Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Wo_biY97W4-mIovz-s2idMkdPIU.roa
File: Wo_biY97W4-mIovz-s2idMkdPIU.roa (raw, json)
Hash identifier: joBzQ63H6QkGMl0tnA3e/qjfewKJGNHGfjr4gF1PwQE=
Subject key identifier: 5A:8F:DB:89:8F:7B:5B:8F:A6:22:8B:F3:FA:CD:A2:74:C9:1D:3C:85
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 08E5
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Wo_biY97W4-mIovz-s2idMkdPIU.roa
Signing time: Tue 29 Sep 2020 10:01:14 +0000
ROA not before: Tue 29 Sep 2020 10:01:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 210.200.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2277 (0x8e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:14 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5A8FDB898F7B5B8FA6228BF3FACDA274C91D3C85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:03:db:40:93:8a:bf:40:ef:de:b5:76:24:
c6:7e:4e:c5:0a:9e:d4:bb:b0:50:72:aa:33:37:b6:
b6:e4:6a:d0:6a:c7:32:2e:97:96:35:2e:49:28:58:
44:36:f0:4a:cb:f7:60:cd:37:a2:6b:c5:68:a8:6b:
27:18:f4:eb:0b:59:a6:6c:7f:f0:0a:74:61:24:37:
9e:d3:7a:f0:e9:5a:8d:ce:75:c2:8b:ee:5d:ae:31:
0a:e9:45:f5:f0:74:60:d1:8b:9d:f2:37:9f:c4:0c:
57:6a:c2:dd:79:b0:7c:eb:f1:5b:96:d7:cf:ca:fc:
1b:ba:eb:48:e2:7f:4b:1d:35:31:07:a8:56:fb:28:
6d:98:0e:09:f4:bd:71:ae:b0:10:e4:57:fa:8d:e1:
b2:66:86:02:15:5b:34:ca:b4:75:8b:35:7b:cc:17:
cd:30:b9:16:bc:16:d7:9a:b8:f6:8d:16:56:fe:ba:
01:49:4a:01:8e:98:e0:82:06:b5:03:99:93:d8:19:
76:1c:46:49:d4:1a:98:51:78:84:91:8c:fb:78:e7:
53:ab:7f:dd:4d:d6:79:ca:d5:a3:b6:7a:5b:85:93:
66:0f:27:fc:d9:6d:3a:37:82:48:12:13:a6:2e:1f:
f7:c5:fb:67:97:be:51:bd:72:be:f3:8a:cd:bc:7e:
0a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8F:DB:89:8F:7B:5B:8F:A6:22:8B:F3:FA:CD:A2:74:C9:1D:3C:85
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Wo_biY97W4-mIovz-s2idMkdPIU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:a6:57:93:10:c6:61:01:52:e5:68:df:0f:7e:78:a3:38:cb:
3b:01:37:c3:4a:6f:53:46:d6:2a:5e:e3:14:30:7e:b8:a2:2d:
01:d1:bd:e0:00:3d:94:4f:b6:96:cb:9d:59:73:fd:94:bd:ef:
69:57:74:e9:57:df:d8:ed:98:89:67:ca:54:55:47:b9:71:bf:
18:9a:f7:f8:79:4b:64:57:e0:2d:29:c8:ff:70:f3:14:d6:67:
24:83:d0:07:fd:a4:44:84:8d:0b:4b:be:37:55:46:a6:be:1e:
78:62:dc:12:c3:ed:6c:b5:72:b0:c6:f2:fa:38:05:94:76:cb:
30:23:8a:6c:d4:65:e9:e4:9a:ca:9e:e0:2c:25:e4:ae:28:2b:
c2:bb:ca:17:73:0d:02:f0:67:98:7d:58:3c:81:a2:c7:1d:04:
27:a2:68:6d:7d:18:b2:48:d2:27:58:a1:72:54:83:63:b8:ad:
93:d9:be:dc:2b:73:d2:84:34:e3:f0:cf:8e:35:c7:28:23:e2:
3a:5f:c4:74:98:c5:a1:f0:3e:0f:c6:9d:78:0d:43:18:22:64:
10:9f:18:8e:14:11:c2:48:83:94:c7:fb:19:27:f4:f3:85:c7:
c9:70:4f:e0:7f:7e:3f:47:3e:22:33:cd:d3:8c:29:c5:39:81:
e0:9a:a9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org