Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/d8y6KQrvg7mvwTPnuJC14bCqZb8.roa
File: d8y6KQrvg7mvwTPnuJC14bCqZb8.roa (raw, json)
Hash identifier: SEWsPajQgcjSdvDOLQsHH6+PoNIRQSAZe49Iw/iwUlA=
Subject key identifier: 77:CC:BA:29:0A:EF:83:B9:AF:C1:33:E7:B8:90:B5:E1:B0:AA:65:BF
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E00
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/d8y6KQrvg7mvwTPnuJC14bCqZb8.roa
Signing time: Wed 29 Sep 2021 02:39:51 +0000
ROA not before: Wed 29 Sep 2021 02:39:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 210.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3584 (0xe00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=77CCBA290AEF83B9AFC133E7B890B5E1B0AA65BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:5f:a7:2f:89:2d:79:d6:ee:17:aa:5e:b2:
8d:fb:af:cf:d1:09:db:1b:5e:01:b0:ce:ea:39:2c:
2e:c4:0e:3b:fa:3f:88:73:33:d2:73:0c:8b:d7:a0:
90:a0:2f:0a:8b:76:69:27:0d:2c:b3:0b:fe:f1:b2:
5b:4f:89:d1:f0:50:4f:d4:70:8c:24:fd:5b:c4:28:
8e:7e:ab:88:25:45:41:86:63:08:d9:aa:3b:8f:cc:
fc:44:96:f4:b0:a6:aa:7a:e5:19:23:51:a6:bf:4f:
bf:0c:23:83:fd:aa:d4:c2:a0:bd:8a:b7:55:aa:27:
31:c6:3d:c8:ef:8d:b5:11:cf:dd:63:02:b6:8d:a0:
32:41:f8:8f:20:77:4a:a8:ae:e4:a8:eb:60:97:7e:
d7:ed:ea:45:70:f6:a5:6e:50:6a:1d:09:b5:bc:f5:
03:42:ea:96:2d:8e:d3:c8:70:39:76:61:34:1e:79:
ca:6d:d9:50:39:41:f0:91:17:96:28:5b:0c:35:c9:
90:d5:04:a6:dc:d2:8e:65:2c:32:26:c0:6d:5f:1f:
7c:e8:7c:db:41:bf:d1:1d:71:12:c6:69:f3:d5:7b:
db:9d:8d:d1:53:65:d4:2f:fb:3f:c1:48:94:4e:ee:
09:5f:1b:65:f3:86:16:99:af:75:df:b7:00:85:2f:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CC:BA:29:0A:EF:83:B9:AF:C1:33:E7:B8:90:B5:E1:B0:AA:65:BF
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/d8y6KQrvg7mvwTPnuJC14bCqZb8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:79:a6:08:1e:9e:4b:f8:89:f7:bc:2c:4d:a5:c9:52:0a:c7:
a5:b8:2b:92:33:e0:22:5e:df:46:be:60:ec:ad:4c:28:be:45:
ad:25:c6:21:f0:ec:9a:a3:5c:0b:55:aa:1b:93:db:cb:38:9b:
35:11:55:ce:28:28:a2:96:64:51:ff:7f:da:21:eb:1b:0b:92:
03:34:f4:b6:7e:8d:08:41:ee:77:c8:5b:5c:c0:dc:48:d1:3b:
75:92:fc:be:22:3a:fc:6f:1b:58:9a:93:1b:a5:5b:d1:59:6f:
38:20:fb:5a:55:4f:27:bf:df:80:a7:9a:5a:96:4b:93:23:ea:
e5:e3:44:56:28:22:b3:a2:46:ac:73:90:ed:90:91:db:d7:92:
e8:26:da:1b:94:52:65:d2:1b:cd:4f:a1:d6:69:1f:2b:91:4f:
65:23:09:b0:2c:46:99:d9:47:7b:54:4d:b8:06:1d:20:f2:95:
eb:b4:96:03:c4:8d:56:a5:cb:cd:5a:6a:ad:6e:02:08:ab:9f:
4d:a4:2d:a7:c6:d8:a2:e6:4f:bb:62:26:93:6c:20:f9:c6:e2:
bf:4f:54:1d:4e:6a:0e:0a:a4:c3:d0:34:31:f7:69:a1:49:94:
1a:07:14:d0:c8:9d:ad:3c:24:32:f6:74:4a:23:f1:f5:ba:cf:
ca:9c:ad:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org