Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/g-NFFKPDUkGMi1pjeB6S0ug2jLs.roa
File: g-NFFKPDUkGMi1pjeB6S0ug2jLs.roa (raw, json)
Hash identifier: bhNo8wt0AEFFSRDwnI7916cYo8BgnsR3miFNFBk48lk=
Subject key identifier: 83:E3:45:14:A3:C3:52:41:8C:8B:5A:63:78:1E:92:D2:E8:36:8C:BB
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 08FF
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/g-NFFKPDUkGMi1pjeB6S0ug2jLs.roa
Signing time: Tue 29 Sep 2020 10:01:20 +0000
ROA not before: Tue 29 Sep 2020 10:01:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.63.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2303 (0x8ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:20 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=83E34514A3C352418C8B5A63781E92D2E8368CBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:1a:30:db:d4:fa:07:cf:04:46:da:e6:6c:
dd:0f:8f:02:88:ba:e9:eb:19:c3:22:9f:6d:61:ce:
18:f4:c2:bf:76:cb:e2:59:30:6a:2f:94:1f:ab:b5:
a0:05:76:49:4a:f4:8e:30:34:19:d6:b3:ec:f3:8d:
87:17:a3:89:c4:65:e8:b4:f3:10:8d:16:bd:cf:84:
e6:20:b2:98:78:dc:31:8d:b5:3e:7a:9c:5e:76:e7:
25:e7:0d:bf:55:1e:40:3d:2a:31:ca:05:5c:cf:f9:
9a:f2:29:0c:e2:c7:db:ef:6c:6a:c8:15:96:82:05:
a2:77:b2:61:c6:e2:62:e4:e8:45:dd:79:fa:d0:3a:
dc:e1:fa:1e:c9:8b:21:f8:56:b9:94:f7:9b:46:48:
3b:f0:6f:c0:ea:2f:49:58:ec:d5:70:49:50:09:32:
93:38:0f:a5:0b:de:84:9d:e0:a1:69:c2:59:72:ec:
07:9d:1b:9e:23:fd:69:d3:bf:cf:1c:a1:14:36:d7:
8c:83:13:27:3b:ff:11:12:6a:a4:17:11:4f:52:66:
a1:e3:55:ba:73:97:45:42:d8:76:e4:11:0a:a8:40:
8e:02:6d:ee:d6:ff:47:82:5f:e9:d2:21:18:55:2d:
a4:10:be:24:d4:fb:49:a8:2b:0d:1a:ff:d4:24:71:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E3:45:14:A3:C3:52:41:8C:8B:5A:63:78:1E:92:D2:E8:36:8C:BB
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/g-NFFKPDUkGMi1pjeB6S0ug2jLs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.208.0/21
Signature Algorithm: sha256WithRSAEncryption
04:5d:dd:09:b1:c3:38:b8:4c:b5:3f:fe:1f:b2:03:75:1f:ce:
0f:19:6f:bc:6c:05:b1:ed:01:69:d3:e4:3b:ed:42:f5:5e:97:
ae:1f:a6:8b:3f:0c:d9:2a:5d:3f:80:64:a6:fc:6a:d1:78:24:
e1:da:0d:bc:8c:43:cc:05:88:d6:c3:d9:c8:3e:23:cd:4a:fb:
c8:7f:1e:a6:d6:a2:b2:c2:1d:e9:5e:ca:09:73:f9:cf:2f:9b:
c6:5f:d5:dc:bf:3f:0a:3f:04:7c:b4:96:31:68:0a:cc:15:7b:
e1:62:d5:ce:fe:1e:da:55:01:2e:23:0b:9b:da:d8:4a:64:9e:
1b:a9:5a:de:1d:eb:6e:9c:51:26:2d:40:9d:56:5b:07:d0:22:
e8:ed:4f:cc:00:9d:fb:ea:50:bd:64:af:c0:62:70:4a:87:8a:
8c:2d:a0:05:07:86:14:76:0c:60:55:b6:de:68:ec:da:60:b6:
14:11:dc:6e:93:10:23:f6:87:cd:c9:4f:d6:4c:ef:bb:cd:61:
e5:63:92:18:bb:65:24:12:9d:44:e0:c3:49:96:e8:5c:3f:96:
fa:b6:bf:7e:d0:c1:1b:a4:e5:31:07:f6:35:1b:af:15:c7:f3:
72:2d:d5:06:29:87:64:a4:01:fe:f9:84:1c:1e:9c:ac:6a:cc:
65:20:63:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org