Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/fmMxtEFBS9Qikmr_iQut3WFt3qE.roa
File: fmMxtEFBS9Qikmr_iQut3WFt3qE.roa (raw, json)
Hash identifier: 2TuU1RWY7XQ++vP+lWc4Y8ByJVQUh0uEQh86AnZNYhk=
Subject key identifier: 7E:63:31:B4:41:41:4B:D4:22:92:6A:FF:89:0B:AD:DD:61:6D:DE:A1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12F3
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fmMxtEFBS9Qikmr_iQut3WFt3qE.roa
Signing time: Fri 01 Sep 2023 08:05:12 +0000
ROA not before: Fri 01 Sep 2023 08:05:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 43.240.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4851 (0x12f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:12 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7E6331B441414BD422926AFF890BADDD616DDEA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:b7:05:ad:54:f8:de:3b:7f:11:cf:75:c1:
3d:d7:1b:35:0d:dd:16:80:6f:f8:ab:84:e6:96:7c:
bf:ca:2f:12:d7:38:88:4f:7e:ad:59:8f:01:19:a1:
be:5d:bc:83:40:8c:27:6e:e1:03:d4:98:f1:67:b0:
31:a5:eb:b1:26:3b:71:2c:6a:fd:36:c8:73:91:83:
70:42:ba:33:c8:dd:09:32:e2:2c:20:c8:c6:d9:f4:
d4:1b:27:53:a2:0e:b9:3e:73:18:73:0b:bb:e6:b9:
69:e7:70:a8:53:93:06:6d:ec:5c:96:28:6d:58:37:
4d:88:98:1b:ed:8e:92:25:74:80:3e:33:36:12:2e:
dc:03:2f:08:ae:c8:19:51:f9:ae:a0:91:1c:7d:fc:
da:9d:29:d6:d1:9a:8f:05:ad:27:9a:51:20:13:7c:
e6:d5:6d:bb:a6:eb:d0:84:4b:1f:a2:81:fc:00:20:
a9:91:a5:b0:84:f5:d0:32:20:93:07:44:18:33:81:
46:06:4e:35:c7:22:6c:f1:92:d1:f6:7c:3f:6b:04:
78:85:43:9b:1b:16:eb:7d:17:84:56:c9:87:df:e8:
03:7c:ea:14:d9:bf:cb:85:97:de:8c:72:31:4d:5b:
19:4b:15:d9:dd:ce:25:3c:41:c2:6c:05:0b:7b:40:
b0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:63:31:B4:41:41:4B:D4:22:92:6A:FF:89:0B:AD:DD:61:6D:DE:A1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fmMxtEFBS9Qikmr_iQut3WFt3qE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.104.0/22
Signature Algorithm: sha256WithRSAEncryption
be:8c:c5:e9:0e:7b:ad:55:10:71:5a:3a:bc:23:05:d9:a6:66:
1a:44:f7:b4:f0:37:b0:cb:1f:f3:74:4e:88:b9:33:1c:2a:a6:
79:51:9d:8d:c8:1e:f4:0c:32:d3:5c:11:98:fb:00:cb:1d:cd:
cd:c2:72:f1:0e:ad:d8:05:c7:09:ab:93:40:6e:3a:5a:8a:38:
18:07:bc:0f:9f:4e:31:d7:bc:ab:35:11:d0:7b:80:0e:46:b5:
ea:75:ab:91:81:4c:07:16:5c:2f:c3:3e:5d:e4:32:3c:59:3c:
b9:a7:81:7b:f9:24:58:a5:a0:0c:ba:01:95:6c:59:11:0e:da:
08:8a:cf:86:70:94:7e:ae:8d:eb:5c:e0:1f:09:7d:b1:9d:4b:
8f:d4:30:69:39:1c:45:6b:a1:f2:92:b2:4a:16:17:d8:fd:c3:
79:26:a7:61:bc:5d:b9:f2:f7:ce:f9:db:41:f1:54:f3:92:41:
24:d4:93:c0:e0:95:db:2e:c9:34:fd:d7:60:a2:f4:ba:a5:99:
71:08:e0:c8:40:49:b0:14:8a:3f:f0:dc:91:77:ea:dd:31:ba:
e0:fd:84:7f:b3:71:f3:eb:ff:c5:fa:a0:f1:3f:b4:0a:92:e6:
22:a0:8c:f7:88:75:03:a9:84:d9:9f:d7:1b:89:6d:6e:67:42:
df:0b:4e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:50:43 2024 by rpki-client on console-fra.rpki-client.org