Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/eCHslz68RRrz-j3WRi240DQ9zjE.roa
File: eCHslz68RRrz-j3WRi240DQ9zjE.roa (raw, json)
Hash identifier: i2bVJG/RofMNhCPkeRuWBvWb5i4EEMDHQZCcD5xFNts=
Subject key identifier: 78:21:EC:97:3E:BC:45:1A:F3:FA:3D:D6:46:2D:B8:D0:34:3D:CE:31
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DC6
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/eCHslz68RRrz-j3WRi240DQ9zjE.roa
Signing time: Wed 29 Sep 2021 02:39:33 +0000
ROA not before: Wed 29 Sep 2021 02:39:33 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 210.200.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3526 (0xdc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:33 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7821EC973EBC451AF3FA3DD6462DB8D0343DCE31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f1:3e:49:62:cf:e4:5c:1e:6b:01:07:15:51:
98:66:15:3c:bc:1a:a3:f5:11:a7:0e:c8:bb:25:4d:
ae:1e:be:e3:e4:6c:72:40:00:3e:75:39:ca:f4:40:
63:5f:3a:ab:9b:77:b5:29:cf:59:00:72:e5:62:e0:
1d:2d:d9:cc:ee:c6:82:59:9d:ff:42:27:b4:30:c5:
bf:71:15:d3:fa:69:47:f3:25:d4:45:d0:0f:fd:e0:
7e:1d:b0:c2:1b:74:ff:96:a5:d0:86:c6:1e:0e:3e:
b3:81:52:09:a0:d7:b7:ef:c2:85:7d:dc:08:f4:68:
d4:f6:5a:ef:2f:5c:eb:a3:2d:3a:90:65:89:6d:5c:
bb:37:72:f9:4a:b5:7f:a2:cf:04:c7:3c:c4:6d:0b:
37:4e:59:08:71:50:d4:5c:8b:e4:a1:f2:12:76:e2:
28:f7:41:9d:80:38:49:95:37:34:35:82:79:96:51:
30:cb:34:26:a7:4b:26:d7:af:67:2b:9b:04:ec:b7:
a4:46:d6:20:bb:dc:88:72:44:07:7f:69:19:3f:94:
fd:11:21:10:45:c6:a2:f8:09:80:d2:bf:e3:e3:d5:
d1:1b:45:d8:9a:fa:69:19:b4:40:8c:4c:5f:95:5c:
68:fc:fd:15:e4:c9:44:6f:c7:05:5d:e8:7a:62:5f:
a9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:21:EC:97:3E:BC:45:1A:F3:FA:3D:D6:46:2D:B8:D0:34:3D:CE:31
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/eCHslz68RRrz-j3WRi240DQ9zjE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:5d:fe:49:b3:40:d6:65:dc:a2:0c:2e:ae:2d:de:4a:6f:08:
fe:ef:17:15:91:69:a9:4e:a0:22:7b:16:4a:c7:3d:0d:6e:88:
22:e7:05:0a:64:16:4e:24:d1:03:c8:64:a5:21:79:27:f7:ff:
62:ea:66:16:fa:e8:2a:0f:fe:7b:78:a9:9d:4b:bf:5a:4a:13:
3e:61:e1:69:05:25:e1:03:b1:71:c8:b4:f3:7f:38:ce:a4:d4:
ad:20:42:19:85:b9:b5:46:dd:5f:cd:8d:0e:b1:2d:b2:38:9b:
d0:15:2b:85:21:ef:04:a9:12:7d:2e:b4:eb:50:78:b1:d8:65:
5f:38:6a:ba:31:05:18:b0:5c:df:ea:fa:da:c9:5d:82:e9:cc:
cf:e2:7f:bf:95:a7:0f:f7:36:9a:1e:cc:d2:fc:35:c7:a1:19:
b4:98:8f:83:76:9c:aa:61:60:6a:3f:73:07:5d:8c:72:84:99:
cc:66:ec:09:d1:14:bb:8b:15:a8:56:06:b0:ce:17:46:d5:31:
04:c3:2e:54:1b:8c:4b:5c:23:16:6b:27:9e:75:7e:29:ed:dd:
b5:3e:cf:47:58:d5:6c:1b:5a:f4:d2:48:cb:d1:2d:4a:c3:0b:
5e:55:83:1f:6b:7f:4f:34:96:91:bf:8c:fd:ac:41:2e:a0:e3:
d7:d3:11:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org