Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/fh9i9YpMxTIxUA301Z9Vkt05zI4.roa
File: fh9i9YpMxTIxUA301Z9Vkt05zI4.roa (raw, json)
Hash identifier: BZ5PRETUGT0+h5wZDaRZaknGubRXq59RpRtLlLNgGMk=
Subject key identifier: 7E:1F:62:F5:8A:4C:C5:32:31:50:0D:F4:D5:9F:55:92:DD:39:CC:8E
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 125F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fh9i9YpMxTIxUA301Z9Vkt05zI4.roa
Signing time: Fri 01 Sep 2023 08:04:22 +0000
ROA not before: Fri 01 Sep 2023 08:04:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 203.79.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4703 (0x125f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7E1F62F58A4CC53231500DF4D59F5592DD39CC8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4a:9c:6b:92:4c:7b:50:f4:ae:11:74:7c:f0:
7f:ad:da:4f:67:83:67:1c:1a:94:fe:f8:22:68:03:
18:bc:5e:33:d8:d9:6e:cb:e2:0f:f2:35:18:03:0e:
4b:89:dd:98:6e:1b:c8:eb:ba:77:0d:f6:a6:ce:00:
83:13:aa:fe:d9:be:51:b6:55:97:9c:eb:05:39:f0:
a9:2e:95:e6:bb:c0:2e:d8:d4:c4:38:8e:ea:51:41:
39:4c:dd:b0:c8:46:f5:f5:cd:8f:4c:3f:a5:b5:03:
10:1b:70:08:b3:96:5d:2c:85:95:4e:6f:02:38:da:
87:05:47:f3:2c:d7:66:25:98:3b:7c:2d:fa:82:ab:
8c:9c:52:52:92:f8:8a:a6:8f:8d:7d:94:26:38:5f:
b0:ef:0e:09:86:22:c1:4d:b0:eb:7c:bb:22:a1:88:
1a:ae:e3:19:44:60:68:33:16:96:c2:59:7f:78:f2:
60:90:66:dd:5a:b5:c4:f8:1a:18:47:ba:c6:44:d4:
bd:bf:ac:5e:68:b9:1b:0b:ec:18:64:fa:28:b5:63:
d6:b8:a7:6e:bf:3e:dc:ac:7e:33:bd:1e:16:f5:d8:
9e:94:29:38:c2:9c:7c:ca:ff:a7:0c:ef:dd:48:44:
fb:94:7d:36:a2:0d:a3:d5:fa:28:f6:a4:3c:04:35:
fc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1F:62:F5:8A:4C:C5:32:31:50:0D:F4:D5:9F:55:92:DD:39:CC:8E
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fh9i9YpMxTIxUA301Z9Vkt05zI4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.192.0/18
Signature Algorithm: sha256WithRSAEncryption
bf:e8:c2:d0:19:cc:03:ed:92:3d:36:84:a4:19:b9:6c:3f:59:
77:63:b1:09:e7:5b:3d:ac:7d:7f:f5:63:4c:30:f8:32:03:9c:
0d:11:5f:b2:a3:80:fb:de:06:e6:9b:52:09:57:45:58:69:b2:
4f:67:7d:82:d8:74:3b:a6:d5:bc:9e:5b:c7:63:da:7b:d5:0b:
8a:5b:53:0a:de:7f:17:1f:17:24:e8:0d:b8:07:b4:2a:0c:bb:
6b:5c:76:c7:03:7a:22:bc:3f:64:b7:cd:91:07:67:fa:cd:b0:
3c:22:b5:e9:dd:a7:f4:3b:d7:e9:9c:8a:d0:ea:e9:40:55:a7:
f0:f7:98:06:f5:18:17:63:5d:cc:58:8d:10:7c:40:6d:c5:39:
9e:19:1c:61:43:f0:40:b9:a0:5c:d7:d4:a2:8d:c1:93:bb:61:
30:60:b3:48:f0:0d:8a:b8:8f:a4:a2:15:0a:60:52:54:a0:21:
47:75:89:5a:2d:0e:f0:77:c7:d6:d2:59:d8:72:b1:4a:47:bb:
9b:52:0b:98:21:53:64:51:af:d2:56:a5:05:80:ec:95:96:4a:
ee:64:54:8d:49:66:62:54:46:5b:aa:9c:a1:5c:96:ca:e6:9d:
22:68:61:2d:da:d4:fd:e5:2e:da:f6:a0:e3:4b:d4:f2:ed:2c:
4c:e6:52:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:57:32 2025 by rpki-client