Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/cwmVtW7-GnYJkDokC3RA3RVzgTY.roa
File: cwmVtW7-GnYJkDokC3RA3RVzgTY.roa (raw, json)
Hash identifier: D1O/MbcECpsxfNkVHgMZgzZ5PuUj3q7Kcb9PE+m9j7s=
Subject key identifier: 73:09:95:B5:6E:FE:1A:76:09:90:3A:24:0B:74:40:DD:15:73:81:36
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0963
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/cwmVtW7-GnYJkDokC3RA3RVzgTY.roa
Signing time: Tue 29 Sep 2020 10:01:46 +0000
ROA not before: Tue 29 Sep 2020 10:01:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 203.79.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2403 (0x963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=730995B56EFE1A7609903A240B7440DD15738136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:48:91:f4:cb:bc:c6:0f:d2:23:19:d7:9a:
73:de:5e:72:df:2d:6e:06:bd:a0:c3:36:21:34:a0:
f2:3e:fd:65:f0:84:89:1c:50:89:fb:e8:e4:6c:c0:
b8:e1:7f:eb:17:17:e1:87:4c:db:55:2e:f5:1a:01:
ed:74:c8:26:32:af:55:8c:d9:87:02:47:e2:b8:48:
c9:fe:41:a2:9b:1c:ea:6b:a7:02:7f:2e:c9:bd:19:
4e:42:e0:58:c0:d9:ec:c7:5d:a9:88:ef:2f:8a:23:
21:64:dc:97:ef:1a:04:1b:34:a5:27:c9:66:1e:e0:
30:6b:0c:11:9a:da:36:0e:35:41:7b:94:25:d3:7a:
a9:b6:68:33:92:3e:67:93:e8:64:20:61:04:c6:79:
b0:c9:f7:a5:7d:15:e2:3a:a7:b9:60:eb:5a:68:d8:
a6:e0:f4:2e:b1:ce:9c:40:c9:bd:6c:2b:4c:b7:a1:
28:22:81:a6:3d:dd:24:40:9e:58:29:9a:db:d7:1e:
5b:17:22:97:fe:c0:46:b7:a4:38:96:a1:b7:1c:44:
ec:7c:08:64:de:93:93:05:dd:5a:9f:f8:c5:13:0e:
ee:91:4d:eb:66:9e:2e:45:03:c5:51:93:a2:d3:ea:
06:b1:42:5d:b4:48:7d:b1:f1:41:e1:34:0d:c9:3e:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:09:95:B5:6E:FE:1A:76:09:90:3A:24:0B:74:40:DD:15:73:81:36
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/cwmVtW7-GnYJkDokC3RA3RVzgTY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.251.0/24
Signature Algorithm: sha256WithRSAEncryption
be:62:02:82:0b:86:ee:1a:56:f1:12:a7:50:c9:e4:6f:ff:d1:
93:f1:54:82:33:f2:4b:66:6f:e8:e5:6b:f6:a0:6c:e2:7f:78:
c4:55:95:92:1c:7a:b1:74:90:8f:6e:d4:8c:69:cf:30:d9:5d:
fc:a6:da:6d:4e:f8:92:99:88:98:bf:e7:fe:d7:da:38:2f:78:
58:00:57:0e:ec:4f:c4:7b:24:8f:58:44:be:79:be:92:5c:3c:
51:2c:7f:0e:f0:a2:c6:b2:94:9c:15:00:41:98:07:7c:a3:16:
90:4b:bc:63:d6:c8:d1:52:8a:45:41:3a:6c:b1:72:a5:16:6b:
af:3d:71:1e:1f:0a:20:eb:20:cc:3f:d0:fc:f7:2c:bb:24:df:
ce:b0:83:04:0b:1f:a5:40:0e:0d:d3:3e:fc:4e:fe:b0:4b:ea:
2e:1a:f2:e7:58:78:58:dd:42:f5:ff:20:45:7e:b0:ea:07:f3:
3c:53:2f:89:0a:77:b5:8e:1c:d2:02:0d:e2:f9:4e:ec:56:90:
f7:64:0a:f6:74:2d:da:d5:4f:c6:e0:71:81:9f:d5:8f:00:a0:
3f:b2:c7:a1:af:16:16:2f:25:a4:2b:e1:05:c0:96:45:b2:d4:
e2:48:06:26:12:4e:6b:ca:dd:27:82:1b:5f:43:00:d5:9b:f8:
d2:64:c5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org