Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/YYs1R_3vGCIkMPmHnCmtEdPciIw.roa
File: YYs1R_3vGCIkMPmHnCmtEdPciIw.roa (raw, json)
Hash identifier: qTq+QC4Bmxcw3YQxoc4W/CJRyJ0SBqY8tNYV486sFqk=
Subject key identifier: 61:8B:35:47:FD:EF:18:22:24:30:F9:87:9C:29:AD:11:D3:DC:88:8C
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/YYs1R_3vGCIkMPmHnCmtEdPciIw.roa
Signing time: Thu 15 Sep 2022 02:40:00 +0000
ROA not before: Thu 15 Sep 2022 02:40:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9922
IP address blocks: 124.218.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=618B3547FDEF18222430F9879C29AD11D3DC888C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:18:f2:4d:86:ae:0a:6e:d5:86:47:77:e1:09:
a2:22:69:dd:1d:69:33:48:ed:8a:c1:ee:06:54:45:
bf:78:fe:b2:a3:9a:b0:e8:d3:a6:bf:59:14:20:14:
68:ea:42:6b:bf:29:62:88:3b:c4:15:87:30:8a:c9:
d1:8e:df:80:ee:cf:78:c6:20:ba:2b:d1:85:43:54:
3e:ba:c5:40:ab:e3:a6:a9:7b:3b:8d:d9:d0:63:c0:
8a:ef:8f:b5:fe:16:48:ed:72:91:1d:03:0a:e3:bc:
78:8c:c0:93:2b:21:23:06:9b:b9:d3:f0:ef:15:38:
a5:2b:a1:38:fe:d6:de:05:d2:e6:e1:e6:37:4a:83:
2b:0a:ad:ce:d1:db:71:af:94:3e:b4:66:f5:60:52:
2d:df:53:aa:9f:9c:2c:0b:9e:1e:4c:b1:8e:10:12:
fd:17:7e:e5:66:10:d3:81:ed:93:47:cc:ff:2a:5d:
a1:84:cc:9b:bd:31:41:45:74:3a:b4:7c:09:82:c8:
9a:7a:db:b8:f7:30:b1:7e:c4:a3:a0:ef:ee:24:7c:
7a:ef:a9:10:fb:d9:dc:9e:8e:e4:d9:ca:d5:99:4e:
c8:35:eb:d3:99:ed:8a:50:bd:cd:02:9e:e9:84:c6:
44:fd:d4:ee:90:db:64:2d:80:33:b5:7b:91:34:bd:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8B:35:47:FD:EF:18:22:24:30:F9:87:9C:29:AD:11:D3:DC:88:8C
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/YYs1R_3vGCIkMPmHnCmtEdPciIw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.80.0/20
Signature Algorithm: sha256WithRSAEncryption
04:0c:c9:4c:42:d3:a3:f7:cb:f8:ae:7c:0b:a9:c0:e2:33:09:
ed:84:f5:a0:ae:49:8c:f1:05:f7:d9:51:c3:1d:0a:ea:26:4f:
4c:15:8e:3f:2f:eb:b3:50:e9:ca:7f:7f:66:fb:31:b9:cb:3a:
6e:74:2e:45:f5:57:b6:70:8a:c6:61:bd:6b:4b:f2:3f:83:1c:
d6:08:d9:13:0b:44:f8:40:53:26:a4:4d:11:08:37:48:a0:29:
f1:7d:16:91:2c:a0:54:51:57:2f:a3:ec:c6:b4:d5:c8:5a:de:
96:56:8d:3c:5f:9e:2b:4a:14:b4:14:62:64:09:e0:5e:5d:80:
78:e5:42:48:b6:6e:83:a8:ae:a4:90:b4:ee:5a:b2:10:5d:77:
3b:af:c6:2d:69:52:93:de:20:e9:03:80:e1:a3:e5:b2:cf:3c:
8d:d8:1b:89:e1:88:a1:fb:90:e8:e8:b1:73:11:c4:ed:c8:fd:
da:68:88:64:fc:15:83:cc:09:23:a9:25:1d:d6:11:fe:83:3e:
28:0e:10:96:c2:3f:28:2b:3b:8d:b5:06:00:f6:b8:89:2c:59:
e0:ac:c7:c4:69:bd:ee:fc:c8:cf:fa:06:1c:a5:89:90:f8:26:
5b:7f:61:9f:ae:61:20:13:e3:25:67:e2:33:c9:96:81:f6:25:
98:a0:ca:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org