Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/dW_3rJqFOaiCBdlVjZeG26JHLIs.roa
File: dW_3rJqFOaiCBdlVjZeG26JHLIs.roa (raw, json)
Hash identifier: SrTLOAvVprz7EU/Mck2S/RcaLvIp+EcWZbY/KeHABBA=
Subject key identifier: 75:6F:F7:AC:9A:85:39:A8:82:05:D9:55:8D:97:86:DB:A2:47:2C:8B
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0BDF
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/dW_3rJqFOaiCBdlVjZeG26JHLIs.roa
Signing time: Sun 07 Feb 2021 11:34:08 +0000
ROA not before: Sun 07 Feb 2021 11:34:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 210.200.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3039 (0xbdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:34:08 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=756FF7AC9A8539A88205D9558D9786DBA2472C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:25:df:8f:c1:75:c0:4f:fe:71:36:5c:b1:
ab:11:2e:e5:21:6f:b0:2f:96:78:c5:dd:2a:c0:bb:
50:e9:93:f0:d7:4e:58:03:1b:53:58:6a:55:46:eb:
b1:f1:6b:b6:d9:a6:17:39:52:4c:ed:24:54:83:48:
ab:66:16:6f:62:eb:b4:34:22:01:4c:8d:44:1b:1b:
04:13:27:ec:06:0f:e3:0b:58:e2:bd:2f:87:bf:05:
ee:c9:e9:5b:d8:34:ee:09:29:41:e8:c9:0a:a3:af:
a3:1a:39:dd:c2:e2:42:0c:5d:5f:b5:ea:fb:2c:0f:
47:12:02:59:d3:70:26:f5:21:9f:59:c4:ca:0c:5b:
18:d7:cc:dd:ef:6c:1c:5f:85:25:3e:c7:64:bc:76:
bd:66:e5:a0:6e:ca:bc:52:2f:2e:83:d2:44:40:50:
80:50:e0:34:3a:66:93:75:f9:c5:08:ac:82:4f:0c:
15:d1:fe:5c:08:cd:b8:dd:ac:f8:25:73:7b:6e:68:
c7:0a:a0:3b:ce:29:24:9f:1d:0f:a8:4c:4d:f7:c3:
02:28:66:94:ad:b5:3e:88:d2:ff:fa:da:3f:d1:61:
32:1d:24:b5:d2:e3:42:dd:6a:71:50:cf:a3:7a:b8:
d5:e2:04:e4:4e:4a:1f:b7:cd:b4:d5:8c:65:b2:e6:
13:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6F:F7:AC:9A:85:39:A8:82:05:D9:55:8D:97:86:DB:A2:47:2C:8B
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/dW_3rJqFOaiCBdlVjZeG26JHLIs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.83.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0f:aa:25:e3:4b:57:7b:a1:92:93:4f:79:96:5e:13:4f:16:
1f:66:7f:65:0c:cb:d8:47:01:42:ee:54:89:a8:f2:c2:10:ba:
bc:cc:07:e7:b9:df:ce:6a:5f:f1:4e:18:bd:db:21:61:aa:0e:
b4:03:11:45:b0:5d:d1:9c:26:8b:68:db:6a:a2:1e:aa:04:10:
93:15:42:9b:63:44:36:99:c3:ca:e5:b7:c8:74:f5:9d:6f:18:
28:34:ee:83:4f:8d:b6:0c:80:c1:df:28:96:2e:05:74:d3:e6:
70:39:ea:8f:4e:eb:df:ea:82:13:1b:1e:71:91:5b:61:50:22:
54:ad:95:b6:aa:fa:86:b0:ef:7b:73:8f:37:cf:2e:73:6c:04:
8d:52:a2:70:11:9e:50:78:28:29:62:af:bd:fd:e1:1f:1b:b1:
5e:52:01:6c:84:14:6a:66:74:01:bf:3b:31:10:ff:ba:19:5c:
6a:75:ea:36:50:01:8d:5f:ce:7c:d1:90:90:58:87:12:ae:89:
90:07:10:49:c0:f9:e0:dd:b0:3f:be:23:8f:ef:58:e4:98:1c:
13:96:84:6a:94:79:58:ff:91:1c:fe:76:5d:55:30:76:84:f4:
28:6d:c5:5a:89:c8:9e:ff:14:37:1a:10:2a:59:62:f0:f5:ad:
13:d6:ae:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org