Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/fniIgRfIs7yaqq1Wq9T2AjwtluU.roa
File: fniIgRfIs7yaqq1Wq9T2AjwtluU.roa (raw, json)
Hash identifier: YSGgF5JA7oR7TJFQhAUes4icZvyG1QgWN3TGOcLCO1I=
Subject key identifier: 7E:78:88:81:17:C8:B3:BC:9A:AA:AD:56:AB:D4:F6:02:3C:2D:96:E5
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12A2
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fniIgRfIs7yaqq1Wq9T2AjwtluU.roa
Signing time: Fri 01 Sep 2023 08:04:44 +0000
ROA not before: Fri 01 Sep 2023 08:04:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9311
IP address blocks: 210.201.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4770 (0x12a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7E78888117C8B3BC9AAAAD56ABD4F6023C2D96E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:60:ac:e5:75:44:68:7b:7a:ba:2a:6f:ef:
13:5a:96:aa:6a:2a:99:68:2d:1d:4b:e7:6f:47:8b:
ab:16:2e:6f:19:f4:a0:1f:80:d2:74:65:d2:f6:9f:
4f:97:02:57:70:0b:bb:69:3a:47:11:b9:47:42:e2:
02:97:0a:ff:4d:ae:e9:40:9f:e4:ed:34:3b:c4:80:
4a:9f:61:8f:9b:ea:e0:f6:c3:5c:1d:1a:65:00:f5:
f3:ed:11:f4:6e:94:6c:30:b7:3a:11:35:19:3e:46:
12:25:ce:8c:41:15:92:dd:af:fd:60:73:27:c9:87:
27:ad:fb:7d:cb:82:ad:c5:ca:28:af:42:32:c4:bc:
01:e7:1a:45:d5:8a:42:6d:80:e7:f2:bd:b3:6c:6b:
62:b1:eb:ac:b5:02:63:dd:13:5f:53:5d:55:e7:70:
ff:ad:cf:a9:18:9e:46:c8:85:71:86:50:c3:06:c1:
50:09:ee:7a:0f:58:2f:57:7d:08:c5:8e:d1:e4:af:
71:90:48:e1:e3:90:2d:48:67:7e:cc:25:cb:66:d7:
04:76:b5:77:21:82:2e:b8:4c:7c:1a:58:6f:10:2d:
a3:6d:d3:2e:ef:1c:88:60:45:c3:51:6d:40:db:dc:
61:83:cc:16:3b:dc:a7:a6:48:3a:b9:ec:d7:30:57:
04:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:78:88:81:17:C8:B3:BC:9A:AA:AD:56:AB:D4:F6:02:3C:2D:96:E5
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fniIgRfIs7yaqq1Wq9T2AjwtluU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.74.0/23
Signature Algorithm: sha256WithRSAEncryption
01:86:9a:06:6c:1f:07:de:e6:01:48:40:48:66:12:ab:79:62:
b2:46:22:f1:4e:b4:6d:e2:ce:97:a1:80:64:bf:4b:c6:f4:b7:
8a:f0:25:0d:5a:18:b9:84:26:2e:11:da:e5:2d:90:72:c9:fa:
5d:80:f4:2c:74:ac:fd:26:82:84:2e:b9:da:54:4e:15:f7:97:
d4:ed:94:e4:e2:6c:a1:79:4b:74:d5:5a:91:35:6b:48:c1:ec:
20:97:5d:53:8d:89:8a:10:44:92:9c:17:73:54:ab:a8:69:48:
54:6e:65:3f:d6:85:ae:99:4c:11:8d:d4:19:2c:90:e1:47:4e:
f7:95:38:6f:1c:b9:19:f0:0e:e6:d0:00:36:c8:f4:69:15:e4:
15:18:09:57:d9:8c:3e:c7:53:b5:30:56:ba:e4:ad:97:06:65:
54:77:0b:20:88:61:b6:21:7e:f5:2e:da:1b:e9:88:84:e7:08:
68:9f:21:9e:40:80:ac:9c:f0:39:cc:56:d1:18:77:d2:42:c1:
d7:9f:40:d0:39:28:6c:60:e7:45:03:2a:32:3d:48:1f:f6:98:
8c:23:cb:da:c5:55:37:01:c6:0d:36:40:d2:d7:9b:67:dc:55:
16:b2:37:a5:b9:6d:1c:d6:66:ec:66:73:a6:5e:14:ac:8a:01:
53:11:36:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org