Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/T6Dl4Nu7yblAXX3hVPEeoGj4Wxc.roa
File: T6Dl4Nu7yblAXX3hVPEeoGj4Wxc.roa (raw, json)
Hash identifier: yNBmi7QdDZZnb6viv4qgs8olcwyVM9KU2gjQfsLGL0k=
Subject key identifier: 4F:A0:E5:E0:DB:BB:C9:B9:40:5D:7D:E1:54:F1:1E:A0:68:F8:5B:17
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/T6Dl4Nu7yblAXX3hVPEeoGj4Wxc.roa
Signing time: Thu 15 Sep 2022 02:40:32 +0000
ROA not before: Thu 15 Sep 2022 02:40:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 218.184.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4FA0E5E0DBBBC9B9405D7DE154F11EA068F85B17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:c4:66:e8:cf:db:37:e5:e3:1a:ad:d2:b1:
49:3a:2b:72:3e:a6:55:f6:e2:40:6e:2d:65:7b:ee:
65:5a:33:41:c3:74:6b:7b:5e:1b:cf:4d:d5:5d:e1:
c9:9e:8d:b8:0f:47:89:3b:5d:22:6d:7d:b5:ad:b7:
35:f0:fb:04:0d:4d:1c:ac:af:8f:4d:36:76:59:3c:
6c:a4:dd:2c:95:58:c6:1b:6e:f0:28:23:5f:c6:c6:
40:b9:70:96:b6:b9:fc:c6:96:15:f2:81:b2:e7:fa:
42:6e:ae:95:63:a8:56:51:f5:67:94:bd:3f:0f:a1:
3f:ba:53:41:7d:38:ee:3f:72:f9:91:64:5f:57:c7:
a1:6e:1c:36:6b:4b:83:a2:57:8b:8d:78:56:9c:34:
90:21:44:cf:e5:c0:5c:72:b5:5d:fa:7e:15:2d:3f:
7d:93:9a:a0:9c:96:19:5d:92:35:7a:22:6a:b5:c6:
ef:b5:28:01:82:47:02:bb:39:1a:a7:3f:10:94:a5:
ca:0c:19:69:5a:c4:6f:15:c1:58:ab:fd:82:a1:7f:
c4:0d:48:f6:82:05:79:89:76:ab:a6:3f:40:6d:74:
2b:ce:4d:aa:ec:dd:c8:fb:47:d9:e1:75:ce:da:9c:
34:33:5e:a7:24:87:b6:5f:d0:29:c1:89:9c:c6:f2:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A0:E5:E0:DB:BB:C9:B9:40:5D:7D:E1:54:F1:1E:A0:68:F8:5B:17
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/T6Dl4Nu7yblAXX3hVPEeoGj4Wxc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.184.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:c0:56:33:4e:6e:63:92:6a:9d:db:61:4d:00:f2:ab:0f:cf:
3c:5e:be:1d:90:d1:43:df:38:d6:24:c8:a9:b5:fa:a0:dd:da:
a5:3b:9b:0f:33:31:6f:7f:d1:cd:42:f1:02:00:5d:2c:e8:e7:
c8:e1:90:94:0c:70:10:d7:fe:26:5f:4f:32:df:a8:44:35:5b:
56:37:58:77:ec:73:bb:0e:df:68:dc:4f:19:87:86:e1:ba:85:
97:60:d1:b7:c1:ca:d0:ed:33:1f:b0:d9:93:d8:5f:40:b8:d0:
1a:36:96:07:73:0b:4b:87:73:0a:82:e8:37:a3:75:75:3d:10:
2a:42:a8:3c:fa:7e:e5:8c:bd:45:b3:18:5c:8f:fa:6b:50:fb:
90:93:95:dd:de:0e:c1:fb:b0:57:bf:cc:3b:fc:8d:c9:2f:ac:
af:0b:97:15:0a:e8:0a:7c:51:f3:0e:29:38:c6:ed:39:cc:78:
5f:3d:bd:ed:f1:24:bb:02:20:17:f6:46:ae:f6:bd:60:51:0e:
1b:71:a4:48:4d:65:f6:b6:90:30:7b:f3:de:0c:20:1d:88:47:
03:be:24:d7:61:fc:b5:7c:75:3a:68:4e:5e:f3:85:aa:64:6b:
a4:67:ce:5d:4a:66:b6:50:42:f4:e2:6a:83:82:f5:7b:db:5d:
72:9a:71:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org