Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Rh2rrkQ171h1hGKKoiWbuSnXJ_k.roa
File: Rh2rrkQ171h1hGKKoiWbuSnXJ_k.roa (raw, json)
Hash identifier: o+HYFzncBu7fMNAsT7jNedY8M2MtfcCt/3WZuJAxILU=
Subject key identifier: 46:1D:AB:AE:44:35:EF:58:75:84:62:8A:A2:25:9B:B9:29:D7:27:F9
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DB5
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Rh2rrkQ171h1hGKKoiWbuSnXJ_k.roa
Signing time: Wed 29 Sep 2021 02:39:28 +0000
ROA not before: Wed 29 Sep 2021 02:39:28 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24154
IP address blocks: 203.207.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3509 (0xdb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:28 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=461DABAE4435EF587584628AA2259BB929D727F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:93:bd:5a:af:d9:fd:b8:de:e9:09:e0:37:
c3:e8:4c:10:8f:16:d6:e9:a7:e0:b6:02:2f:3d:90:
f8:9d:fc:83:1f:f0:63:27:58:a9:c8:93:d7:cd:bf:
ed:fc:64:40:ff:8c:83:5e:f3:4f:79:e3:9b:12:ba:
6a:a6:6c:d9:65:2e:74:6c:9c:4e:51:37:ba:c2:f9:
b2:0e:66:08:cd:be:4f:66:41:25:69:9f:24:11:c8:
89:78:93:c5:a1:3f:de:d7:f7:fd:f8:f3:e3:05:ba:
78:f9:ef:03:08:c1:1e:17:d4:46:7f:73:18:49:b9:
e6:26:0d:69:b5:a7:ff:6d:02:c8:1e:97:ed:04:f4:
27:21:0b:71:bb:c8:93:4b:a6:b6:97:87:19:9b:d5:
cc:ce:e2:d4:48:ba:9a:fc:dc:c8:a1:05:6f:f7:a7:
82:39:ec:48:13:9d:07:b8:ac:c4:b9:26:f4:25:ea:
0f:6c:41:70:09:0f:4e:ab:20:95:4b:9e:67:e0:ba:
cf:f9:c8:72:22:aa:74:20:01:66:06:7d:32:de:a6:
7e:a4:4b:d1:e8:d2:52:cd:fb:ae:42:33:e3:02:94:
f0:51:05:63:54:e9:59:d5:32:eb:f5:2e:ce:2e:17:
7f:23:0a:48:0e:3c:b8:45:4a:3d:c0:10:f6:32:37:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1D:AB:AE:44:35:EF:58:75:84:62:8A:A2:25:9B:B9:29:D7:27:F9
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Rh2rrkQ171h1hGKKoiWbuSnXJ_k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.207.44.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:b2:1f:15:21:5b:90:ba:7d:3f:01:47:ee:df:45:ed:c1:68:
3b:39:ea:7c:20:c5:01:6c:a2:2f:55:e2:86:8b:80:0d:12:98:
ba:34:c9:18:04:6a:79:92:43:33:41:4a:dc:3f:4a:0b:f9:62:
b7:ed:76:64:53:12:af:31:71:91:dc:eb:46:8b:13:33:88:b0:
10:3d:57:df:18:11:82:ad:88:85:aa:35:1a:ce:32:9c:67:97:
88:a3:3a:87:51:86:0f:b1:86:d2:88:7a:56:e3:6a:47:fb:e4:
6d:dd:59:1a:11:8d:33:47:dc:ec:5e:8d:31:95:f3:c9:ce:bc:
6f:27:cc:a0:7a:a1:3c:16:77:31:3e:89:78:69:90:89:1c:d9:
71:3e:79:e2:c8:fc:90:c8:94:68:cf:d2:8b:eb:8b:9f:79:32:
d6:b0:a3:1a:75:04:7c:8e:95:52:1a:36:a7:bd:62:8f:53:f2:
0f:57:ad:b2:61:54:b6:cb:bf:7f:b8:0e:75:de:e8:56:30:40:
7a:6b:4c:64:20:18:7d:9b:ac:20:81:27:b7:ad:10:8b:ce:e5:
8c:64:4a:a1:80:53:f7:c3:88:89:30:a0:de:82:24:7c:08:a1:
e4:8c:84:53:cb:e2:2b:5d:4d:01:b9:7b:10:1e:e6:5f:9f:5f:
a5:86:fe:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:08:20 2025 by rpki-client