Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/fGQgnaOnJoAEi58Tb8KUNwBLCwQ.roa
File: fGQgnaOnJoAEi58Tb8KUNwBLCwQ.roa (raw, json)
Hash identifier: 4oemT2EZuJ6vs7dIDkrFjxibqYouPb6S4ls63Re36iQ=
Subject key identifier: 7C:64:20:9D:A3:A7:26:80:04:8B:9F:13:6F:C2:94:37:00:4B:0B:04
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fGQgnaOnJoAEi58Tb8KUNwBLCwQ.roa
Signing time: Thu 15 Sep 2022 02:40:25 +0000
ROA not before: Thu 15 Sep 2022 02:40:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.58.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7C64209DA3A72680048B9F136FC29437004B0B04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:0a:d5:28:39:78:6e:75:f8:ee:af:09:56:
89:fe:db:55:4e:04:96:5d:82:23:02:b7:08:1b:20:
de:21:89:16:3f:9c:ba:0c:12:4a:35:b6:0e:0e:18:
4a:02:fc:cc:d9:0f:bc:e7:6f:a7:90:1c:ae:8e:4f:
21:48:ab:0b:93:21:1a:d1:e6:79:cd:86:23:4b:63:
9a:51:11:67:52:30:e9:a0:59:2e:c4:96:45:7c:42:
09:d9:6b:5f:f3:6a:17:1f:a9:2c:4e:45:57:7f:6e:
74:80:5e:67:ba:3c:65:83:65:a0:61:ee:8d:bc:4b:
0e:44:ff:8a:f8:3f:65:08:4e:cc:32:c0:0e:08:0b:
9c:b9:e0:50:9a:3d:1a:83:60:be:d6:e7:18:11:1b:
02:5e:b3:28:ec:6b:4d:11:17:19:e1:aa:d6:c4:61:
96:b0:ff:50:bb:96:2e:12:7e:89:47:c5:a1:49:3b:
2c:92:d0:99:66:e9:2e:be:fe:4c:6e:ab:06:72:81:
f9:ec:08:20:62:b6:fb:74:1e:fa:4f:07:bc:75:db:
e3:29:fe:23:78:07:42:94:d9:d2:2b:70:df:b8:9b:
ee:a5:ee:83:e0:f5:7a:4e:ab:fd:0a:15:d4:0f:28:
79:69:df:5f:78:19:b9:31:7d:23:cb:b0:12:61:88:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:64:20:9D:A3:A7:26:80:04:8B:9F:13:6F:C2:94:37:00:4B:0B:04
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fGQgnaOnJoAEi58Tb8KUNwBLCwQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:0d:b0:1d:5c:f7:c4:89:87:08:d4:be:dd:51:ae:8a:fd:bd:
a1:d2:e2:0e:ab:39:79:ab:eb:50:e8:4b:bd:38:9b:c6:d8:5f:
ce:b6:04:64:c8:e6:ed:e8:0a:8c:4d:3a:e0:89:e2:92:df:c1:
f2:b7:84:8c:01:c7:28:47:44:d3:ab:03:f0:a4:5b:ea:37:95:
07:c0:28:8e:62:12:dd:5f:17:4f:08:64:a0:8a:a7:a1:be:58:
cd:aa:ab:e7:a8:28:d4:cb:8e:7c:d7:ae:a0:78:08:83:b4:d4:
8d:84:29:c3:91:8a:34:e2:22:61:87:11:87:ce:80:e3:68:27:
f9:cf:a8:2c:18:55:b4:21:be:bb:b7:0a:2b:2a:d8:52:c1:22:
fa:59:5f:48:1d:1b:a0:9e:be:93:43:a2:de:72:ab:bf:d0:87:
9f:a1:fb:41:0c:8f:3d:db:9e:d2:c8:93:13:f4:bd:0b:25:6f:
4c:73:fb:e4:42:17:90:13:8f:37:7f:b1:db:3b:52:c0:ba:e0:
89:02:f5:d6:2d:66:7b:1d:2e:3f:0e:f1:3a:77:11:18:0c:51:
ba:17:85:2d:17:54:2e:86:36:f6:0d:5c:84:d7:c5:41:81:c8:
ff:d7:40:5a:03:bc:bd:d8:30:19:de:ff:77:7f:20:39:14:e2:
76:44:6d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org