Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/eEu9zPLQOuGbcG4LyKNWbfEtDxE.roa
File: eEu9zPLQOuGbcG4LyKNWbfEtDxE.roa (raw, json)
Hash identifier: SECveyAv/WVzBcLIqG9RPcv5iYvv8uUd+HmZz2b+Rv0=
Subject key identifier: 78:4B:BD:CC:F2:D0:3A:E1:9B:70:6E:0B:C8:A3:56:6D:F1:2D:0F:11
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E0D
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/eEu9zPLQOuGbcG4LyKNWbfEtDxE.roa
Signing time: Wed 29 Sep 2021 02:39:54 +0000
ROA not before: Wed 29 Sep 2021 02:39:54 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 222.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3597 (0xe0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:54 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=784BBDCCF2D03AE19B706E0BC8A3566DF12D0F11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:8e:61:8c:ca:5c:e3:db:fe:c8:00:ef:b2:
10:2e:00:54:b6:ca:3f:a0:01:62:3a:ff:3b:76:49:
c8:48:00:ea:e5:a6:df:c8:4e:04:c2:f3:4d:9f:7b:
65:fd:e1:dd:5a:92:9c:82:eb:63:7e:03:b9:15:6a:
3a:9c:96:34:26:9e:5f:4b:3f:36:f2:1b:7b:9f:f3:
df:1e:25:23:6a:12:8c:ab:19:7c:3f:59:c8:7a:b0:
c5:4a:73:73:61:f3:bc:77:d1:5f:bb:cc:bb:7e:d0:
8f:cb:d5:80:e9:36:b6:69:01:0b:52:ad:30:e1:49:
db:70:c9:6a:9b:b3:af:47:af:e6:81:48:d6:2e:fd:
fa:17:dd:95:eb:71:c8:77:1c:b3:3a:56:0c:3d:47:
07:b0:2a:c6:eb:04:a2:f0:69:49:86:d7:b6:83:44:
ae:40:02:68:89:42:b6:1f:a0:23:9d:f9:83:7a:57:
a4:c4:82:67:0f:cf:69:a3:d4:21:de:ec:61:50:7f:
da:a7:af:3e:ef:50:05:37:45:f2:b0:39:0c:e8:6e:
9e:5d:71:6a:6d:51:3c:7f:e0:ea:78:53:ac:fe:85:
3a:6f:09:ff:1d:a7:d7:b3:a6:bf:aa:46:a7:f4:81:
b2:5e:33:97:65:ed:aa:46:b3:f6:a2:f7:7a:5b:4b:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4B:BD:CC:F2:D0:3A:E1:9B:70:6E:0B:C8:A3:56:6D:F1:2D:0F:11
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/eEu9zPLQOuGbcG4LyKNWbfEtDxE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.157.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:01:b0:74:06:45:54:1a:b8:c9:11:c8:6f:41:18:39:e3:40:
e8:16:20:c5:5e:84:d6:f3:07:68:4c:d3:42:f1:63:e1:d2:58:
e0:15:86:08:37:05:8d:fb:0b:a6:a1:bb:57:c5:58:53:87:0e:
a1:e7:52:09:35:5b:e3:30:f2:99:e4:2c:25:e5:b8:87:b0:38:
ef:1e:d9:5a:03:6a:06:62:67:43:8f:c2:5e:6f:7f:8c:e8:fa:
9d:26:bd:94:b0:35:15:1b:48:fd:f2:af:df:ba:b9:bf:a0:0b:
f6:fb:c8:d4:77:8b:3f:52:6f:07:6c:5c:77:3d:4e:5c:64:bf:
e1:7d:90:33:ef:d7:a9:6e:1b:05:56:97:d5:2b:b2:bc:ef:83:
c0:ad:e9:0a:e0:43:91:c4:06:2c:74:88:8b:6f:d0:dc:c4:e3:
8d:6e:b5:9a:7a:af:82:02:f4:b8:db:75:90:62:90:4f:a3:62:
a6:5d:5a:79:d4:83:b7:8a:5e:e1:ea:6a:75:c2:b5:70:61:55:
de:66:5c:bc:f8:41:6e:7b:57:c5:a8:6f:88:50:30:ce:b4:3a:
65:a7:15:56:f0:59:98:8c:1d:07:0d:4e:6d:c4:30:e8:8e:25:
fc:f0:28:65:ff:2d:5a:7c:fa:30:1a:3d:ea:fa:23:6a:cd:a4:
10:bf:a1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org