc:73:e6:3b:e9:1f:d2:99:98:04:73:47:b9:57:
e5:84:94:6e:c6:f7:9f:34:9d:e8:27:f7:84:56:ab:
e9:a1:79:16:30:8a:9d:e0:f2:95:19:ad:c9:27:f3:
92:bc:d6:db:cf:12:8b:1f:a4:70:f8:42:a2:e3:9d:
b5:1e:dd:9c:7f:04:fe:8b:f6:49:bd:24:2a:51:9c:
2f:ea:2e:cc:2f:76:e9:7a:7f:68:bd:94:55:59:5e:
60:16:d3:65:78:71:e9:74:13:fc:cc:aa:6c:d1:0d:
3e:15:56:07:ee:8c:f0:18:cd:6b:f4:1e:06:3d:fa:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C3:6E:EA:92:BD:1D:4A:39:F0:F3:DE:11:2C:D5:A6:F4:F0:11:7B
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/PMNu6pK9HUo58PPeESzVpvTwEXs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.79.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7b:ba:2f:9f:a3:62:19:57:9e:b7:ad:6b:a9:33:3e:1d:cc:
60:8f:cb:78:37:f7:6a:dc:54:2f:b1:20:4c:eb:42:5b:c9:a8:
71:c9:38:42:45:fd:a3:27:e6:76:cb:fb:68:c7:ec:3e:29:b5:
1f:15:eb:7b:df:bd:3b:ba:00:9b:b3:01:0c:90:45:05:bc:8f:
b0:b4:73:2f:44:17:b8:f2:5c:c0:eb:56:8b:70:57:6f:76:6c:
26:e2:58:1a:6e:18:ad:b1:f1:61:93:5c:9e:64:76:73:75:7f:
74:0e:31:98:56:78:7e:83:2b:e2:b2:1d:17:68:5f:f6:7d:54:
e7:00:75:b4:9b:8f:eb:25:99:42:fb:89:0b:7e:02:94:aa:74:
c9:a2:fa:46:f9:9f:bb:b7:f2:81:3b:31:e4:78:48:82:e9:72:
46:2a:cc:3d:17:b9:50:ff:f4:d9:4b:ad:79:ce:86:8c:96:7a:
49:2b:10:8b:67:fc:24:36:cd:58:7a:f8:3c:b7:5e:9e:da:7c:
ec:9d:aa:1b:e9:a5:eb:cb:56:98:40:9c:e5:7e:62:a9:97:c0:
4d:f9:95:bd:ee:42:ab:7e:28:4d:13:d2:c0:90:2f:33:09:dd:
02:a1:53:cd:b9:8f:25:ad:bc:c8:70:a2:28:32:22:bb:e7:12:
73:06:aa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org