Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/gQDVTQhbtW60RUld5n3HJ-O5DVw.roa
File: gQDVTQhbtW60RUld5n3HJ-O5DVw.roa (raw, json)
Hash identifier: /6F7NpCqT3gPDxZGlNX9FhZl9FCIiRcNXTyhdMVIrzg=
Subject key identifier: 81:00:D5:4D:08:5B:B5:6E:B4:45:49:5D:E6:7D:C7:27:E3:B9:0D:5C
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/gQDVTQhbtW60RUld5n3HJ-O5DVw.roa
Signing time: Thu 15 Sep 2022 02:40:01 +0000
ROA not before: Thu 15 Sep 2022 02:40:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 22787
IP address blocks: 210.58.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8100D54D085BB56EB445495DE67DC727E3B90D5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:0e:be:a6:ae:b9:87:9d:4e:4e:aa:7d:bf:
f6:27:4b:50:db:f9:f5:99:b3:ed:52:2f:82:a0:40:
a2:19:bf:91:3a:c6:eb:3d:46:e1:f8:95:51:d1:cc:
e2:79:c7:bf:57:f4:c4:d6:dc:29:46:9e:62:f8:e7:
8d:9c:9d:57:87:21:f3:7d:3c:9a:21:80:00:9d:d2:
9f:db:3e:d5:66:5d:71:90:80:d9:dc:03:56:c9:5c:
c2:e8:fb:dd:a0:b1:b7:7d:ee:2b:fa:8d:3c:da:f7:
60:24:5e:be:05:78:d6:a2:14:91:75:7a:8d:e3:40:
c5:db:71:d2:6e:26:21:58:95:9e:e6:c1:7a:b3:c6:
1b:64:40:0e:03:16:b5:90:ee:48:6e:8a:8c:83:60:
3f:61:96:db:f2:ca:36:4a:11:82:52:af:b8:a9:5b:
f1:8a:8a:bd:d0:85:a3:77:09:ef:5a:56:f5:23:ab:
f7:1a:a9:7a:62:ea:85:35:86:82:c3:a1:32:ea:4d:
fc:fd:8f:c1:61:9c:8e:6c:b0:46:92:4f:8e:c2:81:
0e:7e:d5:56:71:8f:e7:01:b6:1c:2e:78:09:28:57:
30:f2:9d:74:49:30:d9:10:93:bb:59:38:71:8c:15:
4e:7c:56:67:3d:01:52:c8:2f:37:8c:34:86:97:81:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:00:D5:4D:08:5B:B5:6E:B4:45:49:5D:E6:7D:C7:27:E3:B9:0D:5C
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/gQDVTQhbtW60RUld5n3HJ-O5DVw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.90.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:55:a5:02:81:e4:83:ec:94:6f:cd:21:79:3d:9c:c2:c8:ef:
90:b1:2b:ed:e7:df:eb:8a:8f:d6:8a:b4:9d:97:41:80:ec:7b:
31:13:e2:00:22:2d:b8:1b:85:b5:cb:89:34:85:60:b2:f1:9a:
9c:a0:46:c9:b2:dc:ab:3c:78:44:14:83:02:82:f3:aa:1c:97:
3f:64:03:87:77:a6:2e:a0:92:64:99:ec:39:7e:bb:ed:a9:65:
0e:dd:6d:c4:e3:f2:d0:66:25:8a:90:3e:fc:44:d0:01:f1:8b:
5e:8f:9e:00:5c:df:3a:e1:ee:71:38:2f:90:0d:35:93:1d:9b:
1f:9c:f1:53:ce:52:6b:46:4f:d4:f9:23:02:0a:e2:2e:5b:88:
03:e1:7e:e5:8d:cb:38:79:03:c2:91:88:1e:7f:11:39:07:5d:
dd:31:6e:5d:30:e2:69:bd:64:3c:01:3e:51:26:21:75:8b:10:
db:c8:75:3b:f0:e4:61:27:a3:b1:d7:cc:fe:2c:bd:b2:a5:cb:
04:ae:fb:a3:43:99:a3:59:90:ea:99:d3:26:a9:7e:c5:42:b9:
6d:21:53:98:fd:5a:53:7a:9d:1a:58:0a:43:1e:63:17:1e:6a:
b3:8d:a1:ca:18:5c:34:71:61:5a:b8:f4:88:5b:23:ff:7e:b4:
09:43:dd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org