Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/UxsJKzXumxTLGg1H62zCv1U9dn4.roa
File: UxsJKzXumxTLGg1H62zCv1U9dn4.roa (raw, json)
Hash identifier: 6v4XUWXMjucXkpWxgBlo5XB47mUivh+0eEOJo+fDwRE=
Subject key identifier: 53:1B:09:2B:35:EE:9B:14:CB:1A:0D:47:EB:6C:C2:BF:55:3D:76:7E
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C25
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/UxsJKzXumxTLGg1H62zCv1U9dn4.roa
Signing time: Sun 07 Feb 2021 11:35:03 +0000
ROA not before: Sun 07 Feb 2021 11:35:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 210.203.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3109 (0xc25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:35:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=531B092B35EE9B14CB1A0D47EB6CC2BF553D767E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:d4:ff:91:9c:1c:b1:19:cc:18:8b:9f:2a:
9c:43:c4:32:85:a7:8f:1e:1a:4e:e3:28:72:62:5d:
9d:0f:d3:88:81:50:1b:cc:53:05:b0:bc:9a:d6:5b:
08:f1:29:fd:22:a5:2e:71:47:c6:a8:78:70:7f:7b:
4d:22:5c:8e:a6:a8:e4:30:40:f0:ea:09:5d:84:67:
10:cc:6f:bd:4d:ce:76:52:68:91:ba:88:89:d1:b8:
c2:af:cc:74:f0:af:d1:f3:6e:28:ee:ad:cc:16:8e:
b9:7f:38:0e:23:54:5a:a8:64:ae:45:59:64:46:2e:
d7:5d:f6:28:5a:60:6c:a5:72:2f:70:e4:b5:d2:14:
8b:02:bc:2e:43:96:cb:91:09:65:f5:20:a2:25:cc:
6a:9e:88:28:50:03:13:b1:25:6c:9c:9f:6f:da:bd:
8e:13:0c:c5:2c:fa:de:39:24:a5:ec:f1:4e:f9:86:
a2:3b:27:8a:a5:2a:7f:76:d0:c2:81:c9:0d:53:46:
f4:4a:67:dc:71:18:c7:a7:78:33:cd:58:15:f2:1e:
5d:5d:9f:50:fa:09:09:8c:e7:1c:9f:8e:fc:0a:f7:
fe:75:0d:08:c3:c3:1e:53:ce:aa:e8:56:93:b5:e2:
9b:2b:cc:29:b0:4c:ef:fe:32:93:f3:05:05:4c:17:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1B:09:2B:35:EE:9B:14:CB:1A:0D:47:EB:6C:C2:BF:55:3D:76:7E
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/UxsJKzXumxTLGg1H62zCv1U9dn4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.0.0/18
Signature Algorithm: sha256WithRSAEncryption
46:93:5d:f6:44:31:a8:4c:f9:1d:04:56:64:17:d0:bb:55:5b:
92:60:2a:0c:8e:7a:44:03:15:b0:9b:e1:0f:64:ff:36:35:3b:
fe:46:3c:10:02:cb:d6:b4:18:23:17:9e:e9:cc:51:9d:66:07:
2b:ad:be:02:c5:72:ca:ea:b7:d2:d8:1e:88:5a:69:82:d2:e6:
c0:3f:74:62:30:16:0c:1d:aa:56:7d:7f:46:4d:f2:a1:65:f3:
1c:fc:57:60:11:00:ea:c1:90:ab:08:45:06:35:7c:01:be:e1:
5e:d6:0a:54:7d:27:0c:11:10:77:11:ea:18:d9:2b:19:6a:f3:
53:b6:f5:9b:41:bd:c2:eb:03:12:f6:fa:e9:d2:93:4d:ec:78:
ba:66:d1:ea:4c:da:d2:b6:9d:7d:5b:6e:84:f9:aa:95:ef:da:
19:d2:b5:c3:95:b9:c5:dd:4f:71:a3:24:fb:27:4d:83:a2:3f:
f6:f7:63:91:e9:35:ab:8b:6e:06:0f:cd:13:43:6c:bf:dd:96:
db:02:7f:f1:ee:16:1b:48:af:00:30:f9:a3:84:3b:e9:1e:21:
93:d7:9e:b2:0b:8b:4c:f8:18:7d:42:8f:5c:7c:f7:9b:9b:fc:
f0:fb:69:0e:16:11:04:ae:3c:74:8d:87:7d:16:07:9e:3d:d6:
cc:be:1a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org