Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/hCcEUsAx5CLrL7jBXaYXIIsmqSQ.roa
File: hCcEUsAx5CLrL7jBXaYXIIsmqSQ.roa (raw, json)
Hash identifier: /hLI637iNFySGmGr98dYpwwTRCTMIZ8WYKyN+3Ihigc=
Subject key identifier: 84:27:04:52:C0:31:E4:22:EB:2F:B8:C1:5D:A6:17:20:8B:26:A9:24
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0954
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/hCcEUsAx5CLrL7jBXaYXIIsmqSQ.roa
Signing time: Tue 29 Sep 2020 10:01:43 +0000
ROA not before: Tue 29 Sep 2020 10:01:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 202.178.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2388 (0x954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=84270452C031E422EB2FB8C15DA617208B26A924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c5:f8:19:fb:5c:00:53:3a:47:56:54:31:9c:
de:be:a6:ff:21:31:2f:ad:19:1e:1c:2a:7c:95:45:
e2:37:48:40:c8:5a:fd:b0:28:dd:82:ad:e0:b0:d2:
b2:10:b9:d4:fc:3b:1c:c0:0c:83:4f:8a:f3:90:d8:
43:6b:33:47:28:de:db:4f:13:fe:6e:b1:c7:14:39:
e2:f9:b9:c8:7a:08:3f:df:3a:02:12:6a:da:4a:a3:
b2:46:1e:75:31:3e:9d:3a:cd:92:c6:a9:a7:21:c5:
00:c0:31:54:6a:8d:f2:87:a2:3d:d1:61:2d:4d:27:
a2:86:00:78:15:e1:40:4f:12:71:bf:a2:cb:4e:39:
cf:9a:0f:2a:03:d6:52:39:8d:6c:d1:ad:2d:3a:21:
8b:f1:3f:d9:34:ac:39:ed:37:46:ff:1b:c6:fb:6c:
cb:7d:fd:23:2a:6f:5e:33:09:3a:75:58:5a:f5:f6:
da:6c:d2:fd:94:4e:7e:36:40:bc:2d:80:1a:83:5c:
75:6a:38:cb:03:60:a9:e9:1a:19:00:ec:17:52:0a:
c6:a4:cf:2f:97:23:dd:cd:27:84:d1:52:f3:2b:b4:
e9:67:0d:51:22:7f:ca:82:27:05:16:b4:0f:ed:a9:
7a:28:fb:62:4b:55:be:6d:f5:38:61:ed:18:d0:ca:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:27:04:52:C0:31:E4:22:EB:2F:B8:C1:5D:A6:17:20:8B:26:A9:24
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/hCcEUsAx5CLrL7jBXaYXIIsmqSQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.178.128.0/17
Signature Algorithm: sha256WithRSAEncryption
04:d4:dd:ab:b6:2e:e1:13:9f:4e:c9:ac:9c:a8:3c:5d:08:b8:
bb:c1:b8:11:ad:36:71:90:22:07:52:91:0b:2b:8c:37:ca:39:
c1:35:75:da:56:40:7e:75:61:66:70:b5:e3:9c:09:cc:a1:76:
f7:94:a0:1a:e6:33:31:b0:c6:60:8c:78:e3:ab:47:21:db:01:
bd:23:0e:08:54:98:8d:66:62:f4:a2:ea:2a:35:f9:7a:43:b4:
94:ec:b4:f6:6c:59:8e:1c:0f:77:d0:b3:56:9b:47:86:20:be:
c3:45:e2:54:30:72:2a:f1:44:1f:7b:85:75:55:52:45:fc:5b:
ee:2b:f6:fc:15:45:3f:89:1c:79:18:0c:f2:f5:aa:a7:9e:57:
5b:a1:d2:54:be:ed:ff:1d:d9:d3:95:02:7e:c7:05:32:71:4d:
aa:04:89:ce:f9:6c:3f:59:98:31:e9:73:0b:c6:22:f5:8c:d5:
70:d0:ba:79:5a:85:16:16:dd:e0:3a:3d:78:9c:8d:cb:6a:29:
60:8b:38:95:09:9d:94:07:6d:c3:3f:a7:67:0b:08:42:be:3a:
60:49:c9:4d:c8:f7:fc:f5:0b:eb:f4:1b:39:34:5f:4d:b8:64:
77:c8:39:87:9a:d6:1f:1e:9b:5f:80:50:bb:1c:c3:b4:70:2f:
a1:57:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org