Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ftEwLXLW3_TNZTqcdlPHaKwVa8k.roa
File: ftEwLXLW3_TNZTqcdlPHaKwVa8k.roa (raw, json)
Hash identifier: gpm4jIhUGxe+I92i04yLj8uY4cmKHkq+g9HUm7tmLsQ=
Subject key identifier: 7E:D1:30:2D:72:D6:DF:F4:CD:65:3A:9C:76:53:C7:68:AC:15:6B:C9
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E56
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ftEwLXLW3_TNZTqcdlPHaKwVa8k.roa
Signing time: Wed 29 Sep 2021 02:40:15 +0000
ROA not before: Wed 29 Sep 2021 02:40:15 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 210.63.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3670 (0xe56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:40:15 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7ED1302D72D6DFF4CD653A9C7653C768AC156BC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:f0:bb:b9:c4:f4:1f:81:6f:70:55:eb:7a:
03:f4:d4:04:84:07:93:d9:44:07:e6:5c:46:e5:b2:
3a:15:dc:0e:29:72:bd:ed:94:6d:a3:6a:75:30:ce:
53:6e:62:2b:90:09:66:2e:92:2a:fc:b9:87:59:d8:
4b:1c:eb:a4:38:6e:01:61:3b:98:d9:fe:29:2f:94:
0f:48:9a:aa:a4:77:39:17:2a:da:2c:18:86:e9:c9:
91:e2:b2:44:8a:a3:37:26:c8:97:ea:a1:78:83:c8:
f7:2b:15:43:79:06:49:84:91:a3:30:d2:15:32:c6:
8a:e0:de:7f:99:12:34:1d:03:58:ab:da:9e:c2:76:
82:33:72:04:c6:f5:c1:64:f2:6f:8c:82:82:1e:23:
c9:04:dc:15:10:1d:1b:9d:d3:e7:2e:6c:2f:fc:f0:
8b:4c:b4:61:a3:e9:5b:ff:fc:f8:a0:0e:49:f6:14:
b5:d4:e6:a2:6c:7c:68:64:04:28:f7:89:5d:56:46:
a2:25:18:d4:39:4f:bc:63:27:ee:09:7b:0a:02:d1:
66:22:52:91:be:2a:9c:11:00:3a:6a:b0:94:ce:44:
5e:5d:7b:8c:c6:7e:4e:8b:9d:b6:b2:6b:1a:16:3f:
f3:d7:8f:7c:c4:2a:be:82:48:78:cd:c3:b5:9e:32:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D1:30:2D:72:D6:DF:F4:CD:65:3A:9C:76:53:C7:68:AC:15:6B:C9
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ftEwLXLW3_TNZTqcdlPHaKwVa8k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.200.0/21
Signature Algorithm: sha256WithRSAEncryption
04:17:b4:57:ea:38:03:76:76:79:19:de:e2:a0:aa:2c:12:75:
b1:c8:97:5d:46:3c:a4:eb:ac:e3:29:88:72:ea:ff:0a:8f:3a:
18:78:bb:10:84:6c:0c:34:e1:af:1b:80:ee:b5:b9:2b:2e:90:
00:cd:39:49:c6:37:81:14:18:dd:6e:be:f6:4f:d8:41:e3:c7:
e4:61:39:56:c0:1c:4f:2d:78:30:9a:29:e9:9f:ea:d2:32:ae:
2e:dd:f1:fa:b0:85:66:05:37:8a:73:9f:5a:78:08:78:0c:02:
25:4c:d8:30:ff:f4:8a:91:fc:84:55:62:dd:bd:4f:17:10:3a:
52:ed:35:2a:3c:9b:8a:2c:da:50:7b:bb:53:af:f5:eb:5e:f5:
e6:fe:af:5b:28:49:a9:b3:ba:06:28:24:89:39:40:49:1a:cf:
56:95:ef:6e:10:5b:17:0e:96:f2:23:2d:da:68:63:f0:41:02:
29:0a:55:c8:bf:80:a7:4f:c3:3c:56:70:73:89:dd:e1:7c:08:
4d:b5:e0:d0:6a:95:ce:d0:99:e7:90:23:84:c8:78:1d:13:6f:
dd:6a:99:fb:9d:ab:4d:71:ec:a9:2d:b8:dd:b8:e5:44:cc:29:
cf:6a:62:a6:46:6d:e0:f4:69:48:38:60:fe:35:62:77:b6:e0:
76:52:d0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:22 2025 by rpki-client