Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/eQCBRXQs0JGrnnGo0t16ihOEUAo.roa
File: eQCBRXQs0JGrnnGo0t16ihOEUAo.roa (raw, json)
Hash identifier: Vvy38U2U6KayNNAu1LgUnp7uItTJhyqc77Y9Jd39Da4=
Subject key identifier: 79:00:81:45:74:2C:D0:91:AB:9E:71:A8:D2:DD:7A:8A:13:84:50:0A
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12EC
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/eQCBRXQs0JGrnnGo0t16ihOEUAo.roa
Signing time: Fri 01 Sep 2023 08:05:10 +0000
ROA not before: Fri 01 Sep 2023 08:05:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9311
IP address blocks: 210.201.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4844 (0x12ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=79008145742CD091AB9E71A8D2DD7A8A1384500A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:fc:be:4e:be:ba:b7:37:61:85:83:04:42:
1c:84:18:2c:f7:f6:64:f7:71:1e:2d:10:b7:9d:a8:
b0:c7:09:42:b5:af:16:ad:b0:1c:2f:03:cd:d4:6a:
d9:92:9e:9c:0b:52:1f:41:e0:31:43:1f:c9:7d:44:
ae:53:2a:01:73:1c:9b:1c:42:0c:f8:09:75:e6:95:
07:0f:a3:d3:4e:5c:0f:02:c6:23:01:3f:6f:84:d8:
c9:91:76:b7:18:05:5a:6d:10:73:c3:16:fc:29:41:
4a:ee:df:f2:e0:01:2d:d7:bc:1f:4b:f3:c5:de:70:
78:9a:57:e7:6e:a8:8e:0a:7f:b9:6a:ab:c2:4c:b3:
0b:f4:b9:9d:a6:04:81:85:60:f3:40:d1:5e:8c:18:
bd:46:fb:e2:5e:3c:76:ff:7e:95:cc:de:13:8e:ef:
05:ca:9e:ca:2a:e6:f0:32:c0:de:02:dd:18:0b:96:
ce:5e:8c:f1:d1:54:27:d2:39:6b:24:4a:41:ca:4c:
43:4a:c4:c6:af:97:25:ed:f5:26:4f:52:e0:59:ce:
f2:01:a3:9c:2b:86:e7:f2:79:27:5d:09:2e:9a:17:
d9:83:0f:d0:46:a5:d4:4f:eb:81:a9:15:fd:1a:52:
5f:1c:22:3e:ac:4c:3a:dd:10:ea:2a:13:9e:e3:68:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:81:45:74:2C:D0:91:AB:9E:71:A8:D2:DD:7A:8A:13:84:50:0A
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/eQCBRXQs0JGrnnGo0t16ihOEUAo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.60.0/23
Signature Algorithm: sha256WithRSAEncryption
00:ec:90:49:2d:eb:b0:35:91:bd:6a:83:c4:e9:23:95:ef:36:
7d:99:74:0b:17:65:5a:37:64:3a:92:18:28:92:45:f4:a1:ac:
ad:42:a5:91:74:1f:f1:00:89:9d:06:66:da:ef:b2:5c:fa:2a:
5c:59:a4:52:bd:c2:9c:6b:ad:fa:ed:d3:c2:45:41:55:86:9e:
74:1a:d2:28:61:2f:0c:7a:98:8b:b3:7c:b5:2b:60:58:09:d7:
0e:4e:a3:dd:e8:b8:54:03:dd:6d:1b:03:94:6f:3e:2d:e5:d2:
49:74:83:05:c7:18:ab:00:af:89:5b:f0:cb:ac:45:72:7e:a9:
db:7b:7c:54:33:b5:34:29:90:b8:f9:09:8a:6a:b4:65:96:70:
a3:37:ea:26:60:96:ab:93:b1:3a:ce:5b:84:8b:a4:10:01:04:
16:fb:cd:e8:7b:8e:84:ec:d6:b7:56:b0:95:33:15:27:1b:0f:
de:1f:3e:c7:cf:5f:9d:77:ba:b4:9a:87:cd:3f:df:46:8f:85:
76:22:ef:10:e8:26:06:d1:5a:73:84:50:62:5b:2f:35:02:f6:
29:7f:ec:a3:42:91:6c:e1:fc:ad:74:1a:90:a7:67:72:90:a1:
cc:a1:7f:0d:76:36:50:64:c7:f0:73:d2:2c:48:22:d7:cb:88:
b1:b8:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org