Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/bBPR3l7d2nhiUEiB5DZJSk7talI.roa
File: bBPR3l7d2nhiUEiB5DZJSk7talI.roa (raw, json)
Hash identifier: MAR3ptMLKEzwSB/6kw/0NIr68VCyFCN35JCX18oYk3I=
Subject key identifier: 6C:13:D1:DE:5E:DD:DA:78:62:50:48:81:E4:36:49:4A:4E:ED:6A:52
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/bBPR3l7d2nhiUEiB5DZJSk7talI.roa
Signing time: Thu 15 Sep 2022 02:40:32 +0000
ROA not before: Thu 15 Sep 2022 02:40:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 202.178.128.0/17 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6C13D1DE5EDDDA7862504881E436494A4EED6A52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:db:2c:e2:52:0e:5d:ac:64:8b:87:ba:90:
b0:dc:50:d9:d6:f9:ec:37:b6:20:b4:57:eb:ff:f7:
c9:55:fd:35:3a:50:06:71:76:03:17:d6:28:4f:5b:
6f:ea:e5:9f:3e:31:5e:4d:72:e7:03:e6:21:75:9c:
44:64:ca:c7:d7:43:ec:33:9b:cf:26:a9:a9:81:78:
75:60:52:b5:b0:41:96:4d:eb:e1:ee:d3:85:fd:27:
67:ad:0b:f1:82:8f:7b:7c:1b:12:be:20:6e:f1:04:
4e:65:47:78:e5:e4:a8:c3:bf:4e:7b:7b:f7:f0:b3:
44:02:15:b6:40:27:94:b3:6b:a6:ee:c0:a9:92:ec:
9c:8f:2c:e0:fa:bd:ae:2c:66:c7:88:dc:10:b7:b5:
a8:ad:11:0d:71:7c:cc:3f:e1:ac:35:85:fc:65:66:
c5:2e:81:b2:6a:5e:5c:16:53:83:15:d8:f1:bb:52:
0e:57:2e:13:bc:aa:2f:e8:a1:a0:6a:58:04:10:11:
49:a1:92:f7:4e:d2:d3:89:e1:e1:11:a8:d8:00:e9:
62:c2:88:34:64:03:90:77:92:47:c9:48:3e:72:75:
0a:ce:35:53:97:15:83:a5:7b:ad:14:a9:01:7b:99:
6e:76:cd:95:10:90:c5:e6:9d:2c:18:ac:48:e3:bb:
b4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:13:D1:DE:5E:DD:DA:78:62:50:48:81:E4:36:49:4A:4E:ED:6A:52
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/bBPR3l7d2nhiUEiB5DZJSk7talI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.178.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8e:40:34:b3:da:bd:d9:48:61:18:bf:1e:79:58:b3:c4:00:58:
e3:4b:d8:7e:bc:a1:20:18:3a:35:f9:ee:61:4e:c5:15:e9:0a:
f3:54:09:7d:35:30:cf:d4:5e:5e:51:ff:a5:75:b4:16:00:c3:
99:ae:e4:34:37:2e:f0:e7:7f:5f:1a:fe:49:52:8e:8f:84:39:
86:d2:f0:74:73:21:60:33:24:d8:88:27:9e:43:6d:ae:af:8c:
c5:22:b1:57:7e:6c:fe:76:55:b3:c9:5f:31:24:5c:ad:c9:eb:
1e:a7:6a:bb:99:ba:f9:43:de:31:8c:f5:5c:ba:91:0a:11:a2:
70:c0:7b:0f:ff:6a:4d:10:86:d1:68:44:46:b5:10:f8:8e:9a:
d0:7d:70:15:a2:38:06:58:34:bf:46:f6:2c:dd:35:c3:d7:ac:
a8:57:65:4d:9d:8d:ea:c6:d7:da:d3:a0:ed:c7:67:07:4e:63:
0a:13:fe:3c:eb:e8:6e:9f:40:9f:a6:b8:cd:6d:e6:36:5b:50:
54:5f:1d:17:93:e4:3a:2d:c7:a3:79:8d:34:81:fa:94:4f:0e:
6e:74:62:c3:e8:9b:32:f3:fc:6a:9d:33:cb:29:dc:f6:cb:78:
7b:88:d4:ce:58:0d:66:cf:8a:6a:81:0e:76:6c:87:50:a4:ea:
e9:af:27:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org