Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/bY3okqKEKU7yS31CNAUeUAbNt7U.roa
File: bY3okqKEKU7yS31CNAUeUAbNt7U.roa (raw, json)
Hash identifier: IkHZMM88dAHDgB1E2gvoL4PqpPGKEK4Om7iwSb9M4jg=
Subject key identifier: 6D:8D:E8:92:A2:84:29:4E:F2:4B:7D:42:34:05:1E:50:06:CD:B7:B5
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10E8
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/bY3okqKEKU7yS31CNAUeUAbNt7U.roa
Signing time: Tue 16 May 2023 08:36:48 +0000
ROA not before: Tue 16 May 2023 08:36:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 218.34.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4328 (0x10e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:48 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6D8DE892A284294EF24B7D4234051E5006CDB7B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:3f:bd:1b:d0:de:22:ec:ff:de:3f:cd:cc:
87:ba:50:50:da:fe:3e:1a:d3:32:86:16:c6:84:eb:
30:9e:e7:d8:3e:6a:9b:4a:65:9a:31:aa:3b:72:57:
76:53:5f:8e:44:a2:38:8b:17:a8:5d:ed:30:1c:e2:
e2:b2:11:2d:a1:1b:83:da:d0:af:86:af:18:aa:e3:
2a:fc:48:46:ba:83:46:e4:9c:22:66:1d:53:8a:4a:
8e:46:28:5a:3a:e6:f8:59:ff:b1:6f:59:b9:7d:55:
c8:00:1f:bc:69:d0:2b:cb:23:00:6b:c2:fc:8b:29:
5f:fa:65:74:2a:d2:5b:c9:25:75:2f:12:12:5a:08:
4b:61:58:8b:24:92:32:9b:da:6e:eb:9f:c7:05:8d:
92:f9:76:b0:dd:e4:41:ce:6f:7a:21:69:1a:70:8f:
86:8e:8e:7b:5e:80:48:f9:f1:38:20:78:22:95:3c:
3a:38:cb:26:31:85:46:40:b5:11:51:93:fd:d2:fa:
bc:15:c7:5d:2b:7a:31:ae:9a:2d:31:f9:52:2c:7f:
1e:45:09:64:bf:8f:5a:d8:3b:66:15:b4:9d:9f:5d:
9b:3e:2a:75:cf:9f:7c:a0:50:32:cb:4f:48:81:7f:
78:9d:e9:cc:f2:85:5a:8c:04:b7:c1:f3:bb:9f:bc:
2f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8D:E8:92:A2:84:29:4E:F2:4B:7D:42:34:05:1E:50:06:CD:B7:B5
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/bY3okqKEKU7yS31CNAUeUAbNt7U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:32:b6:87:58:a0:00:31:a8:08:be:c8:f3:c0:a1:05:a6:38:
a6:c7:6f:3f:f5:65:f4:aa:04:4c:ab:ad:12:e7:16:d6:09:9a:
3f:f6:d2:f1:19:24:0a:6d:91:41:8c:e7:32:b1:22:fb:e6:01:
75:6e:a9:53:23:fe:3d:60:dd:78:92:92:9e:ea:9e:12:64:36:
8a:84:e6:5e:f4:8c:88:7c:52:62:df:0c:c2:d4:09:2a:28:c7:
0e:fa:86:ef:b6:94:35:c7:39:ad:83:86:d8:f1:48:b9:da:fe:
22:a7:cf:d2:b2:c0:60:ff:1b:f6:5e:95:e4:73:e9:2f:a4:87:
1c:f7:cf:47:53:a3:dd:d8:c4:37:ed:f2:a0:a0:f1:c1:9d:72:
50:95:a7:03:0b:59:1f:db:9d:42:df:31:4a:4a:b7:a2:a6:42:
5c:9a:e7:db:3f:00:6f:04:88:d2:e9:c4:45:62:ba:d1:8c:fa:
fd:6d:90:bd:ad:c1:81:6c:8a:fe:37:35:bb:55:31:43:1e:47:
5f:a1:1b:0c:be:1b:ab:d8:e6:d9:f3:96:2d:66:61:42:f0:fd:
0e:9c:cf:9b:6d:1d:5d:80:9b:1d:a5:c1:c9:ab:86:10:8b:22:
8a:94:00:83:bf:2a:7c:3c:40:85:26:a8:9f:a8:70:e4:ff:0c:
8d:7c:af:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org