Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Wl4XHPsgor-nFLsi-yY7OBsdXkE.roa
File: Wl4XHPsgor-nFLsi-yY7OBsdXkE.roa (raw, json)
Hash identifier: AdOZ4m8GGBVwf26qO7DzJCFcoUxSwTFhwxpHP6ZGljY=
Subject key identifier: 5A:5E:17:1C:FB:20:A2:BF:A7:14:BB:22:FB:26:3B:38:1B:1D:5E:41
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0952
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Wl4XHPsgor-nFLsi-yY7OBsdXkE.roa
Signing time: Tue 29 Sep 2020 10:01:42 +0000
ROA not before: Tue 29 Sep 2020 10:01:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 203.79.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386 (0x952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5A5E171CFB20A2BFA714BB22FB263B381B1D5E41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:23:4a:74:dd:8e:98:d4:f0:1f:54:64:7f:
7f:8a:f3:62:4b:87:64:b5:17:5c:e1:1d:4c:a0:dd:
83:e1:2a:28:86:16:20:70:a7:62:dc:52:28:93:52:
91:ee:18:6b:be:a6:06:b5:e6:8f:92:79:88:5e:42:
7f:3a:32:95:35:fe:49:76:19:9a:71:43:91:0e:c9:
95:84:32:73:79:3b:cf:7f:38:8a:06:7e:24:98:bf:
01:bc:ce:d0:67:63:51:bc:4a:ca:c0:3a:c3:82:e5:
2d:aa:b5:65:17:3f:24:da:d2:d3:d7:84:ca:7e:dd:
6c:21:1d:e9:da:ad:21:65:dd:39:30:63:81:eb:57:
12:3f:e4:82:25:60:62:ba:89:89:a5:03:5b:70:f9:
c6:fa:f3:d3:50:6f:17:b4:37:3e:c1:5a:7c:12:fb:
50:81:e4:70:06:af:c2:8e:98:f3:98:7d:db:24:f8:
a2:64:4b:a0:08:20:a7:70:d9:1b:de:2b:06:9b:10:
4b:dd:b2:22:85:e6:23:76:f2:78:55:e9:0a:3c:8a:
e7:a9:0d:ae:4e:e6:75:16:88:bc:9b:a6:72:00:65:
e1:ae:9b:85:6f:eb:57:00:12:bd:56:93:4f:a7:13:
8f:e3:57:03:2e:0c:5a:9c:60:65:1f:39:b7:c5:ba:
e0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:17:1C:FB:20:A2:BF:A7:14:BB:22:FB:26:3B:38:1B:1D:5E:41
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Wl4XHPsgor-nFLsi-yY7OBsdXkE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.224.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:b8:37:0d:54:63:95:07:97:54:ee:66:3e:9e:24:0e:fa:fe:
7a:0f:c6:d4:1e:4d:7a:35:46:80:c0:b0:a2:f2:3d:34:94:f8:
db:70:a6:c0:e2:a6:fc:40:4b:c8:97:b9:70:03:b6:11:55:7e:
94:c6:69:38:3d:6e:43:8d:cb:d9:38:82:90:a2:ee:47:cf:a3:
4a:73:a2:b4:01:9d:57:89:55:68:a0:64:78:6d:2e:14:9f:df:
df:02:f1:59:99:84:11:0c:46:ae:c0:3a:8e:aa:29:5c:96:c6:
d2:89:94:70:37:b5:8e:38:e4:05:b8:23:a6:f8:b5:5e:22:7d:
92:93:43:74:ce:fe:31:3a:3c:13:24:02:06:1f:00:e0:f4:f6:
67:17:0a:36:81:51:a8:56:f8:86:a7:0b:b2:39:d7:a7:d4:82:
6d:53:37:7a:06:f4:2b:03:df:df:af:80:2c:32:da:b8:3b:70:
ef:16:39:d3:6a:de:76:a9:62:49:36:fa:5a:a5:ef:9f:c2:14:
65:82:b9:a3:a5:64:3f:ae:8b:ae:1a:c7:01:04:c5:23:27:25:
a5:39:00:d5:e0:2b:ec:cf:fb:8b:14:b6:44:be:f1:f4:b1:f7:
c0:a7:8a:13:41:ab:66:38:51:c2:46:e0:96:d2:ea:e5:27:87:
8e:99:8e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org