Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/SimKIwFA_Qj8YcXaF44pWr-RXdI.roa
File: SimKIwFA_Qj8YcXaF44pWr-RXdI.roa (raw, json)
Hash identifier: jjyYPjD/CGV6TjdPpW6bhQZYInvie4AP2KDewnooWiY=
Subject key identifier: 4A:29:8A:23:01:40:FD:08:FC:61:C5:DA:17:8E:29:5A:BF:91:5D:D2
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0941
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/SimKIwFA_Qj8YcXaF44pWr-RXdI.roa
Signing time: Tue 29 Sep 2020 10:01:38 +0000
ROA not before: Tue 29 Sep 2020 10:01:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24154
IP address blocks: 210.202.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2369 (0x941)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:38 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4A298A230140FD08FC61C5DA178E295ABF915DD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:da:37:91:8a:bd:41:22:1c:16:bd:46:c9:
92:01:e0:29:58:6b:47:4e:9c:65:c5:aa:f0:ad:e8:
6c:16:ee:2f:01:04:24:12:67:e7:53:30:28:d3:f5:
bb:4c:fc:18:10:0d:0c:d8:ef:d5:ed:93:15:86:65:
6c:ed:dd:d7:77:4a:22:4b:51:af:9a:15:74:74:c9:
21:98:e5:4a:63:d0:eb:a5:50:4c:28:51:e3:6d:08:
41:bd:df:bc:6e:ff:2b:b2:f3:5c:9c:75:39:0e:e1:
5a:25:43:bb:2d:56:fa:9b:d5:af:2f:ae:ac:a1:7d:
88:b6:51:20:47:2f:39:12:a5:ac:56:16:c9:41:f7:
83:b2:b8:ca:4d:2b:a2:46:c1:06:82:64:19:da:79:
cd:25:84:fd:3b:37:10:99:61:8f:8c:2c:60:03:ce:
52:c5:91:c9:5e:88:03:46:d3:b0:e7:1a:05:e3:6a:
aa:b3:92:f3:fd:98:7e:f1:6b:aa:f8:8f:83:45:5c:
58:d4:a3:bc:c5:5c:bd:56:80:3f:f2:a9:3a:91:fa:
71:ce:41:a3:46:69:d6:7d:d6:7e:f7:c6:01:a1:01:
06:3e:84:98:98:d7:be:22:4b:49:e0:07:05:9e:d1:
1b:f1:6d:91:c9:22:57:d8:bd:9e:f4:1e:6f:ce:3a:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:29:8A:23:01:40:FD:08:FC:61:C5:DA:17:8E:29:5A:BF:91:5D:D2
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/SimKIwFA_Qj8YcXaF44pWr-RXdI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.64.0/18
Signature Algorithm: sha256WithRSAEncryption
04:75:5f:38:39:d4:02:fa:c0:a1:88:4d:87:d8:ff:80:75:90:
26:3f:83:96:18:4e:bf:a9:01:17:bc:3c:ac:0e:c5:5e:a2:df:
35:10:bc:0f:d5:a2:7a:4c:e7:86:38:ce:b4:26:ac:fe:30:14:
d5:15:58:ae:70:1b:26:11:f1:7c:89:95:98:85:92:83:86:14:
56:e9:87:9c:7a:4a:72:5d:df:18:48:a0:cf:ae:47:53:96:3b:
31:4f:ba:0b:ea:e5:ae:4e:64:da:77:15:4a:62:c9:48:d1:ad:
42:1c:e0:86:6f:65:46:32:45:50:ac:5b:5f:25:5b:fa:9f:df:
14:98:bc:a4:11:3d:67:4b:9e:7f:f0:d4:47:f7:eb:1b:80:88:
d2:f8:32:e0:5f:b5:77:a7:5e:ce:b2:f5:69:85:ce:73:c8:84:
39:db:4c:6d:78:37:bf:8a:ea:eb:54:74:68:be:24:33:d6:15:
fe:d9:38:36:0a:c2:86:75:ae:5e:79:6a:e6:59:c1:ae:26:95:
7d:b2:b4:92:0e:bf:c0:91:a1:d2:a3:9e:72:42:50:4d:36:92:
f6:5d:3c:27:92:d7:00:b8:50:94:62:0c:c8:28:73:1d:24:93:
e7:bc:0c:ee:6e:42:f5:c5:5b:be:6a:8b:28:6f:41:36:5a:c5:
5e:ab:55:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org