Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/gwIQ1FhsnPNbdoZE_U_qs0PdNdQ.roa
File: gwIQ1FhsnPNbdoZE_U_qs0PdNdQ.roa (raw, json)
Hash identifier: D6U/ZpdD+TWNMX/e1Pn8SiONgWeObdJ9wy405L5HuIw=
Subject key identifier: 83:02:10:D4:58:6C:9C:F3:5B:76:86:44:FD:4F:EA:B3:43:DD:35:D4
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1301
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/gwIQ1FhsnPNbdoZE_U_qs0PdNdQ.roa
Signing time: Fri 01 Sep 2023 08:05:16 +0000
ROA not before: Fri 01 Sep 2023 08:05:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 223.22.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4865 (0x1301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:16 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=830210D4586C9CF35B768644FD4FEAB343DD35D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:85:54:84:8f:a5:c1:fa:d5:b4:21:ad:2e:
32:85:82:f2:94:1b:0e:ce:2a:e0:6f:72:db:35:78:
45:4f:2f:83:44:d7:37:51:b0:29:c4:ae:34:82:76:
98:26:70:bd:05:eb:1b:64:4b:84:c5:fd:96:11:ba:
d6:9f:89:68:c1:fe:a8:ec:58:85:f1:d2:90:46:f6:
78:25:2e:6a:87:cd:16:fd:88:fc:c3:e3:ff:3e:0d:
c4:5f:f1:fd:21:15:50:ca:03:1a:38:7a:73:75:5f:
dc:d9:33:d3:ac:c4:3f:55:d4:95:43:82:5d:c5:8b:
0d:fb:76:1b:83:db:e5:74:92:51:98:d5:86:88:d7:
9b:8e:fc:93:9c:6a:af:c3:09:82:b8:96:91:e5:c9:
29:14:f4:4a:1d:ce:54:c8:c3:4f:b0:33:87:ef:d5:
97:aa:41:d3:7a:c4:88:b7:64:fb:3c:33:54:a2:49:
20:6b:a0:72:84:0f:23:bf:7b:96:d7:95:85:05:88:
19:16:ab:59:d4:1c:cf:6f:2e:c1:96:d0:a9:71:0c:
c5:06:20:83:40:73:c5:3c:7b:73:0c:cf:7d:99:3e:
4c:00:12:76:7c:53:87:51:90:4f:15:85:d8:5b:52:
d4:15:4a:1e:ae:d0:ff:d2:68:33:8c:66:c3:64:62:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:02:10:D4:58:6C:9C:F3:5B:76:86:44:FD:4F:EA:B3:43:DD:35:D4
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/gwIQ1FhsnPNbdoZE_U_qs0PdNdQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.22.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b9:f4:c4:a6:a0:7e:16:6d:e4:0f:72:0a:54:be:2d:26:ed:fb:
48:de:e3:ed:20:00:1c:44:1d:18:ea:ce:31:21:c1:1a:e3:64:
9a:45:12:27:30:30:2b:66:ee:42:34:b2:c0:f7:86:7d:01:ad:
81:3f:2f:8f:a0:06:f3:26:f0:2c:5b:fc:63:3c:de:b0:59:a7:
39:90:25:55:eb:ba:91:84:3f:63:d7:76:bf:65:70:22:46:f9:
04:bd:a0:8d:82:5d:c8:1d:11:e5:f9:26:a1:85:96:ce:ea:87:
05:aa:a2:de:af:69:a3:0c:45:9d:dd:60:3d:b5:f6:83:86:05:
86:61:79:22:e7:97:98:af:ca:c1:8b:45:52:2f:d9:36:f0:00:
54:22:ed:e8:64:c7:9b:bd:6d:4f:2d:5e:3a:ee:da:4d:ca:53:
9a:c1:ca:5e:20:a3:2a:44:8e:17:83:2c:ff:ed:6c:89:a3:cc:
b8:08:4b:73:c8:90:1f:ef:d3:03:f8:43:41:a0:29:b4:1d:3f:
d9:0c:3e:cf:bd:e1:25:f4:40:95:ef:ef:37:4a:49:a8:73:5f:
9c:99:1b:17:11:42:6c:c1:7e:aa:2c:d7:ae:4e:74:f1:bf:59:
d1:92:8c:48:9c:9a:ab:ba:e4:72:b0:c0:0f:71:b0:c9:9f:f4:
86:8e:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:05:04 2025 by rpki-client