Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/bg6XqWaatqjOskslsDd_7u42-8I.roa
File: bg6XqWaatqjOskslsDd_7u42-8I.roa (raw, json)
Hash identifier: Ku1pnoDSmbl5VGOlNdr9JpHtYUZWPBNOa/jy3oZL5nc=
Subject key identifier: 6E:0E:97:A9:66:9A:B6:A8:CE:B2:4B:25:B0:37:7F:EE:EE:36:FB:C2
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0B99
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/bg6XqWaatqjOskslsDd_7u42-8I.roa
Signing time: Sun 07 Feb 2021 11:33:19 +0000
ROA not before: Sun 07 Feb 2021 11:33:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 60.244.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2969 (0xb99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:33:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6E0E97A9669AB6A8CEB24B25B0377FEEEE36FBC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:3a:08:9c:d6:09:48:63:1c:9f:92:33:d7:
e8:b9:f8:a6:64:59:4f:25:34:02:f9:90:70:7c:25:
e3:fd:5b:c1:97:84:af:0a:5e:13:0f:01:ea:d7:6e:
4b:39:0d:f4:12:87:e2:a4:d1:fa:a7:55:68:71:b5:
5e:7f:02:db:69:63:b7:2b:52:9c:74:20:68:71:5d:
61:34:c8:64:46:36:9d:bb:1a:81:fa:aa:12:39:a9:
ce:54:95:15:01:a3:77:b4:1d:02:84:9b:f4:6f:8b:
21:26:29:38:0a:34:cd:8b:97:21:72:15:61:62:b4:
6a:bc:b3:22:8e:37:94:46:a9:f9:cf:dc:f7:bd:07:
71:b9:67:51:cb:1e:ee:c2:b5:3b:14:60:ae:64:4b:
8a:df:24:8e:73:fd:e8:e6:75:15:ff:87:f8:79:5b:
9a:1c:de:a6:68:b2:ec:d0:17:58:68:71:b1:e1:3f:
0b:4a:7f:01:00:5a:b9:d7:2f:56:7e:c1:af:ae:52:
1a:01:85:83:00:57:66:c9:65:47:80:f9:8c:0f:55:
51:ad:b9:8b:2d:91:51:70:f9:d3:83:cc:dd:5d:a2:
67:00:3f:48:7d:74:f6:b7:ca:6d:cb:5a:93:f3:73:
e2:32:1a:88:00:2b:f2:96:32:95:be:c4:26:7b:68:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0E:97:A9:66:9A:B6:A8:CE:B2:4B:25:B0:37:7F:EE:EE:36:FB:C2
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/bg6XqWaatqjOskslsDd_7u42-8I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.0.0/17
Signature Algorithm: sha256WithRSAEncryption
19:c1:d3:cf:e5:4f:0a:b9:76:f8:01:1b:31:ad:e5:1f:3d:5c:
ed:35:60:2e:2d:bc:1f:06:51:3e:99:75:1b:61:78:29:04:62:
fa:1b:22:4e:39:c4:bf:7d:54:80:6e:5a:96:99:58:97:af:78:
09:74:a1:fd:77:c4:86:80:80:4b:3c:8a:8c:49:0c:70:16:64:
c9:14:32:32:4f:bc:53:4e:0e:49:ec:e4:75:0b:8b:a2:b3:47:
1f:0f:cc:c4:81:69:63:cc:15:9c:58:91:05:d9:e4:3b:f4:a3:
5a:4c:dc:27:7f:17:87:f5:27:a3:ae:c6:b2:2e:58:91:1a:1b:
19:51:ea:86:3a:d0:8b:dc:30:8a:e1:5e:ee:0e:7d:69:fc:6f:
2e:96:68:83:56:4d:d3:17:74:f9:2c:9e:a5:54:e2:d3:88:76:
18:47:4a:a2:46:7d:4d:64:dc:fe:9d:c1:97:4a:b2:9a:84:f8:
2f:f8:6c:1e:72:7b:8c:d2:c1:63:0d:20:c5:c8:53:e0:cb:e6:
e7:f3:c4:a0:49:3c:9c:71:62:ab:4b:26:80:d8:bc:4b:cf:b5:
24:fa:61:c5:36:98:4d:1c:c0:94:49:11:c9:8b:36:32:73:10:
be:b2:56:09:1e:df:41:80:3c:1b:ff:99:35:4d:0e:c8:87:72:
a5:c4:62:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org