Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/R_SlJMslYAaxP-Fos6TkcugpHCk.roa
File: R_SlJMslYAaxP-Fos6TkcugpHCk.roa (raw, json)
Hash identifier: 40xHN9GG5VVftCWp+XLbpq1iq63spqLio0xIH03XmCg=
Subject key identifier: 47:F4:A5:24:CB:25:60:06:B1:3F:E1:68:B3:A4:E4:72:E8:29:1C:29
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 097C
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/R_SlJMslYAaxP-Fos6TkcugpHCk.roa
Signing time: Tue 29 Sep 2020 10:01:54 +0000
ROA not before: Tue 29 Sep 2020 10:01:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24154
IP address blocks: 210.200.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2428 (0x97c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:54 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=47F4A524CB256006B13FE168B3A4E472E8291C29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:0e:2a:f2:44:04:52:55:ea:d8:c1:3e:76:
b6:dc:5b:d6:07:8f:bd:8f:3d:d2:4c:71:6d:a3:4f:
c3:b6:7e:80:2d:ba:5d:b3:e9:25:7c:3a:9b:53:4b:
8e:46:d7:ed:49:90:40:c1:6d:5e:e9:85:fa:98:64:
75:b8:41:67:3a:cd:46:14:8a:e4:f7:34:8c:84:b8:
aa:c4:25:d4:ac:31:33:85:57:5a:d9:27:29:8f:35:
1a:be:e6:97:30:58:55:4e:92:63:50:c2:f1:eb:be:
16:6c:51:3a:9b:54:40:67:39:c2:95:ad:15:a1:40:
38:40:df:87:d2:73:7b:aa:e9:23:09:ba:76:31:0e:
e8:d6:5e:bd:0e:28:74:4f:e8:63:cc:f1:0c:88:91:
66:b4:46:11:b3:96:dd:1a:f7:c9:00:be:83:73:8a:
ff:e8:5f:86:b5:6c:f8:89:31:38:61:70:52:91:a8:
72:b2:78:4e:18:0e:da:1d:e9:ad:e9:7d:80:1b:af:
20:0b:ac:64:95:1e:00:c9:43:be:f2:94:a1:bf:a0:
c4:2a:65:77:10:40:7c:b8:dd:93:37:ea:85:da:84:
db:a5:31:5c:dc:ae:fc:d1:a6:11:b7:4f:7e:6f:35:
1a:3b:da:bf:61:dd:e3:b1:5a:b6:2c:8f:f6:93:d4:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F4:A5:24:CB:25:60:06:B1:3F:E1:68:B3:A4:E4:72:E8:29:1C:29
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/R_SlJMslYAaxP-Fos6TkcugpHCk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.16.0/20
Signature Algorithm: sha256WithRSAEncryption
72:aa:b1:a6:d4:d1:ca:12:7a:95:b3:74:8c:cb:a9:f1:e4:da:
c0:6f:12:10:43:d1:92:2c:29:5d:d2:80:fa:d1:53:f0:ce:01:
d3:c1:94:10:5c:c2:da:80:e5:37:3d:04:8c:ba:6f:6d:37:b4:
16:51:36:cd:17:57:55:d3:23:62:15:fe:2a:12:0c:2a:76:76:
5e:7b:af:ec:a7:bf:a5:1a:56:c3:96:de:b1:71:00:9d:dc:d8:
08:91:33:cf:61:b0:4d:55:3d:a6:d2:9a:e5:56:54:b2:13:e6:
11:20:4a:ef:a6:e4:9a:3e:47:94:91:93:92:95:2a:d8:bf:fa:
38:50:e9:8e:67:4e:2d:de:f6:5a:ce:bf:0b:4c:c2:b3:1b:e8:
53:ce:63:91:f0:0c:71:19:02:b1:94:53:50:84:3e:b3:ea:33:
4d:0a:4d:f9:9b:38:e7:e0:37:1a:e2:15:4e:38:49:3d:cc:e5:
91:fb:fc:25:f3:46:e7:b6:c5:a9:25:93:67:91:75:13:01:5c:
38:d5:e9:9e:d0:30:e4:bd:da:17:48:89:38:b7:7f:42:c4:7a:
e6:b2:e7:19:c6:62:96:fb:8a:5f:3b:f2:7e:b0:c0:b3:6c:54:
09:fb:d7:aa:33:12:ad:a6:e3:cb:27:0b:4c:06:bc:ec:a0:79:
46:3b:87:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org