Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/TdXZXuZyNOEAiHBgaCtGbdu26vc.roa
File: TdXZXuZyNOEAiHBgaCtGbdu26vc.roa (raw, json)
Hash identifier: 8bEns7zkhWnd76+KEXi8j5fl35IvmzMAYSMkZf/uOrM=
Subject key identifier: 4D:D5:D9:5E:E6:72:34:E1:00:88:70:60:68:2B:46:6D:DB:B6:EA:F7
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/TdXZXuZyNOEAiHBgaCtGbdu26vc.roa
Signing time: Thu 15 Sep 2022 02:40:04 +0000
ROA not before: Thu 15 Sep 2022 02:40:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.201.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4DD5D95EE67234E100887060682B466DDBB6EAF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:9c:fa:46:73:47:3c:1b:25:8d:ca:cc:88:
5f:80:c0:df:a3:f5:ec:75:58:70:17:b2:79:6f:a0:
4f:52:12:89:ac:3e:05:82:e2:e9:14:49:ae:c0:b1:
a1:43:23:4e:52:ab:6f:72:50:37:a3:d4:a4:e0:96:
b3:83:a6:7e:f3:c0:ed:61:2c:b5:09:ba:49:49:b2:
bb:81:b5:0a:ad:13:e9:48:9b:a2:67:79:1e:a5:d7:
97:68:22:6e:4b:c0:9a:a7:e0:6a:8f:89:00:7d:9f:
f5:c4:28:87:f0:c4:23:74:ce:69:d6:55:82:69:be:
0b:45:40:34:09:77:40:81:64:bc:95:26:b2:2e:9c:
27:c1:9a:3d:18:54:18:4d:2f:7f:d9:d5:34:6e:4e:
50:7d:07:67:9f:d4:a1:f5:fb:5a:0e:ea:fc:fd:fb:
d1:27:ce:af:22:71:5f:9a:84:0d:ec:83:d9:b0:1f:
b2:5b:06:8c:bd:15:a4:1d:75:f6:47:16:99:aa:e8:
f9:2c:41:8e:53:27:ea:c0:45:f0:60:1a:7d:6f:3f:
8e:81:bc:34:07:3d:31:e1:39:77:e9:4f:3f:c7:0f:
3c:ec:b8:4f:d7:6f:44:f5:1c:99:df:09:7a:2a:e0:
b7:d2:f3:86:4e:93:61:24:08:83:08:d4:2d:04:cc:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D5:D9:5E:E6:72:34:E1:00:88:70:60:68:2B:46:6D:DB:B6:EA:F7
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/TdXZXuZyNOEAiHBgaCtGbdu26vc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b1:64:a9:6e:13:60:8a:ce:a1:0e:0b:9d:63:78:d8:d2:7f:ff:
18:b4:c0:93:5c:29:e3:c0:6a:a0:7d:c0:d8:43:fd:98:f1:09:
b0:ca:0f:d5:40:63:ff:d0:2a:7a:58:7a:99:0e:25:1a:8f:46:
59:41:a4:fd:9a:8a:d5:98:59:f3:19:dd:f4:57:e2:1c:c7:00:
95:3d:3e:f0:93:dc:73:4e:b1:2d:7c:28:17:b3:fe:65:a9:40:
31:11:93:98:a2:c7:a6:8e:ee:be:e0:91:8a:8b:0c:29:a4:3f:
71:52:db:46:d1:93:d8:bb:f9:0f:4f:91:26:6a:54:be:06:72:
95:fd:cf:4e:77:cf:e3:7b:cf:a6:f8:9d:b6:af:0c:a6:fa:09:
63:f1:88:66:66:5d:3b:80:90:6c:e1:d8:75:d1:57:6e:cb:28:
f4:ce:5f:b3:f3:e7:9a:9a:01:8b:33:ea:05:80:e8:9e:c6:c9:
6b:0a:bd:b4:0e:f7:a6:58:fb:22:48:9a:ad:fe:63:82:d7:13:
35:56:6a:ed:db:9e:04:40:51:36:ce:88:f3:c6:12:8e:48:0b:
80:78:48:b5:5b:b8:94:8f:a3:66:ec:f5:9b:58:2d:04:a9:68:
9d:49:13:7e:42:26:f2:63:53:a4:7f:c2:e1:8d:92:e5:be:b3:
56:c0:0a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org