Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/gV8rE39EZHPRkkd6-o4-AR_snB8.roa
File: gV8rE39EZHPRkkd6-o4-AR_snB8.roa (raw, json)
Hash identifier: uhLf+8wZBt6yGKN2rfBAONgqAgynLdYIvtmEavwCcVE=
Subject key identifier: 81:5F:2B:13:7F:44:64:73:D1:92:47:7A:FA:8E:3E:01:1F:EC:9C:1F
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10B6
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/gV8rE39EZHPRkkd6-o4-AR_snB8.roa
Signing time: Tue 16 May 2023 08:36:32 +0000
ROA not before: Tue 16 May 2023 08:36:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 124.218.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4278 (0x10b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:32 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=815F2B137F446473D192477AFA8E3E011FEC9C1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:06:c2:c0:90:c1:63:76:7a:44:62:7e:f9:
f6:85:c0:52:6e:88:43:e4:38:cd:c5:af:b2:9c:dd:
8a:99:b7:a9:bf:fb:fd:54:de:48:f5:d8:82:d8:52:
40:24:f4:aa:23:d6:ba:32:49:38:5b:83:e0:2c:38:
4d:46:fc:f2:96:ee:1d:33:0f:b7:98:87:cb:31:f9:
1c:f4:7d:d3:35:70:b3:fc:88:c3:de:1b:a2:d9:7f:
6d:c4:da:2d:bf:0d:52:23:ed:df:75:08:90:3b:41:
7c:6d:2a:8c:3c:be:6d:cb:12:c7:cd:04:af:63:15:
20:15:39:8c:3e:3a:e7:92:ce:27:79:e2:76:23:ab:
26:51:5c:28:be:37:ba:b0:53:11:85:cd:1a:b1:ac:
e7:48:c0:6c:55:4c:b5:fb:8a:da:02:d3:40:dc:43:
42:f5:1d:c0:02:fb:37:ec:7c:47:33:19:71:f8:ca:
ae:37:37:14:28:3b:28:66:c7:b7:09:6c:89:b0:12:
19:24:b8:69:a7:52:a4:8d:8f:74:91:d9:1e:34:e4:
a3:57:a0:a9:2e:37:0d:7e:13:8b:4b:ce:cf:11:17:
b1:77:b0:14:35:24:7d:ed:f3:dc:6d:38:bd:c7:8d:
b2:0b:d3:fa:94:d0:79:5f:41:eb:a8:bf:a9:7e:a3:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5F:2B:13:7F:44:64:73:D1:92:47:7A:FA:8E:3E:01:1F:EC:9C:1F
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/gV8rE39EZHPRkkd6-o4-AR_snB8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.96.0/22
Signature Algorithm: sha256WithRSAEncryption
27:70:34:b3:fa:de:a9:e2:2c:90:34:a9:b2:06:c8:eb:9f:89:
4b:bc:28:1c:25:c8:54:e6:70:8a:38:94:73:b0:ac:0e:6e:2f:
22:0d:a6:d3:8c:e1:76:0e:6b:d2:b2:70:b5:6e:2d:60:a8:57:
5b:8b:8a:1a:32:32:ea:61:ba:f8:38:42:81:33:98:1b:1a:16:
c8:16:8b:58:64:a4:e6:f2:81:2c:67:4e:c0:3b:55:c5:93:4a:
df:2d:b5:73:b9:6e:c8:48:88:e6:95:b8:69:61:31:62:45:46:
c3:ad:51:72:41:d0:12:26:07:a7:f7:e8:be:fb:96:7e:67:f7:
1e:db:2a:02:88:72:21:1d:87:ab:24:45:00:b7:b7:7f:91:de:
58:16:52:f2:1c:2e:89:77:69:b6:21:69:5e:0e:71:cd:82:2d:
7e:8b:d0:8d:ca:0f:c0:29:53:02:33:67:06:13:b3:31:fb:63:
e7:9b:1e:a6:2c:17:5b:e2:28:0e:53:cf:8f:d3:4e:a1:c6:59:
24:43:0d:39:17:de:38:a5:b3:be:7f:01:31:2e:cf:b5:40:36:
bd:94:d3:e4:72:39:eb:02:b7:27:f2:4e:b7:05:c4:d6:2e:64:
d8:2f:fd:df:44:0f:b8:3e:b0:ed:51:41:f5:be:59:02:88:f9:
24:cb:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org