Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/cIKPUWPIa0YAI1LjtIFK3LLeJU0.roa
File: cIKPUWPIa0YAI1LjtIFK3LLeJU0.roa (raw, json)
Hash identifier: TSNiWPhbjFb86AmsKwLCBqAfZshaAQS4tgbkX5TqDso=
Subject key identifier: 70:82:8F:51:63:C8:6B:46:00:23:52:E3:B4:81:4A:DC:B2:DE:25:4D
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E08
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/cIKPUWPIa0YAI1LjtIFK3LLeJU0.roa
Signing time: Wed 29 Sep 2021 02:39:53 +0000
ROA not before: Wed 29 Sep 2021 02:39:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 222.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3592 (0xe08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:53 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=70828F5163C86B46002352E3B4814ADCB2DE254D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:77:9e:7a:e8:bf:08:6c:93:d0:50:11:51:
09:83:cd:95:a5:87:9e:67:c3:2d:4c:3b:71:34:af:
e3:9b:a4:cc:4f:d1:53:93:ad:46:17:3e:e5:5d:e9:
07:6d:d1:27:47:da:65:b6:f0:78:6f:36:4d:64:dd:
77:00:b4:9a:16:54:ac:c0:e0:eb:85:d8:5a:11:a3:
36:cb:cf:4e:68:bb:fb:7b:0b:5c:00:85:d9:38:4d:
22:4d:13:4d:75:e1:f2:32:47:2c:31:c9:52:27:38:
de:50:43:ff:f9:3b:b2:91:94:2a:14:83:dd:bc:19:
c6:02:18:e7:29:1b:c7:51:29:3d:33:8e:35:42:fd:
75:6a:e2:d4:89:ec:82:2a:a8:66:46:2e:c8:90:2b:
c6:14:3a:51:4c:d4:90:6c:3e:44:83:5a:c3:8a:ba:
e4:95:d5:c4:2b:c9:ed:cf:a7:20:dc:ef:79:1f:a7:
d2:97:03:ae:93:4d:fd:e2:ae:f6:4a:75:53:f6:95:
67:27:5c:91:cb:75:14:1c:87:c1:71:96:2f:6a:37:
a0:39:85:82:74:8d:69:27:40:8e:d3:b5:42:7d:10:
e1:e6:d2:7c:38:67:8d:85:99:84:6f:04:19:8b:49:
82:73:d9:93:04:a0:34:b2:4b:b7:79:ec:55:2f:c4:
b8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:82:8F:51:63:C8:6B:46:00:23:52:E3:B4:81:4A:DC:B2:DE:25:4D
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/cIKPUWPIa0YAI1LjtIFK3LLeJU0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.156.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b8:a0:ac:20:8c:04:4d:d9:02:42:58:91:84:10:71:35:c2:3f:
44:89:f0:90:3f:ad:16:c1:6e:3c:59:67:5f:dd:f1:50:45:52:
c0:ec:fd:48:1c:f2:ad:fe:7f:db:32:83:bc:e3:c1:f8:4c:03:
8f:d1:3f:92:39:4b:ab:1c:c4:ea:20:06:7b:55:59:cd:50:7f:
b2:ad:55:e4:fc:ca:fd:8c:9c:da:89:39:5f:a7:a8:19:7c:a9:
d5:d0:d9:ea:12:3c:40:08:6e:8c:28:ed:d3:15:f6:9e:b4:59:
9a:33:53:87:99:19:41:06:85:39:9e:8e:51:e2:68:71:b4:a1:
5f:6f:70:29:51:98:5e:25:0b:2b:85:32:52:99:5e:9c:cb:72:
be:c2:93:75:58:66:03:c8:bb:a3:06:01:45:84:95:e7:45:ce:
f2:5a:ca:43:98:0a:fe:b8:e6:99:ad:2a:ff:78:1b:21:7f:3d:
a6:9c:f8:d2:11:7b:39:03:7e:31:ac:33:52:d5:39:12:bd:ef:
1e:3a:2e:10:52:8d:18:36:ef:0d:95:af:be:f8:f5:ac:f6:32:
bd:c4:cc:5f:4b:a1:12:58:96:b9:41:97:42:20:59:ee:8c:30:
a1:5f:b2:b6:28:ac:fa:92:1f:43:c3:74:ab:40:27:b5:a6:1a:
ac:5f:1d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org