Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/QVckdFTO4KA-fw7sPKh0gY2_tos.roa
File: QVckdFTO4KA-fw7sPKh0gY2_tos.roa (raw, json)
Hash identifier: 5FoJ51pyD8Rm0/MiekAmKICfmRP2WImiKSlDwW7tfvg=
Subject key identifier: 41:57:24:74:54:CE:E0:A0:3E:7F:0E:EC:3C:A8:74:81:8D:BF:B6:8B
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/QVckdFTO4KA-fw7sPKh0gY2_tos.roa
Signing time: Thu 15 Sep 2022 02:39:41 +0000
ROA not before: Thu 15 Sep 2022 02:39:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 203.79.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4157247454CEE0A03E7F0EEC3CA874818DBFB68B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:15:c4:b1:8f:86:1f:db:3c:2f:79:44:fe:37:
6d:f7:e7:18:63:db:90:2b:b9:45:0a:3f:6f:a3:3f:
a5:4b:98:c6:39:54:ba:cd:b6:1b:43:eb:0c:fb:6c:
4e:9c:b6:fb:d4:b0:12:f1:95:e8:06:eb:b1:75:be:
41:6f:a1:2e:71:c1:ba:c7:f5:40:df:97:a3:6a:99:
36:7a:a3:26:1c:b1:62:92:fe:1c:de:2b:9a:4d:b7:
e9:ee:fc:3d:75:16:ac:c1:23:b9:61:a3:fc:56:0b:
fc:80:f5:2b:60:e2:c4:36:11:f5:fe:28:bc:3b:5d:
26:51:56:61:94:0a:1d:ae:ef:b4:bb:8c:4a:43:24:
c6:b9:0b:e1:54:51:ed:2d:aa:8c:e5:4a:85:5f:b5:
52:1f:f1:44:58:b3:43:5c:26:e9:9b:60:6f:78:b4:
8b:56:75:b6:61:2d:59:5d:0d:97:8f:cb:9e:da:c2:
af:8b:89:6c:00:bc:11:04:25:27:39:e4:0b:0c:82:
33:a2:d6:d8:d7:19:60:58:08:1f:0f:d4:86:20:e1:
94:85:97:a6:0e:6b:cd:83:80:ac:a2:69:6c:49:85:
e4:a8:ca:7d:f0:81:83:6c:e5:0c:7c:99:54:38:8d:
fb:d9:bb:5a:a7:61:a6:65:cb:52:52:9e:9f:7f:98:
59:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:57:24:74:54:CE:E0:A0:3E:7F:0E:EC:3C:A8:74:81:8D:BF:B6:8B
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/QVckdFTO4KA-fw7sPKh0gY2_tos.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:12:7c:06:18:14:98:86:27:f4:8f:da:64:22:1a:46:e6:91:
34:4a:14:12:94:12:8e:e2:36:e1:6c:a1:8f:6b:75:fb:b2:33:
af:fa:90:93:cb:40:c7:9a:c4:b4:10:95:e8:2a:08:c7:6c:77:
89:05:58:47:89:93:01:b3:7b:c4:f0:4d:94:29:e0:19:13:68:
59:87:b2:43:16:a2:72:92:a4:fe:73:2e:ea:bc:0b:7e:98:fb:
fb:cb:8a:1a:39:b7:a6:5d:32:ff:00:be:2e:a7:3a:c4:92:ae:
e4:1e:ed:cf:c3:78:c1:93:a0:f0:e7:e8:5b:f9:d5:41:b1:d6:
79:e0:d9:98:29:ab:24:6f:a3:23:3c:61:c0:f0:04:a7:85:79:
08:1f:6e:42:32:cb:25:fb:74:c0:0c:ea:73:c9:8c:2f:4f:c6:
07:62:51:f7:f8:bb:35:d5:42:83:7d:56:41:09:48:b3:f0:e1:
bb:2e:68:f2:06:bc:bc:c1:52:ef:be:a8:12:47:84:09:15:e2:
6f:30:55:66:e2:cd:23:6b:a5:c8:2a:a4:5b:b4:6b:8a:1c:82:
ef:38:d8:1e:af:e8:69:6d:8e:8b:26:45:ce:eb:34:5d:6a:18:
4f:1d:e6:f5:a5:95:4b:af:7b:97:86:79:3a:61:6e:d9:17:94:
81:be:5a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:51:32 2025 by rpki-client