Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/h_anc8HECE4NYWYyzk6ZPi90pQg.roa
File: h_anc8HECE4NYWYyzk6ZPi90pQg.roa (raw, json)
Hash identifier: 3pfyz57160x+RIyoe294YAUASjfQfriJDh/lKU8zu8Y=
Subject key identifier: 87:F6:A7:73:C1:C4:08:4E:0D:61:66:32:CE:4E:99:3E:2F:74:A5:08
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E2E
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/h_anc8HECE4NYWYyzk6ZPi90pQg.roa
Signing time: Wed 29 Sep 2021 02:40:04 +0000
ROA not before: Wed 29 Sep 2021 02:40:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 210.200.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3630 (0xe2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:40:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=87F6A773C1C4084E0D616632CE4E993E2F74A508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:05:ce:e4:52:1f:4e:b3:54:88:11:fd:e9:b8:
6c:b6:5a:16:7a:53:f1:b4:1f:dd:59:51:40:b0:c3:
9c:af:2a:b8:32:8e:fb:00:d7:95:7e:f4:f1:7b:84:
d4:ae:89:d5:0a:77:29:ef:d4:d7:ec:ca:d6:01:ae:
28:6d:64:16:f2:bf:08:18:66:84:e4:09:cd:63:77:
62:72:71:5c:20:f8:23:5e:fb:d5:88:6c:69:a9:ad:
7a:28:81:62:14:ea:8a:10:f0:a2:7d:f4:b6:1c:79:
b7:88:b7:09:15:e7:5d:58:6d:88:15:89:f0:76:bc:
c1:9f:f0:28:9d:ed:89:06:3d:0b:3e:44:37:df:4c:
53:09:03:51:d3:0f:42:16:e3:93:11:5b:64:f5:c2:
61:12:ae:0f:db:03:70:79:6c:df:38:ed:28:85:fc:
59:18:84:44:3c:69:68:a0:97:a6:50:b8:c6:48:79:
8d:74:51:62:80:29:5b:33:55:ab:d9:33:22:5a:c0:
fd:7f:1e:33:d4:13:e0:d4:a3:98:8e:32:a1:f1:9b:
ed:c1:02:4d:7d:4a:16:ae:aa:b6:8d:d9:d1:b5:87:
06:3d:e6:c4:5d:3c:34:05:e8:36:f7:e4:d3:0f:9d:
c7:38:70:96:dd:59:79:80:be:ce:03:57:24:66:6c:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F6:A7:73:C1:C4:08:4E:0D:61:66:32:CE:4E:99:3E:2F:74:A5:08
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/h_anc8HECE4NYWYyzk6ZPi90pQg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.64.0/18
Signature Algorithm: sha256WithRSAEncryption
20:77:6a:4a:3c:63:d7:0f:50:e0:d9:f5:6e:c9:cf:01:73:a0:
52:cb:21:9e:ec:44:cb:68:4b:d1:c7:e6:fe:b7:a5:30:2d:b9:
aa:b6:f2:e9:c2:c1:b3:ff:93:34:26:5e:06:8d:48:5b:98:8c:
49:0b:22:34:dc:99:45:f3:c9:75:68:2a:d5:4e:ab:d7:b8:25:
7c:41:60:64:41:ef:df:ba:16:2b:fa:ad:d5:06:39:74:5d:ea:
93:63:06:28:f7:0e:c2:2c:36:d6:68:88:34:0e:c3:81:81:2f:
3d:4f:fc:f8:04:3f:a7:4f:0c:e2:d4:75:41:c2:87:02:a9:ef:
82:fe:3c:aa:33:7c:16:2b:31:2c:7a:6d:cc:8f:5c:a9:6c:d6:
4f:81:5d:e3:0a:eb:40:e9:73:5f:4c:6d:9d:54:f8:64:ec:b9:
57:10:e0:06:2d:3e:26:cc:85:86:9e:f8:2c:1e:75:15:55:32:
13:50:55:b8:82:3e:0a:12:5b:a0:ae:08:59:a2:18:f4:77:c4:
74:b9:8b:d4:a9:5e:86:8b:45:b4:93:71:6b:2e:9b:cb:0f:7f:
01:fb:0e:7c:3a:f9:2c:f2:b6:65:ea:f4:18:6e:ce:f5:62:95:
e5:36:f3:37:a3:c8:25:3c:9c:75:ff:7b:d6:d1:a0:0a:ff:84:
5a:e4:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org