Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/SWk2p_t4N871EcTcsp5FZyxE1m4.roa
File: SWk2p_t4N871EcTcsp5FZyxE1m4.roa (raw, json)
Hash identifier: Rsd2/afhLqFabtCRAprz9Xguj/o/Xoi2/+c4fc3ZF+U=
Subject key identifier: 49:69:36:A7:FB:78:37:CE:F5:11:C4:DC:B2:9E:45:67:2C:44:D6:6E
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 129E
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/SWk2p_t4N871EcTcsp5FZyxE1m4.roa
Signing time: Fri 01 Sep 2023 08:04:43 +0000
ROA not before: Fri 01 Sep 2023 08:04:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 203.79.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4766 (0x129e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:43 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=496936A7FB7837CEF511C4DCB29E45672C44D66E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:82:f5:c1:89:94:21:41:f7:d6:98:48:18:
92:79:e5:78:80:6d:58:65:fd:15:a2:3c:d1:82:d6:
13:56:10:81:44:ba:e5:ab:2d:ae:a6:d6:4f:13:cd:
26:93:da:dc:42:ae:85:b6:d2:fa:4d:db:77:a8:9c:
58:20:32:b8:05:b3:68:cc:7c:9e:92:4d:e2:92:a6:
af:27:a7:67:08:a6:a2:a1:53:49:84:95:e9:77:8d:
c4:86:82:61:2d:48:be:41:f8:6d:d0:c1:4c:12:42:
13:9a:d2:19:80:4f:df:b9:a7:91:d7:be:d8:47:a9:
02:5e:9e:73:e5:c3:09:27:b0:fb:d5:a8:15:3e:e2:
0a:f1:02:b2:1d:af:b5:91:f3:a0:91:ea:e4:43:2f:
fc:95:fa:56:cb:a1:dd:d1:e1:3d:23:92:30:44:2d:
0f:8b:77:44:47:b8:d1:36:7e:e5:e4:c3:3b:5f:0f:
91:55:cb:d0:f5:15:c3:59:ab:51:9d:95:18:05:66:
61:08:98:f2:cc:e6:c3:58:6f:0d:6f:51:43:79:cc:
0e:1c:75:8c:69:f2:08:64:cf:20:0f:79:24:f5:c4:
45:36:ad:41:1b:b5:8e:96:8c:3d:b7:82:b5:88:85:
db:83:59:f8:e7:b9:1c:2f:39:50:c7:d5:6e:a1:8e:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:69:36:A7:FB:78:37:CE:F5:11:C4:DC:B2:9E:45:67:2C:44:D6:6E
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/SWk2p_t4N871EcTcsp5FZyxE1m4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.240.0/21
Signature Algorithm: sha256WithRSAEncryption
90:97:84:bf:ea:98:b4:b2:fc:17:26:0f:86:fe:55:55:95:64:
0e:1f:ba:15:4f:41:a0:0c:32:e7:da:b5:38:1d:dd:77:bc:19:
af:07:d7:a4:63:a7:47:43:9f:7c:7a:98:78:84:52:98:b0:80:
aa:1b:2e:00:53:b6:da:f4:80:8d:7b:67:1c:8f:0b:91:16:b1:
d9:78:aa:00:9c:fe:44:81:69:b7:6d:53:bd:61:8d:5e:84:27:
fc:03:95:f0:9e:54:ff:df:ff:c1:34:b8:d4:ea:e9:ab:10:5b:
32:b4:05:b8:ce:5a:cc:71:63:77:a0:36:cc:3f:7f:d1:d3:e7:
52:9c:9f:f4:d0:46:31:2b:34:d2:33:17:65:31:95:72:9d:9d:
2e:c9:b3:df:f5:00:5d:4e:74:df:3f:f9:41:92:c9:a2:95:59:
d6:4a:e7:26:a2:b4:8d:98:ca:8e:31:8c:e5:0f:f3:b9:7d:a2:
58:ae:54:e2:66:9c:4d:13:93:51:f3:32:d2:3c:97:6d:7b:af:
02:85:10:2f:bb:b4:64:ec:34:0b:c3:78:76:ea:b4:a4:74:31:
20:a8:b7:72:e0:b4:8a:56:35:aa:c8:30:d6:d6:4a:93:d0:e6:
98:3f:7e:12:43:53:bb:d2:8d:72:1e:6e:28:3b:d2:0b:88:04:
c6:cb:70:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org