Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/UKASzR0s_efyv-pTmrQNeWlf9CA.roa
File: UKASzR0s_efyv-pTmrQNeWlf9CA.roa (raw, json)
Hash identifier: mqzT26mylt9KOro2zFZzPUXKNsERDKC0vtAOC5Mf1z4=
Subject key identifier: 50:A0:12:CD:1D:2C:FD:E7:F2:BF:EA:53:9A:B4:0D:79:69:5F:F4:20
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0BA7
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/UKASzR0s_efyv-pTmrQNeWlf9CA.roa
Signing time: Sun 07 Feb 2021 11:33:29 +0000
ROA not before: Sun 07 Feb 2021 11:33:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24154
IP address blocks: 203.207.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2983 (0xba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:33:29 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=50A012CD1D2CFDE7F2BFEA539AB40D79695FF420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:fd:6d:7d:eb:48:eb:2f:bf:c3:b1:a1:71:
cd:24:60:fa:73:17:1e:8b:db:42:21:62:b0:28:57:
1e:32:bf:f3:1e:a8:f3:44:37:e5:f1:3d:da:41:d5:
bc:2d:b2:fc:38:ac:ba:f8:89:9d:b5:9e:cb:5a:a9:
65:ee:55:cd:c0:13:7d:77:a1:2e:50:0d:cd:88:ca:
be:1a:8f:a3:a5:78:5c:b7:9a:16:d2:c3:6c:fd:ed:
db:78:3a:36:5b:08:78:86:10:9a:17:a7:ba:54:fc:
16:7e:27:46:3e:1c:1f:8d:81:3b:c2:c2:b8:d0:a2:
c7:58:10:60:ce:c6:9f:fd:77:d9:87:99:cc:1f:cf:
57:f5:ef:13:e0:36:79:87:a3:53:72:39:08:2a:ac:
05:33:04:30:d4:73:6f:bc:ad:2e:6d:71:cb:16:a0:
36:9a:30:c8:04:66:a2:b9:cc:1d:9f:e1:4e:43:9d:
4d:d7:6e:7d:2f:2f:25:61:2d:38:c4:2e:c3:bc:6d:
0b:0c:e4:3d:ec:c9:05:45:a6:4b:4d:35:73:22:a4:
d4:7f:f4:f6:10:33:77:9b:b7:7d:15:4c:2a:46:a8:
2b:63:b8:c5:af:36:fd:6c:a5:db:09:0d:78:10:b9:
9a:ba:db:bc:93:a4:d8:11:59:52:f1:ae:34:88:99:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A0:12:CD:1D:2C:FD:E7:F2:BF:EA:53:9A:B4:0D:79:69:5F:F4:20
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/UKASzR0s_efyv-pTmrQNeWlf9CA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.207.44.0/22
Signature Algorithm: sha256WithRSAEncryption
06:a1:70:7b:1d:bb:d3:02:a9:6f:62:08:5d:9f:2a:52:c5:3e:
b5:af:22:1a:04:1c:21:53:83:80:96:c3:e4:74:9d:7f:b5:d4:
00:87:7f:42:c4:bf:63:dc:67:34:35:7c:8a:e7:8b:1c:77:a8:
a7:e2:2e:52:89:4c:21:3c:0c:61:0b:8b:af:74:bb:46:0c:71:
56:8b:8a:d3:cd:c9:b9:04:81:e3:37:5e:5e:ac:6e:23:e8:fc:
c6:e5:aa:f8:a2:1c:11:47:bf:22:2f:ad:08:75:c8:6c:83:c5:
45:9d:36:ed:55:d7:86:7b:6c:ae:65:63:92:75:a8:8b:b6:96:
d0:94:9b:d3:20:86:50:a4:bb:f6:b8:85:61:c0:20:45:78:d9:
0e:4f:4e:d5:02:fa:25:47:b9:41:6b:ae:4a:3e:12:2a:3b:bb:
bd:9b:64:ba:2b:09:9f:b3:f8:e6:65:47:73:5b:ca:2e:ec:6e:
74:66:c7:37:85:78:25:c8:9e:d4:77:b6:dd:c0:0d:55:82:e4:
57:00:d5:dd:f2:a3:22:4c:c9:ca:fd:74:c7:dd:01:0f:5e:63:
dd:d8:cf:ef:a1:02:79:ac:91:9c:a6:ff:71:52:c6:f0:1d:03:
a7:d5:38:20:fe:86:04:38:95:fa:48:78:77:71:f3:4a:1a:54:
8d:8c:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org