Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/d9mmwDDc_E7G1oveSvMVfnuDmmA.roa
File: d9mmwDDc_E7G1oveSvMVfnuDmmA.roa (raw, json)
Hash identifier: xfFWxxMbGuF2PKYnM95ynvW3ZZMgfS/8QAl/MjxmZ5k=
Subject key identifier: 77:D9:A6:C0:30:DC:FC:4E:C6:D6:8B:DE:4A:F3:15:7E:7B:83:9A:60
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0902
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/d9mmwDDc_E7G1oveSvMVfnuDmmA.roa
Signing time: Tue 29 Sep 2020 10:01:21 +0000
ROA not before: Tue 29 Sep 2020 10:01:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.63.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2306 (0x902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:21 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=77D9A6C030DCFC4EC6D68BDE4AF3157E7B839A60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:ef:e3:db:27:af:ba:32:e3:42:09:3b:94:
ca:0c:33:c3:11:bc:2d:ad:a9:c0:28:43:e8:86:7e:
38:f7:ae:1f:92:35:af:31:e7:ab:ac:13:b3:77:6a:
3b:be:5c:e6:04:86:14:a0:fa:97:e6:1c:ce:35:60:
ee:75:a1:f4:04:f8:54:e4:49:7b:84:9e:49:e7:9d:
b6:16:35:69:70:c5:9b:3c:a7:ca:c7:8c:10:5f:ed:
bf:86:c9:fd:9c:d9:c1:72:38:81:29:88:0c:ec:70:
3e:86:c3:4d:af:1b:b1:62:1b:b4:81:b2:3b:07:e6:
15:7b:ec:e3:d2:43:e2:71:0b:2e:ac:e0:08:2f:4a:
83:35:bf:dc:63:5f:00:d2:5f:20:56:70:48:81:0d:
bc:ea:43:35:cc:59:95:74:eb:28:32:8f:ea:81:1f:
68:6a:3c:62:76:30:11:e1:dc:2e:1c:e8:9a:7e:e3:
8c:e5:e8:7d:49:00:99:85:e7:50:65:b0:fc:e6:e4:
ec:fd:05:94:39:80:ef:3e:cb:1d:4c:29:a6:78:24:
23:4d:24:3d:be:1f:e1:37:0b:84:93:c6:2a:b6:3c:
5b:c9:b9:03:59:8d:66:b9:a1:6d:0f:da:d0:b6:bf:
b9:d4:4d:dd:fa:71:28:2a:97:80:ff:d7:02:a2:d2:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D9:A6:C0:30:DC:FC:4E:C6:D6:8B:DE:4A:F3:15:7E:7B:83:9A:60
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/d9mmwDDc_E7G1oveSvMVfnuDmmA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e8:13:51:cb:9c:5c:8d:0d:a9:57:ff:aa:09:a2:ca:74:e2:
77:d3:bf:8e:88:28:e2:b0:b3:6f:25:09:a2:57:00:32:e5:0a:
2b:07:19:40:23:46:a0:77:0c:b9:0e:4e:2b:66:6c:ad:56:53:
b9:3e:a3:db:1c:9b:fc:31:26:09:05:01:f7:b1:ca:3e:78:ce:
4f:1c:08:64:b7:fa:c7:ea:6d:f1:15:86:2d:12:82:eb:6d:4c:
76:2b:d5:54:2b:63:8c:5c:eb:d0:eb:11:92:cf:13:72:86:ce:
bd:d5:8a:e3:2a:f8:16:86:50:6a:f0:7b:23:6d:a6:e7:2d:d4:
e2:b1:c6:27:52:e7:55:da:da:0f:1a:8f:13:8b:ef:91:cd:d4:
1d:58:94:ef:bd:e5:ab:a2:6d:69:0f:1b:d5:a1:ea:2a:25:92:
31:9d:1e:50:75:c0:c9:c9:19:cf:ba:9e:a1:08:03:cd:64:90:
d2:ca:04:80:78:95:c2:59:4a:10:af:1b:13:4e:eb:27:bd:7d:
de:7d:47:6c:32:2a:a3:e4:79:d9:7e:e7:93:3c:90:6b:78:83:
f1:00:2b:aa:42:6c:c2:f2:cd:a8:c4:24:be:75:4d:a7:7f:2f:
fd:e7:94:39:bb:04:28:f5:bf:d5:4d:7d:25:a2:ca:d0:9b:3e:
30:5c:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org