Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/TUFxbUjmD_mOYR-8VyyRSHnltIU.roa
File: TUFxbUjmD_mOYR-8VyyRSHnltIU.roa (raw, json)
Hash identifier: 5bquvolOe2acf9k59fyoq1dUrOp1lnUgnpKxage2/Gw=
Subject key identifier: 4D:41:71:6D:48:E6:0F:F9:8E:61:1F:BC:57:2C:91:48:79:E5:B4:85
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 08E6
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/TUFxbUjmD_mOYR-8VyyRSHnltIU.roa
Signing time: Tue 29 Sep 2020 10:01:14 +0000
ROA not before: Tue 29 Sep 2020 10:01:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24154
IP address blocks: 210.200.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2278 (0x8e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:14 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4D41716D48E60FF98E611FBC572C914879E5B485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:f2:e0:f3:da:02:58:11:f6:5a:bb:ef:59:
a1:07:92:f2:f1:de:6e:a1:04:c7:24:73:e3:5b:c2:
f7:b3:ff:2f:6e:44:96:4a:18:2b:78:54:e9:75:86:
63:66:7c:af:36:0c:b8:15:6e:2b:96:1e:21:b8:cb:
3f:0b:b4:f5:ac:de:f2:7d:da:ef:d8:fd:42:29:aa:
60:fe:97:ec:98:65:d6:5e:2a:a1:7b:1a:6b:e7:9b:
78:a5:59:dd:3a:f9:93:a5:e8:71:87:2d:69:2d:69:
7c:24:5a:ec:0a:09:28:26:d0:45:b0:08:d7:41:ec:
41:38:c1:74:cd:5e:0b:e7:07:cf:33:b3:2b:51:48:
f6:f0:4c:4e:4c:7a:27:48:e0:95:9f:d6:f8:59:04:
e2:33:6f:65:93:ee:33:42:71:7f:2d:dc:36:a8:f9:
e7:48:6e:28:9d:d9:29:e2:7c:3a:4b:1c:f7:d5:5f:
4d:96:04:d3:6f:e1:9c:20:96:22:39:f4:58:c3:d5:
39:27:73:fb:0f:9b:3d:52:6c:d8:f0:e3:7e:59:77:
36:ce:a7:41:93:2f:55:5a:f7:04:21:b2:74:be:1f:
71:39:76:f9:63:89:2a:2d:2a:19:b9:38:78:45:23:
70:a9:e8:39:96:e1:67:f1:f9:d7:36:75:9f:6f:68:
9b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:41:71:6D:48:E6:0F:F9:8E:61:1F:BC:57:2C:91:48:79:E5:B4:85
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/TUFxbUjmD_mOYR-8VyyRSHnltIU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.0.0/19
Signature Algorithm: sha256WithRSAEncryption
60:cc:9e:33:97:cf:c7:32:fd:b0:14:d7:ab:1a:23:70:2b:34:
ae:03:a9:a9:a3:a1:50:13:c3:5d:b6:a6:74:8e:07:97:3d:19:
7a:75:30:60:01:34:5a:78:1b:e9:2a:88:4d:f3:56:8b:b4:21:
cf:be:29:d9:ab:aa:46:e2:e5:ec:1a:2d:ba:24:fe:8d:1f:0d:
8a:2a:8d:68:f6:51:ec:bc:b3:9c:23:b1:17:42:51:1e:bf:d1:
99:5f:e8:33:7a:c6:ca:02:cb:6b:95:b8:31:47:89:22:79:f0:
63:ef:f8:b9:15:65:b0:b4:9b:05:e2:f8:54:c3:4c:4c:a8:91:
d0:0d:62:44:23:e4:28:e0:a7:b3:e3:8d:5b:24:9a:b0:25:dc:
63:0b:f8:45:95:1c:73:80:ca:fb:aa:18:09:f2:a0:5b:b5:1d:
eb:0d:a3:6a:e0:53:32:e5:a0:c2:42:fa:43:39:2e:68:94:70:
09:ef:06:8b:c2:5b:80:6f:21:43:43:9f:61:7a:b0:1f:30:18:
cf:68:66:ae:32:bb:84:27:00:a6:a9:59:bd:53:0e:9c:be:4d:
26:da:b2:a6:e8:40:12:80:10:17:1b:0e:c8:c6:1a:11:1a:87:
2a:d5:29:14:f8:12:8a:29:c2:48:48:ce:1a:24:c3:e6:a1:59:
31:72:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org