Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/TBXweHZiWV5xDIfNwYx1wspdPSs.roa
File: TBXweHZiWV5xDIfNwYx1wspdPSs.roa (raw, json)
Hash identifier: hHN1rh1E4qTRYK/CP006SEylGnLT4rvSSVtZL0AHxWs=
Subject key identifier: 4C:15:F0:78:76:62:59:5E:71:0C:87:CD:C1:8C:75:C2:CA:5D:3D:2B
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DC2
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/TBXweHZiWV5xDIfNwYx1wspdPSs.roa
Signing time: Wed 29 Sep 2021 02:39:31 +0000
ROA not before: Wed 29 Sep 2021 02:39:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7482
IP address blocks: 203.79.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3522 (0xdc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4C15F0787662595E710C87CDC18C75C2CA5D3D2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b4:0d:a6:75:27:92:56:6e:86:5f:b0:9f:82:
5f:2b:b2:68:a7:45:f5:13:df:df:09:8e:b4:a2:49:
36:53:63:84:7b:a6:6a:3b:9d:64:14:d6:84:88:9e:
4a:c7:d7:90:36:77:94:63:56:2b:9a:19:a7:b5:24:
4a:4b:c1:da:b2:41:50:88:a7:b8:87:d4:1e:f7:f3:
ea:72:fb:1a:ea:b3:a0:74:f6:a3:44:33:7a:ec:6d:
e4:c8:de:83:33:9a:9b:8e:b6:89:6f:4b:53:48:12:
60:cf:97:65:f9:dc:d1:0e:ee:55:07:4c:28:d1:7c:
1f:cd:35:da:53:4d:23:f6:5b:e0:fb:67:96:00:01:
f9:2d:10:04:16:6a:06:03:92:83:4f:0a:51:c2:a9:
fc:0b:a7:a7:22:3e:00:5a:08:5c:19:21:aa:80:30:
22:20:5f:93:e8:64:5b:ea:1e:21:a9:db:b4:67:16:
5f:29:fe:2c:c4:fb:75:cc:e8:8c:49:1a:2f:b1:d6:
9e:5d:7e:48:19:80:44:68:bd:0e:ca:03:51:0b:84:
4e:d9:5a:35:18:1d:b3:cf:76:03:6e:f9:30:70:99:
ac:34:15:87:23:4d:f1:6a:96:6b:61:76:fa:73:df:
ae:bf:a4:55:a4:82:9b:1a:13:8c:e9:c6:f3:55:8c:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:15:F0:78:76:62:59:5E:71:0C:87:CD:C1:8C:75:C2:CA:5D:3D:2B
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/TBXweHZiWV5xDIfNwYx1wspdPSs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.232.0/21
Signature Algorithm: sha256WithRSAEncryption
08:bf:7a:de:80:0c:20:7c:3c:c0:02:10:16:ce:be:e9:c4:79:
01:31:5d:a0:e5:14:62:8f:d1:09:b9:5b:03:6e:aa:db:86:06:
53:99:6c:31:4f:b7:b3:ef:89:9a:54:12:77:b3:17:f2:16:a4:
ff:38:8f:ad:19:3d:f8:11:ff:9e:e8:26:dd:81:c6:0d:7b:59:
b8:aa:68:5a:65:37:6f:86:c7:33:15:f0:60:a9:9a:07:52:0c:
e9:9c:f7:b3:c6:10:34:db:aa:5c:32:13:cc:39:ba:e9:10:b7:
68:57:21:be:6e:f8:03:0e:fe:8c:5d:85:62:51:f7:52:a2:e7:
6d:fa:83:fa:c1:e6:98:88:c4:4e:c6:1e:a2:74:99:3a:37:62:
95:90:26:2f:7e:49:7c:79:ab:f4:b2:52:28:8b:90:23:8b:14:
a8:3a:d8:98:da:8b:bb:8e:75:50:6c:59:56:23:0a:cc:a7:87:
a8:b3:25:98:a5:34:e4:b2:a4:4a:4b:01:7f:46:15:4d:b3:79:
85:40:be:2b:bd:0d:8d:96:34:68:e4:8d:ff:28:8b:df:be:cb:
2d:24:57:74:59:5c:30:0c:11:1d:2f:77:5f:8e:6c:eb:26:cd:
c8:a2:49:d5:9e:5b:20:dd:4f:5e:94:96:27:7a:b7:ed:ec:e8:
52:e7:11:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org