Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Q1KbJfN0JMzuxfxqwNqzKi58CGU.roa
File: Q1KbJfN0JMzuxfxqwNqzKi58CGU.roa (raw, json)
Hash identifier: UWDWo12rmnD/GdQ0r4ZzGCS9rCHB+OwX2kARPFDAIcE=
Subject key identifier: 43:52:9B:25:F3:74:24:CC:EE:C5:FC:6A:C0:DA:B3:2A:2E:7C:08:65
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0934
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Q1KbJfN0JMzuxfxqwNqzKi58CGU.roa
Signing time: Tue 29 Sep 2020 10:01:35 +0000
ROA not before: Tue 29 Sep 2020 10:01:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24154
IP address blocks: 222.156.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2356 (0x934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:35 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=43529B25F37424CCEEC5FC6AC0DAB32A2E7C0865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:53:ae:ea:13:da:63:f9:51:96:9b:be:ca:
55:d0:5d:73:00:38:66:98:4f:ac:97:f0:02:0b:06:
6d:34:22:e5:b6:fb:dd:38:34:80:8f:58:70:14:b4:
5d:e8:9e:c0:ef:ec:04:df:80:a5:44:32:c9:b3:26:
49:5a:39:87:6b:26:d3:72:6a:0e:02:e3:31:5b:35:
f8:1b:0e:c0:39:b9:3c:cc:7d:56:48:ab:b5:d0:ad:
eb:0c:84:9f:0e:5f:39:fa:9c:4e:e3:13:24:73:71:
63:d2:2f:47:5c:ba:5b:b6:e1:01:05:f2:bb:ad:bc:
02:4c:9c:2a:16:05:50:6a:82:58:ca:fb:29:b4:f5:
1c:ed:2e:42:48:ef:21:56:22:cb:8d:5e:c9:3c:9b:
25:30:0f:d6:ee:0a:33:52:c0:37:0e:a9:ac:b0:2b:
fc:c5:4f:cc:58:1c:cf:ec:0f:ce:c5:70:94:d6:5e:
5a:d3:f4:03:a5:22:20:66:d5:33:2a:5e:2e:5e:58:
7d:25:ec:02:50:9f:9f:49:0a:56:9f:3e:31:a1:b8:
e8:48:69:9a:a3:50:23:c1:ca:23:eb:44:6c:07:2b:
f2:4d:5b:b1:49:7a:ba:1b:8b:f8:0c:af:ef:ad:6a:
f2:25:5b:1e:66:aa:b2:18:32:dd:e8:dd:66:0d:24:
11:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:52:9B:25:F3:74:24:CC:EE:C5:FC:6A:C0:DA:B3:2A:2E:7C:08:65
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Q1KbJfN0JMzuxfxqwNqzKi58CGU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.156.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9c:33:75:9a:b8:57:61:8f:f9:a9:2e:e8:cb:ac:92:c8:4d:
48:50:68:18:94:d2:52:08:a9:a5:90:d8:01:60:a5:ef:af:30:
c9:ff:00:76:4f:ca:d4:19:7e:4b:61:a1:ef:75:ea:d8:55:54:
b1:ec:18:22:a0:0e:55:22:ef:f6:06:04:ce:a2:cf:22:bf:10:
fb:7d:9a:3d:81:f7:49:f6:8f:8e:85:60:8d:32:88:8a:d5:fa:
d2:ed:f1:53:94:c6:b6:b4:a8:4b:22:20:a2:84:c5:90:de:28:
3f:ad:8b:6f:17:84:d0:e5:e7:67:cf:19:a9:aa:37:34:ef:13:
5f:a8:5c:7e:a7:55:1a:f6:fc:ab:0c:e9:b3:3f:bd:da:ed:8b:
f5:ca:8f:8d:93:74:56:f1:ae:39:fa:ed:52:1d:bd:b8:5a:fe:
6d:48:83:c3:56:48:d2:62:95:c3:d9:ed:2b:c7:5b:50:98:a9:
b8:0d:da:87:87:c7:b8:54:3d:47:12:52:bb:2b:89:e6:b9:8b:
fd:33:7a:34:e2:74:83:f8:1c:0e:c1:bf:d4:9b:78:53:7c:6b:
b5:24:ab:b4:10:c9:12:8f:7d:27:ec:0d:9b:ad:a7:c8:dc:30:
1b:9b:79:16:cb:13:53:f0:15:59:05:38:0d:90:cd:e3:68:7d:
fd:82:a2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org