Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/XC-A4gC-xpcyGanrmRE9z-Z0Ma8.roa
File: XC-A4gC-xpcyGanrmRE9z-Z0Ma8.roa (raw, json)
Hash identifier: l8doGuyeY9Yw4OCG4kuMlnEP5qeshs0zjr4bYgMkjUU=
Subject key identifier: 5C:2F:80:E2:00:BE:C6:97:32:19:A9:EB:99:11:3D:CF:E6:74:31:AF
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 126E
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/XC-A4gC-xpcyGanrmRE9z-Z0Ma8.roa
Signing time: Fri 01 Sep 2023 08:04:27 +0000
ROA not before: Fri 01 Sep 2023 08:04:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 101.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4718 (0x126e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5C2F80E200BEC6973219A9EB99113DCFE67431AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:f2:38:d0:47:a2:70:04:a1:62:01:a4:07:
cc:e4:42:1f:10:f5:84:83:a4:91:01:85:50:49:8d:
5e:28:a6:69:82:26:32:3b:1f:e9:9e:13:aa:ff:bd:
84:86:f4:ab:53:cf:6e:79:9f:11:ff:9a:af:c1:5e:
ca:52:f7:cf:8a:21:1f:eb:34:2a:45:6c:35:44:81:
9f:cd:b0:2f:9f:6a:ed:03:13:63:2d:14:26:2f:fd:
a0:11:4f:56:1c:1a:44:4d:11:c8:a2:61:5b:d7:57:
52:a0:08:9d:6d:4f:05:bf:ad:a7:1d:c6:fa:7f:34:
0a:95:08:e7:39:76:6a:bc:c7:32:1c:68:58:97:4b:
37:22:2a:c5:92:63:87:e6:5b:8b:fc:ff:2a:90:be:
9e:45:f9:4f:8d:03:c0:b4:e3:15:4e:04:ad:e3:1e:
c2:e8:e7:d3:a6:99:35:c2:55:3f:1e:20:7c:66:0d:
b8:ab:b4:ce:9d:0d:8f:1c:6f:01:55:8c:c1:64:0c:
78:48:7a:bd:af:fd:63:36:5a:bf:75:55:f3:8f:58:
34:b0:de:3b:70:e6:fd:70:91:ca:e4:77:0e:c6:3d:
cb:ee:39:17:c7:c8:9b:49:f9:9d:46:0b:47:11:e3:
cc:7b:c0:4d:62:33:28:b3:87:02:50:68:42:f7:37:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2F:80:E2:00:BE:C6:97:32:19:A9:EB:99:11:3D:CF:E6:74:31:AF
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/XC-A4gC-xpcyGanrmRE9z-Z0Ma8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.136.0.0/14
Signature Algorithm: sha256WithRSAEncryption
9d:6a:84:26:75:89:dc:a8:9a:37:77:f8:18:a3:8b:4f:78:c6:
0e:9c:03:72:2b:c8:32:be:a7:9c:72:46:03:90:f3:1b:19:fa:
2a:4b:b9:a5:28:b1:24:8b:67:70:b5:73:fe:46:ef:fb:3b:c5:
d1:e6:b1:0f:cd:f6:cc:57:4d:95:d6:a8:9e:ff:f9:b0:92:06:
e4:76:72:27:83:88:92:31:64:b5:ef:ba:eb:ab:30:a6:71:b5:
3f:d1:86:73:e4:a0:a0:85:1f:a8:fa:aa:89:c9:b2:95:56:8c:
ce:9c:81:96:25:29:2e:8d:a0:f1:73:fa:7e:5a:0a:a4:43:9b:
20:44:4e:4b:b1:a5:55:65:4f:a7:c4:0f:2f:d5:b6:0c:b2:21:
3c:b2:61:5c:a9:59:c7:bf:33:2b:f4:1b:84:13:3d:b0:20:71:
94:35:b0:d3:8d:2f:dc:96:55:fd:6d:50:e3:d3:97:ac:3d:a2:
45:63:6d:a9:01:49:2b:66:f4:55:f8:bd:20:f5:b6:17:df:6c:
72:88:9d:63:3a:21:31:ce:1b:a9:4a:c7:24:19:a5:0f:b1:85:
84:69:b2:3c:43:08:e7:ec:3b:05:65:6f:8f:f5:3b:b8:fd:56:
60:38:d9:04:4b:93:b1:58:27:58:b5:81:89:45:84:81:02:3b:
50:2d:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:54:32 2024 by rpki-client on console-ams.rpki-client.org