Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/c4hjBt7ymQVtXzJdmLbd2WSW6CY.roa
File: c4hjBt7ymQVtXzJdmLbd2WSW6CY.roa (raw, json)
Hash identifier: gIAu50YIXB9tWcIY/KNF0Lfcgi21PaBXad88R+0cTdE=
Subject key identifier: 73:88:63:06:DE:F2:99:05:6D:5F:32:5D:98:B6:DD:D9:64:96:E8:26
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1253
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/c4hjBt7ymQVtXzJdmLbd2WSW6CY.roa
Signing time: Fri 01 Sep 2023 08:04:19 +0000
ROA not before: Fri 01 Sep 2023 08:04:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 124.218.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4691 (0x1253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=73886306DEF299056D5F325D98B6DDD96496E826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:ae:2d:bf:50:bc:d2:b1:86:66:5f:c7:cb:
7c:1a:0c:cd:2e:76:d5:35:96:ed:af:e5:8e:51:8b:
0b:9e:d3:ef:95:f0:4e:9b:7d:07:4a:93:5a:8e:6a:
e7:cd:64:5b:93:12:27:b8:86:7d:ad:f2:de:1e:8d:
e7:dc:17:67:37:89:e1:a6:21:85:71:c2:e2:14:ef:
38:4e:ae:01:1f:c2:a3:9f:4f:6c:c7:3e:f6:9d:f9:
d2:3e:f9:f6:ea:52:de:e3:ed:74:8e:59:50:a9:6d:
4a:2e:39:7b:fc:b8:f3:e3:dc:3b:f9:9f:8d:8d:44:
e5:33:5f:f5:d9:e2:ff:9e:97:dc:af:54:b4:1b:8c:
69:ed:b0:1e:ae:eb:f4:7b:01:9f:3a:3f:f3:90:01:
4e:8a:01:e6:31:5d:d8:d3:ad:e0:cc:1b:8a:eb:37:
6f:e9:96:70:bc:15:09:d5:38:62:e3:84:4b:32:5b:
d3:fb:79:33:19:2a:f7:b2:4a:90:bd:a6:47:55:06:
73:89:90:bc:77:fa:47:fa:4f:e4:85:8e:2e:14:c9:
d3:2c:80:fc:54:af:3d:d8:6d:26:f1:68:7f:5d:9b:
f3:54:85:71:f5:af:9a:7f:2f:0b:82:80:3f:e7:88:
cc:af:79:94:8f:34:7f:95:32:08:91:a3:2e:98:1f:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:88:63:06:DE:F2:99:05:6D:5F:32:5D:98:B6:DD:D9:64:96:E8:26
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/c4hjBt7ymQVtXzJdmLbd2WSW6CY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.100.0/22
Signature Algorithm: sha256WithRSAEncryption
84:83:95:41:1f:f6:4f:66:59:c1:ee:c1:51:d8:bc:39:7e:eb:
fe:ea:07:a4:f1:33:ae:e2:13:5a:4a:ca:ff:f2:a9:47:14:af:
6c:ba:59:a9:62:21:64:f1:c9:cd:77:12:b9:dd:7a:c6:9d:59:
b6:bd:0e:f3:27:68:55:2a:f8:55:78:f6:b6:d6:4c:c7:c6:7c:
54:90:39:d4:8e:c6:a5:53:62:d4:8a:a4:66:dc:57:b0:8f:d8:
d9:52:f8:24:77:43:d8:b7:d3:21:dc:7e:86:6a:8c:3e:38:57:
bf:e3:04:64:cf:35:64:70:3f:54:f1:fa:a0:f5:0c:12:3c:a0:
b7:d2:c4:ec:28:2f:49:6f:f1:d8:55:2c:79:d4:b4:67:6d:4e:
2e:0a:87:47:9a:b7:d4:f4:25:1c:ea:14:26:f3:50:16:c6:f4:
d3:4a:93:bf:cf:32:a4:a8:3b:20:65:54:c8:24:01:c1:2a:a2:
a6:cd:87:93:07:ac:37:8e:f6:53:a8:df:62:4f:d3:85:9c:72:
65:c4:71:39:d3:89:a9:64:4b:23:bf:5a:0e:dd:80:a8:54:ab:
bd:74:5d:dc:b2:8f:d5:f6:51:20:46:91:4e:bd:66:a5:60:1e:
91:57:d7:42:23:8f:8f:7b:b1:65:ce:68:0b:21:16:a5:57:01:
6d:af:c8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org