Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/dEP-qc8aBaImd9BQOzQfpAc7GLw.roa
File: dEP-qc8aBaImd9BQOzQfpAc7GLw.roa (raw, json)
Hash identifier: KSDs6l80uzRlf1PmuDZflg6Cn+TGGP3ZIAmPrVwo1g8=
Subject key identifier: 74:43:FE:A9:CF:1A:05:A2:26:77:D0:50:3B:34:1F:A4:07:3B:18:BC
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 137B
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/dEP-qc8aBaImd9BQOzQfpAc7GLw.roa
Signing time: Tue 07 Nov 2023 05:47:58 +0000
ROA not before: Tue 07 Nov 2023 05:47:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 124.218.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4987 (0x137b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Nov 7 05:47:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7443FEA9CF1A05A22677D0503B341FA4073B18BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:25:24:cd:af:2c:e4:fb:9a:e9:a3:0b:4a:
b8:60:22:c5:4f:88:2b:8b:1a:9d:ba:dd:66:6f:83:
87:80:3b:e4:fc:f8:42:1c:b9:2d:bb:68:3c:c5:a0:
7f:b8:65:cd:00:ae:38:48:63:85:53:05:60:1c:3c:
10:c2:38:b4:bb:54:85:61:18:20:23:d2:1f:f7:25:
e2:84:73:ce:87:df:c2:bb:67:0a:f6:e2:9a:5c:2e:
e1:47:c4:27:3c:09:39:7d:0e:ee:ee:bf:4e:3c:a2:
76:a3:17:ed:18:01:9b:2d:49:97:e4:8d:6e:9b:73:
32:11:9f:69:3c:0a:51:4e:5a:ba:35:ef:b7:90:a3:
40:7b:eb:57:74:6e:38:76:ae:01:9e:82:84:40:09:
d7:d6:e9:58:0d:87:ce:94:61:75:f1:fa:81:03:fb:
f5:39:84:ff:05:3e:1f:8b:fe:30:e9:c8:e3:24:06:
86:0d:66:b1:41:7e:92:da:87:d3:2c:f0:70:df:3a:
00:a1:f5:d4:a8:fa:4d:a2:ad:d4:65:01:e1:8f:af:
8d:00:b4:3b:b8:8f:c0:f5:3d:8e:27:a8:5b:c0:82:
bb:62:f3:cf:55:5a:21:b5:75:fa:be:bf:86:6f:0d:
e1:23:86:75:b7:30:79:ba:4c:36:96:ca:65:58:de:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:43:FE:A9:CF:1A:05:A2:26:77:D0:50:3B:34:1F:A4:07:3B:18:BC
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/dEP-qc8aBaImd9BQOzQfpAc7GLw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.175.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a1:84:56:ea:a9:96:c0:d5:2f:84:4a:c6:d1:60:f3:37:28:
96:44:d6:76:3d:d2:55:a3:ce:8c:6f:b9:54:6f:d0:3e:9f:25:
82:dc:68:6f:69:ca:0c:ef:b1:3d:c2:60:8a:fa:2a:3e:ac:4f:
60:21:b5:dc:1a:79:8a:21:a9:73:d3:b6:62:b0:68:f9:db:ec:
92:26:23:db:3c:87:9c:3b:f7:da:d4:83:21:b2:4d:71:41:ff:
54:b7:19:f4:57:e0:54:55:11:83:d1:76:ed:a6:ff:cc:58:a7:
e8:b5:eb:f2:4f:91:de:4a:a8:0b:49:b9:d1:e9:36:1a:53:01:
cb:fc:f0:0a:65:15:d6:90:09:93:30:10:6c:7f:8c:9a:a6:66:
24:70:06:f1:5e:86:4a:6d:05:07:0e:f6:fa:48:cf:ac:1d:93:
e4:66:5c:6f:18:4d:7a:90:f8:0b:03:d9:30:e3:94:88:8b:10:
ba:74:34:75:b0:1d:23:4e:a3:b3:77:a7:de:ee:9e:52:e3:d5:
d6:e5:7e:1a:1d:41:b4:55:f2:d4:f7:26:d6:19:12:ed:33:3e:
f1:8d:90:e2:e2:05:4b:5c:c8:5a:19:eb:7e:02:e3:34:2b:c2:
9f:69:9e:0b:38:cd:9e:a9:ee:bf:a1:2e:27:1f:ab:95:0d:15:
83:5e:71:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org