Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/UQ8cRQZmPGp1o5tFDeYvz8Cy250.roa
File: UQ8cRQZmPGp1o5tFDeYvz8Cy250.roa (raw, json)
Hash identifier: g5UA6BZCU5KrDMwYNDaC805s6VialkaKQtObu+8XQtY=
Subject key identifier: 51:0F:1C:45:06:66:3C:6A:75:A3:9B:45:0D:E6:2F:CF:C0:B2:DB:9D
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/UQ8cRQZmPGp1o5tFDeYvz8Cy250.roa
Signing time: Thu 15 Sep 2022 02:39:46 +0000
ROA not before: Thu 15 Sep 2022 02:39:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 218.187.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=510F1C4506663C6A75A39B450DE62FCFC0B2DB9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:04:08:ff:82:8b:bf:e3:ef:a9:98:44:bd:
68:b1:88:ce:ec:9d:64:eb:d9:7f:d4:3e:98:d1:af:
be:31:a1:2c:8b:ae:d4:63:81:e4:ef:74:f9:5a:ac:
5b:7a:ec:ff:b2:d1:e4:e8:0e:2e:3a:1b:3b:ad:43:
a7:6c:06:c3:6a:43:c3:9d:ee:d2:fe:5b:92:0f:bc:
0c:86:81:0a:e4:02:16:6e:7c:65:67:be:eb:ad:1c:
b3:fb:0d:74:8f:6c:bd:4b:e0:64:4e:7c:f9:c2:fd:
d6:8a:8d:17:a4:52:85:15:ea:23:22:71:7a:43:aa:
b5:e8:b3:0a:16:d8:9b:f0:87:f9:19:2d:2f:a8:9f:
7c:98:f8:5b:d5:3e:8a:19:ac:55:ba:a4:d4:78:ec:
6f:33:0f:b6:37:e1:c6:3d:54:a6:da:a0:30:5f:16:
d8:02:17:10:58:58:ce:d4:fe:c0:93:78:43:3d:2d:
1a:6b:90:d5:64:0d:43:d8:c9:71:0c:44:77:f8:b6:
92:f2:cc:b4:0e:c2:e8:b3:f0:3a:76:c7:b0:33:52:
c6:ac:dc:30:2b:52:55:95:36:b7:92:1e:fd:1a:cd:
c3:e7:b5:01:0f:80:b8:27:c4:a1:4b:33:9c:fc:8d:
04:cb:16:d2:3e:12:ad:0a:ee:7d:1b:1c:f5:0f:ee:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0F:1C:45:06:66:3C:6A:75:A3:9B:45:0D:E6:2F:CF:C0:B2:DB:9D
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/UQ8cRQZmPGp1o5tFDeYvz8Cy250.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.187.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:16:75:5a:42:93:ae:83:fd:c6:3a:8b:71:29:f5:23:ac:29:
49:ec:d5:37:01:4c:86:89:08:80:62:a2:db:cb:ee:36:1b:15:
a9:06:56:96:ee:3a:cd:90:ce:3c:ab:2c:4c:48:d7:e5:eb:c7:
30:a4:16:db:7e:1a:a0:07:8a:ee:95:ff:6c:20:91:40:04:8b:
72:46:de:24:be:a3:f7:38:e6:24:6f:78:1a:3b:dd:1c:07:08:
4d:02:34:e5:8b:70:e8:80:b9:70:71:91:81:58:2f:3d:a2:cc:
04:70:bb:17:eb:ac:17:f4:35:ef:ef:ed:4d:3f:61:53:07:da:
31:41:b4:fe:18:71:d9:8a:81:a1:ac:20:53:f0:6e:d1:94:be:
ee:0f:2e:06:99:21:37:63:54:08:5a:f7:e7:2c:2c:a4:76:7a:
b8:a4:cb:87:13:e5:cf:82:02:f4:1b:4e:62:51:e1:3b:5c:87:
7b:6f:67:2d:b0:79:bf:1f:64:b3:48:97:1b:d7:32:0b:8f:43:
81:19:1a:8f:77:7d:19:c2:5a:9d:36:c9:84:81:e5:49:2e:70:
da:c9:7c:fc:c7:02:e3:1c:06:3c:47:b7:67:7b:a0:cd:3c:4e:
f7:01:dc:90:f9:dd:c8:f6:8b:21:24:c8:b6:cd:8a:db:44:b3:
b3:bc:49:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org