Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/eBNuN3PWHiM59fLHBA6nnzwn3Uo.roa
File: eBNuN3PWHiM59fLHBA6nnzwn3Uo.roa (raw, json)
Hash identifier: VXacWIvBrypm5tMmkt93cQEPN55YqJnuMhqlSXDPWjU=
Subject key identifier: 78:13:6E:37:73:D6:1E:23:39:F5:F2:C7:04:0E:A7:9F:3C:27:DD:4A
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/eBNuN3PWHiM59fLHBA6nnzwn3Uo.roa
Signing time: Thu 15 Sep 2022 02:40:20 +0000
ROA not before: Thu 15 Sep 2022 02:40:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24154
IP address blocks: 124.219.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=78136E3773D61E2339F5F2C7040EA79F3C27DD4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2e:ab:7a:c6:e8:07:98:27:4b:4b:52:12:89:
2d:a0:ad:73:0e:c4:05:9f:28:fa:16:90:1c:95:bd:
90:6f:57:d0:7c:81:a0:c7:6b:57:bc:52:70:48:39:
67:26:9e:cc:96:1c:a9:65:8f:7e:f4:73:25:bc:25:
76:ea:92:4e:35:04:8d:85:dc:be:a6:e1:e6:29:f4:
c0:b6:52:cf:a2:c6:74:65:c1:19:96:59:73:d7:13:
97:9e:60:dd:d5:96:65:23:db:00:59:4f:43:70:a7:
65:47:af:67:25:22:a8:ad:de:30:6a:7f:a0:f9:53:
d7:cc:b3:00:fc:c2:66:28:98:84:1d:3e:f9:75:be:
ad:df:1c:cb:93:2b:89:5a:40:9b:07:82:cc:6e:49:
9c:43:38:9f:9c:c8:17:c6:dc:7e:9f:e9:32:5a:1d:
f5:41:ab:0f:d3:fc:be:5e:f1:23:4b:de:d1:da:83:
1f:2a:85:df:15:35:cc:14:d4:0b:e3:6f:66:f9:f8:
3f:5b:7f:4e:fe:27:00:c4:05:14:6e:de:05:39:54:
c2:12:14:50:d9:99:33:ca:97:3f:29:85:d7:c2:50:
5a:25:c1:82:a1:7d:bf:30:a3:f9:fb:ca:82:c5:0b:
aa:34:de:ab:f4:df:b3:8c:49:1f:e3:f1:9f:b8:59:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:13:6E:37:73:D6:1E:23:39:F5:F2:C7:04:0E:A7:9F:3C:27:DD:4A
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/eBNuN3PWHiM59fLHBA6nnzwn3Uo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.219.0.0/17
Signature Algorithm: sha256WithRSAEncryption
52:ba:74:d4:53:ac:fe:4f:17:3d:0b:a3:aa:d6:db:71:1d:b4:
d6:78:71:9a:81:7c:e9:03:21:43:23:46:a1:fe:4e:0a:3c:61:
29:c3:b2:2b:7a:a9:1d:c4:9f:ed:43:f4:9a:39:af:39:b4:69:
f2:54:9f:c7:f1:8b:b8:f3:07:a8:6a:09:01:99:21:97:7d:3d:
b5:27:2c:5d:28:6b:3e:0c:d5:c8:76:c4:fd:05:24:b1:be:c8:
a9:0c:6d:56:70:06:82:6a:1b:b0:f1:cc:28:b4:bf:da:1d:e4:
62:8c:cb:44:1b:c5:0e:14:4a:f9:50:6c:f0:03:20:29:f1:f6:
12:63:47:f5:a3:8f:57:7a:30:6f:f8:ca:d1:d7:fa:8c:c8:62:
05:fc:e5:8c:cf:64:98:85:55:65:82:32:75:ee:77:77:02:75:
55:9e:0c:67:ea:52:9f:26:1f:21:77:f9:24:94:d7:df:a6:d6:
9d:50:1f:5c:90:35:05:ec:7e:2f:ce:69:e4:db:12:2f:80:48:
77:bc:64:8b:38:7c:f6:2b:4d:cb:1e:a4:80:ba:19:35:45:fc:
eb:2e:0a:fb:bb:24:5c:9a:98:65:c4:41:1b:d8:82:20:c6:f1:
00:d5:af:88:47:12:6e:0d:9e:e4:01:28:41:e9:d3:12:af:6a:
4a:1e:8f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org