Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/g7xP0sJ0so55n0oA_BRme2jGIsc.roa
File: g7xP0sJ0so55n0oA_BRme2jGIsc.roa (raw, json)
Hash identifier: 0WvKyS11vMzdfJ1LJ6LBAGFmAlFQcWBk+s7zEBT78sA=
Subject key identifier: 83:BC:4F:D2:C2:74:B2:8E:79:9F:4A:00:FC:14:66:7B:68:C6:22:C7
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 137F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/g7xP0sJ0so55n0oA_BRme2jGIsc.roa
Signing time: Tue 07 Nov 2023 05:48:29 +0000
ROA not before: Tue 07 Nov 2023 05:48:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 124.218.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4991 (0x137f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Nov 7 05:48:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=83BC4FD2C274B28E799F4A00FC14667B68C622C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c2:63:87:b1:ef:25:bf:77:c7:a0:f1:df:28:
5a:58:e0:c5:f0:8b:2f:39:9c:ba:42:6a:af:06:73:
d9:49:11:d2:7e:33:41:d2:2a:0a:66:0e:a0:f9:b3:
46:83:5a:46:e8:cc:a3:42:72:b1:53:1d:d4:c7:78:
b9:49:a3:80:02:33:b1:44:7e:df:be:f6:76:85:8f:
af:81:2e:d3:aa:31:f6:4f:01:b6:10:53:ee:5d:23:
ac:87:22:e4:2b:89:93:52:76:0f:49:32:03:64:89:
37:cf:eb:a9:48:a2:6a:52:9f:a1:e7:eb:bc:97:f5:
29:dc:43:db:58:df:02:b0:7a:46:52:7d:a1:dc:32:
1e:77:11:56:13:ad:e5:e0:33:48:54:fd:20:de:09:
44:cf:d3:9d:48:59:d1:e7:d7:ed:b8:f1:bc:d7:be:
15:44:35:17:67:53:f1:87:f4:8b:3b:5e:9b:15:ce:
0c:81:8a:3d:83:c7:99:e5:78:8f:96:fe:3f:a4:ea:
49:36:fb:4f:b2:b8:19:40:3a:85:e8:72:a5:42:c8:
0d:7a:d3:e5:0d:f8:3e:0f:c1:bf:ac:09:9f:ca:11:
df:04:ac:e8:5c:7a:b0:7e:6f:78:3b:cc:71:48:36:
30:0b:22:85:1a:93:1c:35:e4:8d:c9:1c:ca:4d:08:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BC:4F:D2:C2:74:B2:8E:79:9F:4A:00:FC:14:66:7B:68:C6:22:C7
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/g7xP0sJ0so55n0oA_BRme2jGIsc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.177.0/24
Signature Algorithm: sha256WithRSAEncryption
56:3e:28:09:68:d4:55:89:33:86:62:a1:04:f2:a4:59:c1:15:
e1:26:19:7b:bc:d5:79:ed:cc:1f:82:88:08:2c:6f:7c:e1:a3:
15:ac:0f:3f:1c:51:ad:81:1d:9b:9d:ca:97:b5:54:53:43:8b:
2e:20:dd:97:fc:0c:10:09:aa:39:57:94:6f:d0:c9:ee:c3:b2:
f9:d1:d2:8d:5c:40:f1:54:16:87:bf:a4:07:24:61:96:68:69:
90:3e:7f:de:b1:18:c1:12:83:90:94:b2:c3:24:5b:ce:c7:58:
c6:09:1c:79:1d:a0:a6:a3:ec:fb:6f:1a:9b:cb:c3:ce:40:14:
aa:9b:38:fb:77:5d:55:23:42:ac:88:29:ab:57:fd:bd:d1:8e:
7d:5f:19:0e:cf:48:5a:84:9f:e1:b1:d9:35:c3:56:42:0c:2e:
e1:96:cb:1a:77:34:5a:45:f2:2c:00:35:b0:4e:de:b6:bf:64:
63:cf:4b:aa:0f:91:74:97:c8:77:0e:8b:61:0f:11:4a:b9:43:
46:9c:15:03:85:e2:9f:16:26:db:21:74:21:f1:45:a1:05:73:
ec:1c:15:4f:04:6d:ea:fc:42:97:b9:fd:e3:8d:08:ed:90:bd:
99:e8:a2:9c:36:8f:7e:c3:f9:a1:85:9f:02:73:e0:10:5d:cf:
80:eb:b8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:50:43 2024 by rpki-client on console-fra.rpki-client.org