Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Wvio45cDmGTcJWsX4Fh6ToiiC5g.roa
File: Wvio45cDmGTcJWsX4Fh6ToiiC5g.roa (raw, json)
Hash identifier: xIXwzsm+oXiRCqoIQVoR9ypTOZHS3nmtqKUpQwJikIs=
Subject key identifier: 5A:F8:A8:E3:97:03:98:64:DC:25:6B:17:E0:58:7A:4E:88:A2:0B:98
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1087
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Wvio45cDmGTcJWsX4Fh6ToiiC5g.roa
Signing time: Tue 16 May 2023 08:36:19 +0000
ROA not before: Tue 16 May 2023 08:36:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131142
IP address blocks: 223.22.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4231 (0x1087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:19 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5AF8A8E397039864DC256B17E0587A4E88A20B98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:52:c9:57:e2:ef:68:bf:2a:c7:72:fc:3a:
52:0e:ec:0c:d4:b1:20:14:5a:0c:bb:a4:c1:24:38:
ad:3b:94:92:87:3f:8a:75:97:40:e5:7a:e8:76:8d:
13:a4:e0:d1:c7:24:f1:f8:f8:76:12:29:06:5a:1a:
d2:4a:3f:d5:a3:65:a7:bc:ab:d1:62:9c:95:3f:c7:
eb:d5:42:c6:34:a9:95:16:04:cb:ec:eb:55:9a:6a:
90:73:e6:b8:2a:55:cd:d5:65:ac:de:21:7c:65:ec:
bd:ff:ee:28:c2:ab:b8:84:b1:68:f3:ee:f3:04:7e:
3b:24:bd:9b:52:38:68:61:28:87:a9:c6:ba:47:91:
d3:d1:10:f7:07:e1:74:12:ef:d5:3f:59:25:14:78:
f6:76:9e:2a:21:94:cf:d8:de:f1:8a:a6:60:70:68:
25:2c:7c:0b:12:ad:f8:06:7e:a2:33:45:97:39:a3:
00:3e:a8:c4:38:33:00:35:49:f5:5d:0c:6b:d9:3f:
63:7f:99:1c:a5:aa:7c:09:61:d6:77:3e:c7:cc:c4:
2a:46:95:35:09:59:dc:d3:f1:b2:4b:57:b2:24:a5:
ad:6e:5f:51:37:8f:65:c1:96:db:a6:17:8c:8f:f9:
bd:a0:29:97:4b:78:80:93:fa:fd:05:97:7a:dd:38:
10:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F8:A8:E3:97:03:98:64:DC:25:6B:17:E0:58:7A:4E:88:A2:0B:98
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Wvio45cDmGTcJWsX4Fh6ToiiC5g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.22.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ba:1c:6f:80:81:57:1a:9a:ac:ef:34:03:91:4f:e4:12:6b:
67:ea:72:a8:7f:c7:71:71:27:8a:02:09:5c:93:17:8f:46:e9:
46:b7:3a:f7:83:09:09:b7:d0:a0:e9:00:fd:ec:1c:c6:e3:7d:
04:29:fa:c0:55:f1:47:65:dd:64:45:55:e3:e9:f8:b9:26:19:
f7:82:ff:66:40:7c:d2:bc:69:02:0a:9a:90:c4:2b:89:80:d7:
79:91:0f:e3:7f:5d:2d:9e:0f:e0:af:8f:80:f3:a8:5c:c8:9b:
a7:bd:4f:6b:46:c9:b8:7d:c5:c5:57:44:22:4e:10:78:c1:8a:
05:44:e0:aa:8a:fd:44:10:3c:84:b6:ad:8d:2c:2a:5b:08:4b:
27:ac:2e:bd:9a:f1:51:58:53:a0:e0:cc:71:a3:fc:85:4a:c8:
8f:7f:94:8f:e7:9f:1f:62:b1:1d:cf:24:85:a8:62:6d:70:e8:
a3:26:6c:be:38:ba:74:87:7e:27:69:34:33:5d:2a:f4:a0:07:
99:54:c6:80:cf:d1:47:cf:2e:c7:22:f0:2a:c5:8b:48:dc:09:
a1:98:34:c8:ed:3e:c0:38:2a:a3:86:cd:20:b7:65:f6:b4:07:
18:82:9b:e9:01:2e:d9:03:f7:e6:52:1a:1d:dd:57:ff:b7:17:
e9:51:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org