Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/e53QTzw1vZ22n0wYZ08HRjySlUQ.roa
File: e53QTzw1vZ22n0wYZ08HRjySlUQ.roa (raw, json)
Hash identifier: oi7B6NSDGDgoqt01pN3JWEQ/AXVM1gzTrCCeFRiqYJo=
Subject key identifier: 7B:9D:D0:4F:3C:35:BD:9D:B6:9F:4C:18:67:4F:07:46:3C:92:95:44
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DFB
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/e53QTzw1vZ22n0wYZ08HRjySlUQ.roa
Signing time: Wed 29 Sep 2021 02:39:49 +0000
ROA not before: Wed 29 Sep 2021 02:39:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24154
IP address blocks: 210.63.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3579 (0xdfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:49 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7B9DD04F3C35BD9DB69F4C18674F07463C929544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2c:4e:d4:67:54:62:7e:e8:c4:e7:cc:42:9c:
4f:81:b7:75:23:ea:e8:45:b4:05:56:f4:e0:9d:83:
0a:e6:b7:dd:c8:d6:ce:31:dd:8e:ae:48:72:2a:1a:
85:12:13:a7:6a:92:8c:c1:b1:00:f4:63:c7:1b:d1:
1a:34:48:09:81:8d:83:f0:a8:9a:f7:a9:2a:c9:a6:
7b:ab:91:fc:53:38:72:87:fc:fd:f1:5e:40:7e:50:
69:83:92:37:e1:73:a2:b9:1f:26:39:c2:8c:3e:3c:
ac:5f:6a:7c:45:e8:18:c5:58:fc:64:01:e3:a8:9a:
86:d7:95:97:29:bd:fc:f8:a1:53:71:5d:fe:20:53:
c3:5e:35:04:eb:4d:0c:ee:21:38:2f:be:2b:78:50:
08:65:fa:cf:31:9b:5a:3a:78:ed:f7:06:a1:ab:31:
30:47:a4:bc:ab:a1:03:89:e5:36:83:6e:d0:a2:a7:
3d:04:0e:1b:de:94:a4:f4:a7:67:61:a9:38:21:ac:
c0:a4:aa:a2:f2:2b:4d:df:35:17:35:6e:41:ea:68:
7b:31:b2:91:f6:67:84:db:d2:f6:c7:ed:5e:91:64:
1a:a9:4e:0a:12:79:79:6b:a6:6b:0b:dc:e2:ca:28:
20:a6:43:68:64:a0:e5:bd:4d:fa:cf:80:90:79:1a:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9D:D0:4F:3C:35:BD:9D:B6:9F:4C:18:67:4F:07:46:3C:92:95:44
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/e53QTzw1vZ22n0wYZ08HRjySlUQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.220.0/22
Signature Algorithm: sha256WithRSAEncryption
28:9b:60:6c:92:d4:7a:f8:a1:81:8d:cd:d7:da:da:72:39:59:
4e:d4:ce:3e:50:0d:00:05:99:61:43:ff:d5:0d:89:37:1d:50:
e6:30:58:fa:87:4d:17:fd:aa:af:3f:60:e2:c8:1a:fc:87:ad:
86:88:13:a8:7b:b0:4f:42:7d:73:57:be:a6:89:fd:ba:5d:2a:
8d:57:a3:80:da:2b:c9:15:d3:26:9d:11:b3:27:8e:55:17:7b:
db:9d:3d:9e:8a:f8:bb:91:ee:ed:64:dc:ce:da:d6:d0:7e:00:
61:4b:3d:7d:94:42:4c:c7:f7:49:5d:f1:71:fe:9b:9e:fe:d9:
92:04:0a:6b:17:52:f2:34:7e:a7:80:eb:34:54:d3:fb:77:11:
f6:9f:68:9a:0d:43:45:9c:f3:64:6f:6b:0a:e3:54:21:97:cc:
fd:56:f6:2e:a9:1f:0a:ca:57:ec:7f:70:0a:cb:ab:10:d2:ce:
54:ac:98:c6:16:a7:31:e4:24:ae:11:02:36:69:20:aa:2f:ed:
6a:6e:b9:b3:f8:8d:ff:ad:bd:dc:1c:7b:25:38:65:70:b1:64:
07:a4:57:6c:43:f9:08:79:33:d8:2a:71:ea:d1:76:ba:87:b2:
c2:8d:d6:15:19:fc:05:81:6f:80:28:f5:80:d7:82:37:3f:4d:
d5:0c:35:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org