Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/WmjBhb3yDhIIvz4ldgrG8G2oDGI.roa
File: WmjBhb3yDhIIvz4ldgrG8G2oDGI.roa (raw, json)
Hash identifier: 4x/D60tAzI/ioFB3Q024nrgbj9f7jmPQKUZb7h08gxc=
Subject key identifier: 5A:68:C1:85:BD:F2:0E:12:08:BF:3E:25:76:0A:C6:F0:6D:A8:0C:62
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/WmjBhb3yDhIIvz4ldgrG8G2oDGI.roa
Signing time: Thu 15 Sep 2022 02:40:21 +0000
ROA not before: Thu 15 Sep 2022 02:40:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.200.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5A68C185BDF20E1208BF3E25760AC6F06DA80C62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:85:32:55:5a:09:18:73:1c:c4:09:b0:6b:e6:
ae:63:ce:6d:81:bf:fa:8d:4e:24:4d:b5:b3:2b:0a:
ce:e0:67:16:46:73:75:13:ca:39:55:f6:48:b0:b5:
d6:5e:10:44:76:1b:56:b9:fe:87:32:ec:93:37:ee:
1e:9d:e9:e8:7c:20:a7:7e:f8:d1:78:78:f5:66:21:
8f:31:93:04:b2:45:ef:3a:3a:5e:dc:62:90:39:c6:
66:ab:df:90:64:5b:34:76:37:54:03:b0:0b:f0:bd:
09:9a:bf:88:df:e3:89:39:a1:42:98:ee:45:a7:2e:
6a:75:8e:e6:9a:d6:e2:6c:b5:57:3a:3c:23:9e:20:
09:8b:79:c3:b3:8d:02:a7:fd:a8:be:3e:43:b2:db:
26:9b:f2:2e:d8:32:f8:d5:0b:fc:9d:d3:d6:bc:a6:
13:83:87:e3:7d:60:ed:52:d4:dd:72:ff:e3:3e:48:
ae:6f:87:3c:34:fc:51:08:ee:89:04:65:85:7d:1d:
3b:56:d8:f2:c9:c7:a0:d2:b3:20:6c:9a:23:ff:ca:
6c:5f:88:a0:fd:fb:08:bd:54:1e:14:c7:fe:13:cc:
8c:a8:46:42:38:cc:93:3e:3e:c6:83:65:c7:86:55:
4a:cd:1b:9c:89:c9:0f:79:b5:34:b6:7e:a9:57:ca:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:68:C1:85:BD:F2:0E:12:08:BF:3E:25:76:0A:C6:F0:6D:A8:0C:62
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/WmjBhb3yDhIIvz4ldgrG8G2oDGI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.0.0/18
Signature Algorithm: sha256WithRSAEncryption
74:cb:16:67:8a:c9:29:8c:8c:fd:70:47:b6:ed:db:a9:40:d3:
64:e1:30:73:82:f2:1b:7f:72:1a:fc:c3:70:ca:10:41:95:9c:
36:c8:fb:9d:1e:57:b3:8a:fa:50:a7:34:a2:a2:13:91:cb:c9:
dc:bd:31:e6:1e:8b:fe:f5:4d:32:f1:48:e5:f3:d9:9f:d2:bd:
ed:3d:88:72:42:f4:81:9d:61:7e:1f:62:2e:77:c0:d7:e0:a2:
70:d9:ab:e0:93:e3:3c:ad:19:7a:8c:e1:bf:64:d2:32:cb:1e:
23:54:ce:0f:21:79:00:ea:ef:89:bb:aa:7e:a3:ae:ce:71:d1:
d3:3f:90:cc:80:84:e5:1a:54:8a:70:97:47:0b:75:03:2e:48:
d3:5b:c0:d0:de:2b:a2:b9:1a:73:ff:2d:8f:f9:95:ef:f4:b7:
75:2e:b2:eb:4e:08:5d:d6:18:41:96:30:fe:e6:ef:69:e9:75:
33:85:64:09:3a:8a:f7:d8:f5:43:f3:56:b9:7d:2d:c9:e8:56:
cd:f9:77:98:2b:91:03:cc:c4:20:cb:52:b1:d9:c7:a8:a6:0f:
d8:1b:0a:41:c6:1d:db:23:ac:06:a5:87:f3:e7:ed:40:0a:ef:
39:88:bd:60:20:89:99:5f:c3:d0:be:86:06:9d:78:f7:49:fc:
67:33:1b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org