Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ZcJ8-xpH7H0wgAQujKyEWm9k8vg.roa
File: ZcJ8-xpH7H0wgAQujKyEWm9k8vg.roa (raw, json)
Hash identifier: erKEK5ZCy/CVx/eG/Oz9pDcxB86zfZA/NPi38/BF9GY=
Subject key identifier: 65:C2:7C:FB:1A:47:EC:7D:30:80:04:2E:8C:AC:84:5A:6F:64:F2:F8
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DFF
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ZcJ8-xpH7H0wgAQujKyEWm9k8vg.roa
Signing time: Wed 29 Sep 2021 02:39:50 +0000
ROA not before: Wed 29 Sep 2021 02:39:50 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9311
IP address blocks: 210.63.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3583 (0xdff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:50 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=65C27CFB1A47EC7D3080042E8CAC845A6F64F2F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:74:ec:de:39:23:17:50:c7:35:f0:f9:67:
cb:d6:e6:dc:75:cb:88:53:26:1b:8b:fe:1e:b4:7b:
59:2b:54:8d:f7:b2:58:2e:ee:7c:f0:83:f5:02:48:
34:7c:a9:34:e3:f0:81:68:42:c3:90:47:cd:37:46:
a3:0b:70:b4:9c:d3:59:fa:65:6d:cb:22:3e:dc:98:
e5:4c:84:7e:33:31:52:0e:3a:8e:8c:64:98:e5:48:
bb:bc:90:89:80:17:c6:46:1a:1d:40:6f:1e:54:2c:
77:c6:e4:47:b5:aa:03:eb:1c:cb:ee:cc:20:29:bc:
3d:69:9f:4a:26:fc:b0:53:4a:26:83:6b:b5:3c:c4:
1f:d6:3a:81:a5:30:fb:e0:5f:c1:a8:23:d2:7a:da:
d7:15:8f:7e:55:e8:3f:75:01:6b:8a:ba:b7:bc:21:
8f:0a:15:0a:be:19:93:17:98:61:12:19:f5:34:21:
12:77:5d:4a:54:3f:63:6e:57:c6:dd:30:83:90:83:
ac:cc:fd:72:82:24:5e:81:71:15:f4:a4:4d:69:55:
6e:14:15:2a:9b:53:e3:d6:9d:80:d5:9a:80:11:e4:
5f:74:6a:be:7e:fd:cf:80:d8:f4:c1:3b:9a:69:b9:
d4:ac:7d:44:08:9f:96:4c:4e:5a:65:9e:06:3a:52:
fc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C2:7C:FB:1A:47:EC:7D:30:80:04:2E:8C:AC:84:5A:6F:64:F2:F8
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ZcJ8-xpH7H0wgAQujKyEWm9k8vg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.253.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:7f:61:58:04:21:54:45:c7:b9:18:a6:be:45:c6:9c:03:27:
60:92:cd:ed:cb:e5:a5:33:03:bd:f1:1a:89:3b:ab:33:54:f2:
96:ce:12:6c:1a:5e:e6:78:ce:b3:a5:83:b8:22:1b:4b:21:f7:
e6:54:31:c4:70:55:86:2c:be:d2:cc:8e:c3:eb:c5:8a:21:6e:
39:ef:77:11:c8:1d:62:e3:1c:89:95:e3:d7:a0:4f:12:76:20:
e2:54:5e:66:4f:38:39:12:59:25:38:46:a6:22:77:c1:82:57:
d7:13:97:bd:36:77:34:7e:6c:2f:7a:02:d1:0a:ce:4a:43:99:
89:1c:ba:1e:90:e1:ff:ac:85:8e:9b:6c:f3:50:f7:56:38:61:
f7:46:37:d2:b3:a2:b4:a5:49:46:98:80:72:e2:af:80:c6:b3:
06:a0:8c:cf:51:78:0e:a5:47:39:eb:ad:78:bf:88:a4:00:cd:
4b:a8:76:b4:da:fe:23:6b:3f:75:02:bb:08:3c:21:0e:0e:e0:
8c:a7:e1:e4:b8:04:1b:6a:13:ba:49:25:ef:c6:ca:8b:0f:91:
ed:e9:d9:ca:31:01:47:00:2b:33:fb:d8:94:e9:f5:aa:65:9b:
0d:07:67:f3:15:a7:5d:60:fc:49:41:c1:d5:e4:54:23:cd:69:
7a:ae:64:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org