Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ZP07xtgsm8tYPa22ADl46uBjoZw.roa
File: ZP07xtgsm8tYPa22ADl46uBjoZw.roa (raw, json)
Hash identifier: CNdJm6exSbRnNgghruPFebmuBw/6hv/rAFcq/sd/pv4=
Subject key identifier: 64:FD:3B:C6:D8:2C:9B:CB:58:3D:AD:B6:00:39:78:EA:E0:63:A1:9C
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E1A
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ZP07xtgsm8tYPa22ADl46uBjoZw.roa
Signing time: Wed 29 Sep 2021 02:39:58 +0000
ROA not before: Wed 29 Sep 2021 02:39:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 202.178.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3610 (0xe1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=64FD3BC6D82C9BCB583DADB6003978EAE063A19C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:e9:fe:08:88:56:17:04:c8:1f:69:e7:a0:
89:b3:e3:9c:e8:24:f9:53:bb:ab:a7:06:20:13:88:
39:5e:55:f9:67:37:46:e4:09:f0:ef:c3:af:35:c7:
df:8f:52:8c:d9:6c:03:68:37:06:76:19:dd:9b:d2:
40:04:ee:9a:2f:f5:84:d4:04:55:60:7e:62:d8:91:
7a:81:2d:18:f8:2c:69:48:54:af:fb:4e:24:44:4c:
af:bb:ad:ee:5b:bf:96:d8:b9:47:1c:cd:69:a7:95:
b7:8b:33:4e:2c:0c:58:54:17:79:19:29:6c:aa:99:
e1:18:f4:83:b5:d8:f4:d4:0b:c3:d5:cf:b9:32:c5:
90:a1:e0:f4:07:ee:2c:bd:58:dd:84:f3:e4:2a:49:
87:72:b3:a7:4e:60:a6:6d:04:15:fc:b9:a0:64:b4:
ec:4b:d6:0e:3d:0e:f5:29:d1:22:74:76:d4:3d:ee:
79:88:8a:d2:f9:90:19:7f:48:95:66:4c:43:62:2a:
3f:20:70:2c:2f:67:98:58:1c:b8:b6:16:41:90:a6:
83:37:44:b7:f6:59:19:45:b2:9b:d6:5c:aa:64:53:
e8:16:8a:f2:7e:38:6b:fc:0d:db:bc:56:2a:84:4f:
0b:e3:2e:ba:a0:b7:ad:3a:10:dc:06:c3:f0:9b:b0:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FD:3B:C6:D8:2C:9B:CB:58:3D:AD:B6:00:39:78:EA:E0:63:A1:9C
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ZP07xtgsm8tYPa22ADl46uBjoZw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.178.180.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:9f:50:18:b0:68:67:bf:4f:08:af:a3:34:6c:6f:5c:05:0a:
3b:50:1e:1d:d7:7a:22:d8:66:43:32:ca:c2:87:1e:a9:96:20:
2d:e8:61:92:8f:48:f6:d2:b2:ae:b0:b2:65:d2:26:40:fb:47:
8f:9c:8e:cb:82:31:cb:9c:47:b9:ef:ca:dc:a1:84:da:6e:0e:
3d:3f:30:7e:ce:5b:33:41:0e:26:71:ca:84:9d:ea:ba:dc:62:
87:66:29:1b:2e:34:38:cf:af:38:5a:65:c9:e5:d1:f2:c2:fa:
2e:ce:6d:90:86:53:17:bf:0d:2a:37:32:23:8a:ca:61:fc:b8:
7f:15:8a:3b:3b:72:3e:4b:ae:c9:75:9e:98:58:49:c1:ff:bb:
27:63:3b:32:db:5d:70:58:d2:d6:b7:ef:f3:28:d4:a4:b5:0d:
02:55:ff:12:82:be:99:2b:69:cc:b7:ea:80:e3:2b:6c:d9:d2:
23:9b:88:60:13:61:de:87:1e:2b:a9:5d:49:d2:12:01:28:ba:
b5:34:4b:82:93:c8:cd:0d:ac:63:18:0b:a4:ae:25:a1:2c:69:
34:ad:e7:6c:b4:a6:38:a8:b0:76:2b:96:d7:43:a6:74:63:a9:
5e:15:32:4a:a4:83:3d:63:53:28:a4:c4:33:5d:ca:52:bd:6c:
ed:5b:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org