Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Wmmg-eJkBFAusAgTEUtsrhCSMMI.roa
File: Wmmg-eJkBFAusAgTEUtsrhCSMMI.roa (raw, json)
Hash identifier: 8CXT6Jy9d9zgWTTtWNQfSP/7UETqS2q5l6Oucs+iZoY=
Subject key identifier: 5A:69:A0:F9:E2:64:04:50:2E:B0:08:13:11:4B:6C:AE:10:92:30:C2
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1316
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Wmmg-eJkBFAusAgTEUtsrhCSMMI.roa
Signing time: Fri 01 Sep 2023 08:05:21 +0000
ROA not before: Fri 01 Sep 2023 08:05:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9311
IP address blocks: 210.201.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4886 (0x1316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5A69A0F9E26404502EB00813114B6CAE109230C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:f2:9b:72:91:a0:ec:94:2f:db:99:23:fa:
5c:c5:23:ac:e4:de:e8:0c:2b:d2:95:a3:33:45:61:
74:60:af:ca:c5:a2:de:8e:e2:11:14:ca:a2:15:75:
6f:fd:8c:be:57:d8:49:15:4d:7c:6e:22:9c:a5:6e:
2c:94:10:11:e2:c2:ee:63:cd:16:01:88:0f:9f:ac:
df:67:fc:42:bc:ad:8a:57:bf:7c:41:24:33:45:a2:
4b:2c:60:8f:fb:10:47:76:fd:34:ce:47:48:b6:5b:
a1:9d:52:f4:29:85:d5:c6:0a:2b:7d:07:b6:9c:b2:
79:a3:65:f9:4d:2d:9e:48:97:33:e0:16:0e:ee:fd:
bf:d0:6b:1d:d2:60:0a:04:0c:67:a1:d3:5e:03:73:
3d:57:72:04:0a:f3:31:64:0e:e8:26:ad:7f:c3:74:
c5:dd:6c:d6:14:67:49:8a:6b:f9:52:ea:fa:3c:03:
43:13:ac:ac:23:f8:e5:bf:5d:a9:ea:c8:b5:ad:6c:
45:0c:1a:16:8f:53:db:4b:71:52:6e:80:2d:40:dd:
3d:78:88:7d:26:43:2b:b4:72:38:0d:c2:54:0f:5d:
44:cc:98:56:9e:b2:a0:e8:67:6f:b1:7a:39:f1:dd:
71:91:c1:b6:ab:ef:3e:61:4a:56:69:2c:ad:06:a9:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:69:A0:F9:E2:64:04:50:2E:B0:08:13:11:4B:6C:AE:10:92:30:C2
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Wmmg-eJkBFAusAgTEUtsrhCSMMI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.136.0/22
Signature Algorithm: sha256WithRSAEncryption
71:ed:36:45:f2:00:70:40:f0:8c:c3:e3:ee:6d:b4:d7:e9:c1:
89:27:7f:7f:5e:d6:07:0b:c9:75:8a:78:78:e4:9d:a6:15:e1:
2b:5b:e5:0f:d8:62:a4:6a:a6:75:91:a8:f9:00:f4:92:4e:4b:
02:5c:73:8c:53:55:6f:3f:d5:ad:d8:fa:e6:7c:bc:35:02:77:
72:c9:7e:4b:49:01:65:9f:fe:39:48:8f:80:bf:9c:6a:59:7e:
01:f4:c3:3b:7d:0b:fd:63:e9:cf:7c:b7:53:e9:c1:bd:2d:7d:
e7:58:8a:2e:be:4e:63:fd:ce:0b:ad:3f:cf:b5:11:65:2d:31:
13:e5:e0:b8:08:2d:c7:cf:15:69:09:71:3a:ee:a8:a8:8d:67:
4f:c6:c6:70:dd:6d:0c:e9:b6:9a:40:85:02:38:b6:9b:31:bb:
24:47:a7:7b:70:7d:83:04:bb:76:c6:01:16:0c:77:00:d6:b3:
6e:2b:af:e6:5b:f4:d9:67:b5:79:f1:16:4f:b6:3b:9d:42:c5:
88:b3:cd:8b:c6:d7:5e:9c:f8:56:b8:fa:76:18:c9:cd:b2:f2:
3f:82:ea:d9:1c:3a:cb:7c:63:21:8a:a2:61:02:22:69:ca:43:
93:47:7c:1b:e2:9c:e2:e2:be:3d:4e:23:6d:95:67:a9:ee:d7:
62:61:26:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:54:32 2024 by rpki-client on console-ams.rpki-client.org