Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/SAbgc6VPpw31-YX5H_FzeOjBqVg.roa
File: SAbgc6VPpw31-YX5H_FzeOjBqVg.roa (raw, json)
Hash identifier: 0tp7bVCReL3s0i7ZdcOkeLaE3lN5RcdafVFE1PftWRc=
Subject key identifier: 48:06:E0:73:A5:4F:A7:0D:F5:F9:85:F9:1F:F1:73:78:E8:C1:A9:58
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0986
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/SAbgc6VPpw31-YX5H_FzeOjBqVg.roa
Signing time: Tue 29 Sep 2020 10:01:57 +0000
ROA not before: Tue 29 Sep 2020 10:01:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.202.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2438 (0x986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:57 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4806E073A54FA70DF5F985F91FF17378E8C1A958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:80:7a:6e:9b:29:52:48:23:4d:74:c6:48:
9d:9d:7b:a6:e8:88:78:9c:c3:4f:7a:78:4c:26:cf:
3c:55:91:30:0c:4a:42:3c:15:c6:d2:75:c6:3c:26:
55:de:ae:54:7e:fb:b9:7d:f4:a8:c6:98:5b:9f:93:
96:28:3b:39:d8:c6:fe:cf:51:78:a6:42:f2:f9:b0:
06:dd:6d:34:c6:5d:a8:88:da:77:4b:be:c2:c9:fa:
9b:f5:1f:53:c8:38:83:70:43:db:95:17:7e:48:f3:
84:67:87:aa:7a:b5:20:29:69:61:ad:f7:c4:42:e5:
58:79:74:2f:cd:2b:6e:4e:5c:75:61:7b:9f:2e:99:
27:8b:d9:49:8c:7b:5b:f9:f7:54:7a:15:aa:75:f3:
f7:d9:66:44:31:4b:dd:9f:1a:15:84:54:b4:c8:77:
63:9b:67:c8:c6:6d:d3:b2:55:37:c0:c0:0d:5a:25:
35:f0:08:e3:d1:a9:92:e9:9f:cc:c5:be:92:90:fe:
37:ab:52:78:ea:09:d4:0a:50:e3:7c:d4:57:91:7d:
d8:ba:eb:f0:4a:b7:71:fd:c5:3b:63:38:32:df:20:
9d:b7:ae:19:db:70:68:2e:b8:61:c5:36:80:05:b8:
06:4b:6a:9a:6c:e2:e1:c8:bc:5b:4b:17:76:b9:2b:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:06:E0:73:A5:4F:A7:0D:F5:F9:85:F9:1F:F1:73:78:E8:C1:A9:58
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/SAbgc6VPpw31-YX5H_FzeOjBqVg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.64.0/18
Signature Algorithm: sha256WithRSAEncryption
91:56:15:13:a1:41:c7:16:20:79:50:68:80:4c:bf:65:58:2c:
f0:c6:3b:d3:42:b1:01:70:f8:8f:7f:99:26:b2:ca:5c:49:4c:
97:38:5f:05:2d:09:05:f1:2c:c7:42:4b:a5:d3:f2:e3:c7:61:
d0:0a:2a:a2:bb:79:ae:b1:2f:4e:2f:8f:7a:cd:24:1d:ca:78:
9c:d2:bf:57:6a:24:e6:2d:03:8d:28:c3:b3:16:87:bd:fa:d0:
a0:64:2a:9c:89:1a:09:65:7d:53:cc:06:c5:ad:3c:31:f1:f4:
eb:df:9d:e3:aa:33:01:47:3a:5e:05:68:4b:12:06:4f:aa:d7:
22:e2:22:20:ec:71:94:12:24:55:65:a6:78:64:c3:98:b5:8f:
57:d4:a0:51:08:2c:ff:1d:cc:7c:96:4a:f3:c8:40:f8:d3:ed:
91:79:2c:c8:0a:94:f5:e7:a4:f1:11:c6:1b:e7:e9:b6:14:32:
07:f3:a4:86:b3:92:f6:63:7f:68:ac:0b:40:b3:0b:ad:4f:42:
35:c2:10:35:50:3c:3c:49:74:a5:72:7d:36:35:1c:f7:84:4d:
35:86:60:56:5a:27:95:ec:31:f1:9d:52:54:5e:d7:27:dc:04:
29:24:74:c6:a6:be:71:4f:34:67:39:3f:15:64:8c:47:38:70:
58:2b:62:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org