Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ahYXks7kHQzvwTg5sVjOgIqpfH8.roa
File: ahYXks7kHQzvwTg5sVjOgIqpfH8.roa (raw, json)
Hash identifier: AeNArSUkoeVwCApxexvtSJGDBGueELifhu8xiHs8ji8=
Subject key identifier: 6A:16:17:92:CE:E4:1D:0C:EF:C1:38:39:B1:58:CE:80:8A:A9:7C:7F
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 129D
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ahYXks7kHQzvwTg5sVjOgIqpfH8.roa
Signing time: Fri 01 Sep 2023 08:04:42 +0000
ROA not before: Fri 01 Sep 2023 08:04:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 203.201.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4765 (0x129d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6A161792CEE41D0CEFC13839B158CE808AA97C7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:43:f9:d5:be:92:b4:87:6d:cc:53:a1:02:
54:53:0b:f7:3f:b5:10:7a:ec:0d:37:59:81:79:a7:
e2:25:09:9f:5d:a9:2f:16:b9:87:d7:2b:c5:7c:4a:
26:9b:36:69:b8:b0:9c:a8:60:63:0e:ea:ac:20:17:
54:9c:fa:9d:5b:04:84:af:67:30:82:59:ce:0e:7b:
bf:29:12:81:db:de:9c:ea:28:70:e3:34:44:97:6c:
6f:e0:98:60:59:72:59:00:e5:ce:1c:e0:b8:a5:d1:
4b:7d:8a:05:16:d3:8b:e7:a9:f2:b9:0f:8a:a3:87:
dd:81:f6:da:4e:9a:8b:83:34:fe:e2:7e:48:13:36:
32:59:42:39:36:19:06:4e:b8:f9:1d:d9:87:5a:ec:
26:8d:d6:60:87:95:fe:d4:25:83:e6:ce:f2:90:6b:
3f:fe:9b:64:21:5f:4d:1d:08:a5:86:37:86:09:44:
21:17:83:61:ee:f0:bd:fe:ed:e6:f4:69:35:85:3a:
58:54:a8:1b:0f:bb:18:09:73:82:be:11:2d:d7:5d:
6a:8c:a4:bd:af:e9:5e:54:d3:01:a8:20:3d:1e:01:
2c:86:4e:40:06:62:49:b0:47:d8:5e:e1:9a:e3:e6:
69:a0:8f:24:99:99:fc:85:4d:69:66:5e:52:fc:7f:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:16:17:92:CE:E4:1D:0C:EF:C1:38:39:B1:58:CE:80:8A:A9:7C:7F
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ahYXks7kHQzvwTg5sVjOgIqpfH8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.201.32.0/20
Signature Algorithm: sha256WithRSAEncryption
91:67:fd:45:3c:77:97:da:37:e4:ca:ff:58:aa:78:81:b3:c3:
45:b6:a7:2e:45:d3:00:e5:b9:05:6f:b4:0e:aa:19:35:24:86:
49:38:61:bd:42:bc:e2:56:4d:47:68:9c:5e:b4:d9:30:db:53:
2a:57:c3:4d:d5:47:6e:b5:64:77:02:21:28:91:df:20:61:99:
15:c9:6c:2c:61:07:27:89:a4:10:5d:d4:3e:fc:d3:0a:4a:78:
60:37:09:81:c4:4b:cc:a1:3f:7c:97:f6:87:d1:e7:7c:e6:dc:
5b:8e:52:99:bf:69:0b:50:4c:23:b2:9f:16:99:e3:aa:d4:2c:
7c:bb:3d:bc:ce:70:02:93:71:43:92:1e:1c:01:87:ee:ed:9a:
1a:f7:e8:2f:41:28:90:ed:6c:85:72:a4:3c:ab:60:b2:49:ba:
c9:e6:0a:b9:04:06:f0:2d:6d:e3:1f:cd:52:55:09:d5:bd:84:
82:52:be:f9:4b:7f:0e:e6:1b:9e:e8:d9:eb:08:74:17:d2:cb:
29:af:06:66:16:cd:da:cd:c7:15:ea:7b:f5:29:ed:11:d3:fd:
e0:d3:c4:83:13:11:7e:4c:fe:c4:ab:b1:5f:df:06:e7:d1:d5:
82:d2:93:68:51:89:7b:69:02:59:0d:22:42:a0:4e:50:6c:50:
7f:f3:97:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:25 2025 by rpki-client