Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ScJGr7bNUW6MIx0UbJgY6Fdx8Cg.roa
File: ScJGr7bNUW6MIx0UbJgY6Fdx8Cg.roa (raw, json)
Hash identifier: 5uz9idvYHBzeeknMSkhySDhFqwirGs6h9nNxZsXafMc=
Subject key identifier: 49:C2:46:AF:B6:CD:51:6E:8C:23:1D:14:6C:98:18:E8:57:71:F0:28
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 08F9
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ScJGr7bNUW6MIx0UbJgY6Fdx8Cg.roa
Signing time: Tue 29 Sep 2020 10:01:18 +0000
ROA not before: Tue 29 Sep 2020 10:01:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131591
IP address blocks: 223.22.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:18 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=49C246AFB6CD516E8C231D146C9818E85771F028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0d:dc:1c:b7:c4:1e:10:4b:5a:a1:6c:22:76:
04:d5:bf:b5:0f:90:f2:a0:a5:6f:33:12:d4:1c:4b:
e7:cb:92:c4:7a:82:68:9e:db:60:73:f9:64:ab:63:
ea:9c:10:db:16:6c:2e:be:2a:05:a8:f9:a0:af:9c:
15:16:3c:6a:e9:38:3c:2a:b6:e3:c8:b9:84:62:dc:
c4:fd:d9:fc:54:5c:cc:79:7f:cc:bc:d6:5d:64:5f:
d6:89:a5:ca:5d:63:73:4c:8d:3d:72:69:0a:61:7d:
e8:86:5c:87:0b:d9:6d:34:ff:03:e0:67:e0:0f:0d:
83:90:18:cd:d4:15:4e:eb:bc:83:22:4d:bb:27:14:
58:4c:db:ba:99:4c:39:12:1f:17:ac:f8:11:cd:9d:
69:9a:aa:c0:48:77:c8:78:c9:36:5d:68:6e:a6:cf:
0e:a8:96:ec:46:40:d8:54:d8:6c:e2:29:eb:77:75:
70:9d:f0:3f:f2:dd:01:3a:4f:82:f4:c0:e9:1c:b5:
6f:b8:82:fb:71:02:3c:ee:ad:09:2a:9d:6e:d2:07:
07:10:47:38:df:10:cc:01:e5:69:b4:f7:a7:82:20:
9a:4f:82:17:43:4b:e7:a0:15:87:d4:5a:e1:23:66:
c1:ec:95:02:47:1f:ed:c6:6f:c9:98:a9:f4:13:1c:
c7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C2:46:AF:B6:CD:51:6E:8C:23:1D:14:6C:98:18:E8:57:71:F0:28
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ScJGr7bNUW6MIx0UbJgY6Fdx8Cg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.22.32.0/19
Signature Algorithm: sha256WithRSAEncryption
46:e3:be:c9:29:63:63:7c:1e:bb:5d:a0:c3:76:66:13:97:fd:
57:5f:99:08:48:36:c4:5b:da:b8:cb:20:ec:1e:23:6c:d8:aa:
02:2f:d7:d5:67:c1:0f:f6:92:72:a6:84:e4:ab:6e:b0:9c:12:
1d:b6:f9:60:42:0b:0f:5b:49:98:11:1c:bf:e2:95:21:9a:b8:
91:31:2f:b1:65:75:3d:84:3a:06:8e:d2:68:55:88:a3:11:72:
57:e5:b8:df:85:17:ea:39:0d:c3:f4:87:32:4e:4f:c0:65:ac:
cd:a7:7c:c4:65:14:d3:00:87:1e:bb:86:03:22:39:d0:8e:b5:
dd:a9:68:d4:37:4c:76:93:4e:44:ac:c4:81:2b:7f:b5:ce:9e:
77:ef:49:c8:6c:6b:d3:b8:3f:e0:e8:6c:a9:42:4f:ca:4e:2e:
ed:bc:85:0a:2c:57:50:15:95:3d:cb:3a:e9:38:81:ce:d4:4e:
9a:08:28:3e:e5:73:1a:68:d3:7c:d9:a1:c0:88:c0:37:b9:fe:
a4:ad:2d:10:03:eb:b8:b0:bc:63:35:c5:be:48:5b:84:b1:10:
25:60:d6:88:d7:1a:fc:0b:47:4b:19:94:cd:8f:22:9d:b4:2a:
61:4f:ad:2f:98:5e:15:76:99:d9:c7:0f:02:df:6b:ea:21:f9:
88:7f:8e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org