Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ZGs9swq_pKupWerNoof2AabUEG8.roa
File: ZGs9swq_pKupWerNoof2AabUEG8.roa (raw, json)
Hash identifier: NKLNXf9N81PBcJj8QaTsTEoJhar/qfAMYXXvef/vAOI=
Subject key identifier: 64:6B:3D:B3:0A:BF:A4:AB:A9:59:EA:CD:A2:87:F6:01:A6:D4:10:6F
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ZGs9swq_pKupWerNoof2AabUEG8.roa
Signing time: Thu 15 Sep 2022 02:39:45 +0000
ROA not before: Thu 15 Sep 2022 02:39:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 203.79.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=646B3DB30ABFA4ABA959EACDA287F601A6D4106F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:a2:3e:7f:77:00:b6:3b:ff:ed:50:5b:72:
94:6e:0d:a7:1b:df:df:bc:f4:88:e0:65:de:b4:d8:
51:03:8c:f3:67:6f:3b:62:7d:aa:5b:19:77:72:4c:
ec:d8:6f:09:0d:e1:67:8e:19:a6:13:13:47:5b:f8:
1e:19:18:a1:44:19:53:b8:92:3e:c2:40:31:b1:05:
53:2d:8d:aa:c9:9e:7d:9a:e2:2d:76:e5:1c:fc:f6:
05:c2:17:8e:e1:f0:ed:f0:59:dc:b4:cd:44:b3:1c:
b8:95:7a:24:89:d7:e7:f7:34:97:6b:16:f4:c5:f1:
dc:eb:66:38:38:43:b9:79:1f:6c:b6:04:38:7c:5d:
5a:75:89:99:95:16:d5:30:a4:8b:65:96:25:7f:19:
65:a7:31:a7:75:f0:ec:ce:b0:5d:66:a2:25:1e:3a:
86:64:8b:97:90:6f:68:fb:54:66:3f:85:09:a4:07:
dc:e7:dc:ed:e0:58:ea:74:78:44:0b:66:1f:ce:60:
4e:af:3f:26:07:7e:ea:a1:63:73:85:f0:02:08:33:
6e:57:54:f7:14:09:01:66:2c:36:9e:61:db:2d:ac:
3a:2d:8e:f5:b2:9a:26:c0:4a:ca:0e:a9:5e:b3:ec:
47:87:46:d7:b4:54:4b:f4:66:fc:b6:70:78:be:be:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6B:3D:B3:0A:BF:A4:AB:A9:59:EA:CD:A2:87:F6:01:A6:D4:10:6F
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ZGs9swq_pKupWerNoof2AabUEG8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4a:a4:ec:70:30:c0:db:46:98:32:6c:9e:11:41:a9:31:a1:6f:
84:65:a7:93:9d:3d:05:4e:8e:1c:cb:fa:4e:c4:f4:03:f8:b1:
44:ec:b3:23:ff:ca:67:d0:1c:4f:96:53:33:b0:97:3c:29:aa:
d3:67:e8:59:69:ff:e5:26:a5:2c:33:33:f1:39:f4:d0:30:ff:
bd:ce:d7:4a:95:16:c9:3f:9e:d1:74:bd:7f:f2:e7:85:f2:af:
39:b4:71:1f:5e:9b:d1:7d:c6:4b:70:d8:5c:24:4d:3f:80:d9:
c0:78:ce:39:59:99:03:97:8b:31:83:5e:2c:6f:71:1f:ff:ed:
ca:23:e9:47:82:75:d9:a7:20:b6:9d:01:68:71:a7:af:2b:59:
7f:8b:db:6f:c3:39:3c:77:16:3e:36:d1:25:8e:43:1c:3e:65:
7f:56:94:d8:8d:86:11:55:a9:76:7a:8d:00:be:31:9a:20:2d:
fe:09:45:01:5a:4f:f2:2b:75:fc:b1:20:b3:bb:c3:a4:28:f9:
cb:a0:d0:0b:23:3e:1e:2b:07:46:22:a2:1d:63:a5:47:ed:f9:
75:78:f6:a6:eb:b6:06:37:cd:46:cb:7f:e6:2e:6a:ca:23:d0:
64:56:49:e1:da:93:1c:00:31:1d:c3:27:d2:85:ac:99:24:36:
c4:f3:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org