Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/aTssB9i4K2TbC0fNvZ5rC3emokA.roa
File: aTssB9i4K2TbC0fNvZ5rC3emokA.roa (raw, json)
Hash identifier: psZQLmNTpXoZrD/2y9BgMsOzlPQwL0hpkQmWNF0SiY8=
Subject key identifier: 69:3B:2C:07:D8:B8:2B:64:DB:0B:47:CD:BD:9E:6B:0B:77:A6:A2:40
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DB3
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/aTssB9i4K2TbC0fNvZ5rC3emokA.roa
Signing time: Wed 29 Sep 2021 02:39:27 +0000
ROA not before: Wed 29 Sep 2021 02:39:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24155
IP address blocks: 203.201.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3507 (0xdb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:27 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=693B2C07D8B82B64DB0B47CDBD9E6B0B77A6A240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:f5:9d:6f:9d:83:e8:e8:b9:4f:e5:6b:95:
75:d4:f8:65:27:67:bf:92:66:67:94:9f:25:53:c9:
58:dc:c1:0c:e3:4e:d3:8e:66:db:05:2e:de:59:b9:
ea:e8:b7:a3:3a:4b:cf:67:4b:0e:86:8f:83:03:da:
61:2d:88:24:ce:1f:b5:a5:40:4e:7a:47:c5:f6:20:
d9:b6:36:df:fa:22:13:f1:bf:ee:16:98:18:53:61:
ea:97:5e:87:82:dc:99:54:ed:49:19:3e:25:ee:9f:
30:eb:be:b2:4e:44:28:aa:ca:ba:ee:5f:3d:b9:48:
3b:f9:e5:c1:2a:31:ab:e3:71:7e:4b:6e:16:7e:2f:
92:8c:d6:50:84:8e:ff:a7:de:ea:cc:a1:06:ed:fe:
82:03:56:80:ab:79:b3:c4:e4:bf:93:50:d8:53:e7:
df:ed:32:63:85:fb:65:37:70:c6:09:84:a9:24:4a:
93:aa:7a:49:b8:00:a9:8a:0c:4e:ab:6d:af:b9:37:
3e:6a:dc:93:68:e5:c5:eb:bd:bc:2d:cc:70:83:3f:
9f:7c:25:e9:a5:7e:7c:9b:e4:5f:cd:b5:39:de:9a:
b3:d0:62:c2:91:d6:52:70:8b:e9:1f:67:e7:94:59:
ab:94:92:d9:00:2a:4d:85:64:d5:6e:ae:75:18:aa:
1f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3B:2C:07:D8:B8:2B:64:DB:0B:47:CD:BD:9E:6B:0B:77:A6:A2:40
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/aTssB9i4K2TbC0fNvZ5rC3emokA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.201.32.0/20
Signature Algorithm: sha256WithRSAEncryption
08:79:b3:a9:d5:7f:cf:24:e9:b7:83:25:1a:e2:d1:2f:e5:d7:
d7:c0:a7:32:44:d7:6e:ff:60:af:06:93:53:c9:94:bc:b1:c7:
1f:f4:04:fa:dc:1e:06:c2:48:b2:eb:b4:cd:fd:2b:3c:50:cc:
b8:52:7d:d1:e4:24:13:32:df:12:02:e5:c3:81:1a:a0:ee:cd:
c6:e5:dc:b7:d9:80:77:ee:b3:b0:e5:91:f5:8a:5a:36:24:23:
41:0f:89:9f:c2:69:8f:c4:91:8d:22:71:cc:00:5d:f4:db:a6:
6f:39:35:3b:34:b4:76:38:31:bc:93:dd:84:b4:a3:5d:fa:da:
be:38:0e:93:82:46:6e:31:4b:18:24:83:9c:5e:5d:80:94:a9:
b1:b2:34:72:d5:13:61:91:24:63:22:01:77:0a:6b:30:4e:0f:
4a:c9:cb:f9:1d:42:f7:d4:f9:0f:38:56:e7:23:0b:36:7c:b4:
25:a0:d1:3b:8b:12:e5:3f:1a:22:7d:04:79:47:f9:d3:a6:1a:
a4:99:94:d5:dd:12:a1:4b:9c:8b:13:37:0e:47:20:51:19:be:
99:cd:96:5a:1a:8a:ca:17:0b:5d:b5:18:a1:95:69:f1:96:73:
f6:34:bc:18:4f:40:76:7e:0a:ac:05:80:70:93:33:fa:fc:62:
28:88:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:04:15 2025 by rpki-client