Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/WZrDs1-slxvoH-WQoTtCb0_9ocw.roa
File: WZrDs1-slxvoH-WQoTtCb0_9ocw.roa (raw, json)
Hash identifier: GOYDxi2sTdgP6Q1tTkjSu3oViuTwreLVFHZrvNqZG5g=
Subject key identifier: 59:9A:C3:B3:5F:AC:97:1B:E8:1F:E5:90:A1:3B:42:6F:4F:FD:A1:CC
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0A69
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/WZrDs1-slxvoH-WQoTtCb0_9ocw.roa
Signing time: Tue 10 Nov 2020 04:06:45 +0000
ROA not before: Tue 10 Nov 2020 04:06:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 2404:0:1000::/40 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2665 (0xa69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Nov 10 04:06:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=599AC3B35FAC971BE81FE590A13B426F4FFDA1CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:21:be:75:25:24:42:23:35:71:bd:8a:65:db:
8b:01:06:d3:ce:11:d4:f1:c4:0e:75:36:32:d7:58:
9d:93:69:9a:57:b9:83:18:44:f9:c3:00:1d:a2:29:
38:5e:6d:dd:76:a7:a4:ad:30:3f:9b:2c:85:6c:f9:
89:e4:4d:52:cb:54:72:d4:ad:4b:ca:96:c8:6e:f6:
c3:1d:1f:13:39:ed:0f:7d:f1:57:c9:c4:1b:3c:d2:
ba:1c:9d:b2:f9:e7:cf:90:06:34:81:06:5e:41:d8:
af:c5:4e:89:c2:7b:73:93:7f:ef:bc:74:cc:29:58:
9c:3e:5e:4f:46:32:92:04:7d:53:b7:bc:ba:f6:f4:
95:c5:83:66:01:4d:6b:a1:36:6e:9c:1c:a4:e8:49:
d4:c7:48:b2:00:7f:55:e3:cb:8e:08:1e:4d:8a:a0:
5b:39:16:be:38:05:1d:1e:7e:dd:86:32:30:f3:3c:
e0:78:7a:7f:dc:53:96:f1:52:e5:66:b9:53:77:e7:
fb:ed:d1:cc:ca:60:c7:8e:5d:3d:c0:ae:7e:42:25:
b4:24:af:d7:37:0e:68:b7:ba:8e:96:e5:d7:3d:4e:
42:6f:74:cd:b7:0e:7e:e7:70:45:c4:e1:b4:6c:c3:
f9:59:36:f9:40:b2:b3:cf:5c:51:d2:81:3f:9b:d4:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9A:C3:B3:5F:AC:97:1B:E8:1F:E5:90:A1:3B:42:6F:4F:FD:A1:CC
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/WZrDs1-slxvoH-WQoTtCb0_9ocw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:1000::/40
Signature Algorithm: sha256WithRSAEncryption
1d:c4:c3:3d:01:bd:63:dc:95:b9:d1:4a:26:03:ad:1f:05:96:
c1:e5:91:a3:d0:00:27:6f:9d:33:4d:59:13:25:cf:7a:b2:7c:
cf:d6:80:2b:24:c9:67:d2:eb:25:d2:82:1b:17:8b:18:05:09:
a5:17:31:e5:7f:14:2b:80:2c:67:9d:f1:8b:e4:a4:ff:30:f0:
ab:c7:e5:7b:f1:ce:e2:de:b2:9a:af:c0:bb:be:0e:10:5d:56:
cf:7b:a8:08:dc:56:03:68:bf:08:80:0b:1e:92:c7:56:d6:33:
80:55:94:b6:35:4f:12:44:4f:fa:8c:5c:3e:ff:bd:6f:32:06:
1e:a1:8c:1b:85:33:ad:e0:42:41:19:f2:30:20:ce:d3:b1:50:
36:aa:98:a2:a4:40:e0:86:81:39:8d:4d:43:13:90:b9:df:d1:
3c:be:f5:16:6c:69:17:26:c5:75:ca:02:4e:2b:7d:09:84:98:
6b:d1:ea:cb:78:de:30:73:9c:8f:64:bb:b2:0c:07:3c:44:5f:
40:a7:9e:be:59:79:26:f2:ad:fd:88:34:d5:3f:ed:3f:49:f5:
e5:01:ce:cc:d1:bd:42:bd:51:2c:18:08:67:9d:3b:42:f7:b0:
98:5d:51:d6:54:01:c5:49:f7:5a:11:6e:7b:66:f9:f4:f3:a4:
6d:61:bb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org