Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/d8cEnzdgojXW50r6MtAoj9rimkQ.roa
File: d8cEnzdgojXW50r6MtAoj9rimkQ.roa (raw, json)
Hash identifier: WyueqjsvaLm1We8Uwo1wog5H26j17kxiWIwJ37BXoy8=
Subject key identifier: 77:C7:04:9F:37:60:A2:35:D6:E7:4A:FA:32:D0:28:8F:DA:E2:9A:44
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C0B
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/d8cEnzdgojXW50r6MtAoj9rimkQ.roa
Signing time: Sun 07 Feb 2021 11:34:42 +0000
ROA not before: Sun 07 Feb 2021 11:34:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24154
IP address blocks: 210.202.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3083 (0xc0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:34:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=77C7049F3760A235D6E74AFA32D0288FDAE29A44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:0c:5e:f9:29:4f:d8:37:d9:e5:80:ea:40:
ac:bd:05:d0:98:7c:87:25:46:fa:2a:8b:95:f5:64:
e1:b2:65:16:d4:6b:0a:29:2e:a4:49:ed:19:67:e9:
f1:cc:b1:2d:f5:10:4d:24:40:83:e3:b3:3b:a1:60:
1e:f0:00:1a:18:1d:dc:9d:9b:7d:b9:5a:bf:7b:23:
60:ea:51:ec:e6:52:8f:46:dd:a0:56:a7:78:15:c6:
fd:e3:63:6a:52:a6:ff:f6:ae:d5:15:ae:d3:48:b0:
c1:3e:30:49:5f:99:0b:e7:8c:bd:db:9a:0c:12:23:
4c:02:7d:a2:7b:0d:97:4f:14:da:ed:17:4c:2f:f3:
ae:87:57:a0:75:82:72:18:7c:9b:39:36:75:98:4e:
53:f3:41:e8:04:c8:a3:21:b9:a2:f1:76:01:c7:a9:
0b:f2:9e:3a:fd:18:07:31:23:89:2a:99:ac:5f:28:
34:d2:98:7b:88:72:9c:75:92:65:87:44:0a:fd:8f:
f8:cc:7a:9c:ce:ce:94:2a:35:12:d4:41:17:04:e6:
52:34:19:e0:50:f3:61:fb:0d:d9:f5:8c:d4:56:13:
1c:63:38:94:dd:66:51:6e:dc:df:7e:d8:f3:ee:88:
ba:d0:81:05:fb:f7:6f:12:39:1e:71:78:80:60:72:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:04:9F:37:60:A2:35:D6:E7:4A:FA:32:D0:28:8F:DA:E2:9A:44
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/d8cEnzdgojXW50r6MtAoj9rimkQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.0.0/19
Signature Algorithm: sha256WithRSAEncryption
67:5b:67:c8:74:f9:f6:4a:90:72:4a:86:5a:f4:a9:bd:4e:48:
d1:13:36:7f:39:c1:6f:e4:de:71:1c:d7:c3:df:92:d8:03:95:
2a:f2:d3:b9:f3:fa:7d:83:a1:a6:fb:78:19:dc:f2:d0:d4:11:
ad:2f:58:06:62:7c:6b:40:1f:34:e3:dd:3c:ab:47:74:fc:5c:
9f:25:ba:93:8f:e8:7a:71:90:7a:4e:f1:6f:6f:99:1a:de:3e:
d4:07:c5:3a:12:b3:67:f4:15:a9:ec:3b:96:4e:f0:fd:ef:d5:
6d:e1:09:32:63:4a:08:26:6b:41:d1:52:f5:82:d8:2b:b1:4e:
1f:f8:08:a6:b7:ad:37:6f:aa:00:ab:87:1e:84:fc:1e:1b:5c:
e1:39:d8:07:9e:8d:b4:a1:e3:da:04:7d:1f:c2:be:68:de:b0:
6e:8d:c3:6f:fc:de:51:02:ca:59:a1:7a:83:82:bb:30:bb:f5:
8e:0b:d6:94:dc:b2:2f:fa:86:a6:ff:a4:75:fc:ca:7b:35:9f:
f9:cc:f4:2b:4a:95:7a:f8:c1:31:4f:a0:c2:96:3c:4f:cb:34:
ea:ca:6b:32:b2:f4:b4:c8:62:40:7a:d5:93:32:37:98:3e:af:
be:ca:de:c0:dc:e8:6b:48:fe:42:f0:c1:8f:2b:b6:33:90:e9:
79:04:ad:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:40 2025 by rpki-client