Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/bp_4DWQ7pN0hm8AmY1__uXNrEXM.roa
File: bp_4DWQ7pN0hm8AmY1__uXNrEXM.roa (raw, json)
Hash identifier: 78os8vzYBdsuxfaUdp9KjagGfmixDYvkpRJkoDHvCmw=
Subject key identifier: 6E:9F:F8:0D:64:3B:A4:DD:21:9B:C0:26:63:5F:FF:B9:73:6B:11:73
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0921
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/bp_4DWQ7pN0hm8AmY1__uXNrEXM.roa
Signing time: Tue 29 Sep 2020 10:01:30 +0000
ROA not before: Tue 29 Sep 2020 10:01:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 223.23.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2337 (0x921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:30 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6E9FF80D643BA4DD219BC026635FFFB9736B1173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:9f:5b:85:f3:32:47:ef:ba:ba:ea:e9:e5:
00:27:6c:d8:aa:72:33:92:79:78:8f:43:cc:2a:55:
21:0f:3c:67:d8:e3:7d:5a:74:5a:7f:b7:8f:8e:ba:
27:b5:ef:39:97:ab:33:74:81:63:6c:fe:18:76:a1:
4f:a9:ec:82:79:56:78:60:9a:b9:f2:ac:7e:c2:61:
d1:df:2b:5e:93:59:f4:57:24:dd:89:b9:9b:21:ac:
ff:d4:6b:40:d7:de:3f:cb:d7:0a:7f:93:38:a3:5b:
7a:94:07:d9:b3:76:76:ad:dc:c0:78:2a:ba:54:2a:
1d:68:c9:f9:9a:f4:94:67:3e:dd:97:7f:b1:57:1c:
5d:ac:0c:6b:e1:ed:82:2e:93:3f:2d:bb:15:3c:41:
4f:24:e9:c2:11:a1:37:67:1e:e0:31:6c:b4:66:b1:
0d:ba:41:0d:35:d1:cc:16:78:52:43:01:9f:bd:8d:
ef:4d:14:33:8c:db:4c:ac:68:85:6f:55:31:74:2f:
53:b5:2a:4c:d5:7a:7a:c2:0e:1c:75:1e:eb:19:60:
c1:5a:2c:d9:e6:97:d6:c7:3a:aa:6c:41:32:76:66:
a0:e2:51:09:21:46:1f:cd:d6:f0:a4:10:b7:3b:81:
e9:26:8b:3b:06:fa:63:0d:7c:2f:90:65:b9:ff:5e:
83:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9F:F8:0D:64:3B:A4:DD:21:9B:C0:26:63:5F:FF:B9:73:6B:11:73
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/bp_4DWQ7pN0hm8AmY1__uXNrEXM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.23.63.0/24
Signature Algorithm: sha256WithRSAEncryption
27:37:e6:0a:a9:4e:3a:47:f3:ff:9b:4d:61:09:62:24:36:61:
0c:15:41:85:d9:44:f4:78:b6:8d:d0:00:6b:51:e8:25:45:ed:
bd:d0:f3:1f:c3:b5:d4:b8:0a:ad:f9:ee:22:fe:3e:0d:cc:73:
63:3f:26:4a:11:12:47:c9:58:8c:8e:e6:78:66:ee:2e:51:d5:
57:44:2f:8d:48:77:99:05:f0:8b:b4:41:8d:89:63:b4:07:67:
1e:cf:60:e8:dd:24:6c:41:9f:59:7a:7d:1b:06:dd:5f:5b:2b:
d6:db:eb:89:e8:ee:b5:4a:96:8d:fd:33:2e:f8:93:d4:ef:c4:
18:d1:7c:d9:83:a4:64:c6:9a:00:c6:b0:8d:89:74:d1:3c:40:
16:db:9a:81:8b:36:38:c5:71:df:c1:dc:14:ba:0c:31:92:d8:
0f:63:81:9f:ba:df:fe:0e:f1:c8:06:c7:df:a0:27:18:1b:be:
2e:6d:f5:06:9c:ab:1e:dd:d5:7e:ae:6e:2f:f9:81:59:27:13:
62:2e:21:39:24:6a:73:9f:61:b7:ed:ee:7a:f1:a9:75:76:48:
d5:96:5a:bb:2e:72:df:38:3b:d3:0c:1b:3c:ca:3a:be:24:48:
a5:24:8e:41:c6:2d:ff:78:58:5c:b8:e7:88:b6:88:f3:c4:70:
16:35:be:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org