Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/fCo9OHEcRSvJh1bt__jw7a-xFfs.roa
File: fCo9OHEcRSvJh1bt__jw7a-xFfs.roa (raw, json)
Hash identifier: ecpp9u0nAl0EekNTKPPvWT9CTBM7DxSYUALU1LCO0Ho=
Subject key identifier: 7C:2A:3D:38:71:1C:45:2B:C9:87:56:ED:FF:F8:F0:ED:AF:B1:15:FB
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E3A
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fCo9OHEcRSvJh1bt__jw7a-xFfs.roa
Signing time: Wed 29 Sep 2021 02:40:07 +0000
ROA not before: Wed 29 Sep 2021 02:40:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9415
IP address blocks: 2404:0:3000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3642 (0xe3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:40:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7C2A3D38711C452BC98756EDFFF8F0EDAFB115FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:18:6b:4e:fc:fa:e1:41:0d:9c:0b:26:b0:25:
c0:8c:10:f9:c0:f0:6a:f8:b0:30:78:4d:da:b2:c2:
19:cf:51:f5:a5:56:46:9f:3f:4e:bb:07:b5:8c:d2:
5f:9e:c5:a9:22:98:2f:3c:46:3c:c2:ce:fd:29:fd:
92:c9:ba:75:78:29:c7:73:e1:c5:bf:ac:b5:e6:44:
d0:38:ce:56:d0:fd:86:f8:66:3a:29:02:32:48:a0:
0e:e7:36:48:a2:1f:15:b0:b2:7d:4e:e1:83:54:1d:
e9:f2:6e:e7:c6:6e:c7:ec:de:33:f9:f3:04:96:00:
d1:6f:d6:ad:84:47:15:0f:53:64:b3:e2:c9:d3:e9:
3a:83:3f:a8:88:9b:05:8c:5b:67:6f:fd:88:2f:1c:
5d:b3:f3:c3:21:ff:9c:dd:a7:cc:8b:1b:76:d0:67:
b2:62:66:80:bb:ec:43:d4:e9:e6:1f:68:64:47:26:
84:8d:40:e0:62:40:5c:e4:80:42:2b:2b:16:ff:b5:
90:e8:6f:d9:00:44:cb:0a:2b:c4:8d:e6:df:1f:02:
8c:ce:e9:b9:bd:44:c0:ad:d0:c3:2c:ab:16:ca:d8:
74:e0:ee:6f:c7:61:7a:9f:39:1a:58:83:24:ef:b9:
d4:aa:1d:35:5d:67:95:94:13:28:f7:30:5f:18:d0:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2A:3D:38:71:1C:45:2B:C9:87:56:ED:FF:F8:F0:ED:AF:B1:15:FB
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fCo9OHEcRSvJh1bt__jw7a-xFfs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
67:6a:3f:c7:d8:11:8c:00:11:4f:88:f9:6a:6b:38:0e:98:95:
e9:16:c9:87:a1:80:e8:68:00:e3:03:7e:5f:65:fd:b8:23:81:
a6:06:2f:65:ae:db:19:0b:33:6a:d6:6b:64:77:bb:53:61:eb:
18:90:66:d1:5f:3c:53:fd:30:bf:01:22:82:00:58:4e:5e:b6:
dc:b8:57:6d:61:af:90:26:1c:71:f9:6e:3d:45:a4:b8:ee:f1:
6c:68:11:e2:af:fd:cd:e2:e1:ba:0e:9a:6d:bf:e3:b6:0c:cc:
e0:49:c4:9f:f2:4d:6d:60:fd:6e:ee:a1:4c:b4:6c:47:0b:08:
60:86:50:a1:6e:5c:af:43:54:77:c6:a2:75:ec:22:c7:70:2d:
d1:2b:fb:f4:1a:f8:50:7f:3e:97:72:81:a5:37:e0:ab:cf:a7:
cb:c8:c2:cf:15:49:25:68:f5:e3:4e:49:fc:bf:f1:8d:5c:63:
c5:db:77:85:d7:9c:d5:32:56:f2:4b:a9:7f:5d:5b:8f:76:8c:
04:d7:ad:fd:68:fa:09:a6:17:98:7b:43:d4:0d:6d:b6:de:6c:
0e:fc:28:64:9e:91:24:34:f6:e0:77:2f:df:9b:07:80:7e:46:
e2:fc:bb:b2:e0:93:94:c3:b3:f3:c5:1b:ac:93:a2:00:72:2e:
51:38:0b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org