Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/VOJFDbK5sxonB6ufalDNbJ3WLug.roa
File: VOJFDbK5sxonB6ufalDNbJ3WLug.roa (raw, json)
Hash identifier: JMOQvzO73LrgoPpxrUgNmiVG4/qQnkckgu5Q+kOscow=
Subject key identifier: 54:E2:45:0D:B2:B9:B3:1A:27:07:AB:9F:6A:50:CD:6C:9D:D6:2E:E8
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 093B
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/VOJFDbK5sxonB6ufalDNbJ3WLug.roa
Signing time: Tue 29 Sep 2020 10:01:37 +0000
ROA not before: Tue 29 Sep 2020 10:01:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 222.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2363 (0x93b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=54E2450DB2B9B31A2707AB9F6A50CD6C9DD62EE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:f6:8a:0b:d7:9f:02:fc:bb:5d:79:35:81:
c1:e5:7e:cf:f9:7f:da:64:b3:a7:a3:5b:9f:ef:08:
f2:39:2c:9f:0f:c1:e1:61:d8:19:f0:3b:ea:23:00:
b8:a1:10:24:28:d5:8b:cf:54:83:90:77:70:70:8c:
55:4c:3b:41:05:1a:57:7c:2c:3a:e9:fe:a3:63:b7:
53:d1:a5:b1:d6:67:b2:81:3a:24:2c:96:3f:fb:4c:
39:21:09:46:6d:21:a7:7a:5a:71:4c:8b:5b:0c:67:
7a:06:d5:2a:d6:f1:16:73:fa:dc:fa:bf:07:14:68:
fb:e3:f8:df:58:3a:4d:dc:11:3f:e2:61:d5:f7:72:
39:1a:97:72:42:5a:78:9f:b3:e5:5d:b9:1a:ce:b9:
7f:9c:2d:c4:12:36:50:12:c7:e3:11:ed:31:4f:9d:
35:70:2d:d9:d1:7e:16:70:44:64:96:6a:5a:21:35:
d8:2a:1b:b0:0b:51:14:1e:94:fd:9f:4e:62:c8:49:
1f:ed:4c:fe:00:d7:ea:78:61:5f:97:dc:aa:ff:0e:
f0:ef:ea:b8:c6:2d:26:24:9e:d6:c5:11:82:23:05:
d5:dd:d2:4a:8a:bf:9b:e4:0b:6a:d4:2a:78:72:ce:
6c:62:90:5a:36:a2:e6:47:fb:1d:ef:85:bc:ba:c5:
ba:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E2:45:0D:B2:B9:B3:1A:27:07:AB:9F:6A:50:CD:6C:9D:D6:2E:E8
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/VOJFDbK5sxonB6ufalDNbJ3WLug.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.157.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:1d:36:9d:89:a8:8a:4a:ac:43:51:d2:df:43:53:af:b7:82:
54:1d:a2:ee:5f:99:b8:a6:76:78:9f:73:c1:5e:fc:26:0b:8e:
e4:f6:0c:05:29:b4:8e:98:b4:92:b3:a4:71:f2:3c:3b:70:ec:
33:fb:39:dc:a6:ab:4b:7e:b5:5d:8b:a8:c8:6b:85:d4:7e:79:
60:3c:64:ce:4a:43:d3:ca:44:57:60:ac:d8:2c:f9:28:68:51:
aa:9c:8a:af:04:04:f2:0c:ed:60:4b:51:70:7d:13:1c:59:b5:
5a:03:a9:5c:80:b3:b4:18:80:b2:aa:5b:fd:e2:53:11:8c:95:
8c:76:ad:96:f6:ff:02:b4:3e:82:ec:6c:19:b9:a1:06:46:52:
c9:6c:f6:1f:7b:c3:02:9e:14:78:e4:ec:5c:32:cb:03:f9:f8:
a6:fc:fa:f7:f1:2c:ba:03:d7:c9:ce:07:1e:97:aa:5c:9b:5f:
fe:58:fe:40:8d:b5:93:d3:f4:ec:ae:14:fc:04:be:14:c8:a1:
b7:4d:c0:63:51:79:ae:1f:c3:d1:4e:95:25:48:b1:d5:6e:f6:
1e:89:95:e2:23:1d:09:da:7d:75:07:7d:22:32:08:f7:f0:43:
d2:66:18:40:57:47:1a:10:d0:c8:0a:9a:b5:90:56:5e:c2:a3:
31:5e:b1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org