Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/hl8Hs0aH8GrWSOmlkerNr2zDokI.roa
File: hl8Hs0aH8GrWSOmlkerNr2zDokI.roa (raw, json)
Hash identifier: dkgJ5V5c6wjRKSCW8+gHsHbEwN+UfFL6gHT0mirvXuE=
Subject key identifier: 86:5F:07:B3:46:87:F0:6A:D6:48:E9:A5:91:EA:CD:AF:6C:C3:A2:42
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E3C
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/hl8Hs0aH8GrWSOmlkerNr2zDokI.roa
Signing time: Wed 29 Sep 2021 02:40:08 +0000
ROA not before: Wed 29 Sep 2021 02:40:08 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 2404:0:1000::/40 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3644 (0xe3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:40:08 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=865F07B34687F06AD648E9A591EACDAF6CC3A242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:ea:ce:b2:26:0b:2b:86:4a:b8:39:c8:1b:
39:e2:80:69:a0:35:ba:fc:3c:28:f3:62:26:c9:28:
be:50:36:a3:f4:60:a7:60:de:e5:f7:93:9e:67:45:
a0:8a:56:10:38:59:6d:23:45:6e:52:1f:f3:56:19:
ea:56:73:0d:a5:d7:fa:ae:14:bf:1a:38:4c:46:dd:
a2:a9:58:08:d7:13:d3:cd:77:44:3a:02:b6:c9:b5:
cd:f2:ff:3d:f7:9f:d3:68:2e:72:21:e3:f6:fd:4d:
01:af:92:df:ed:84:20:4b:74:ba:af:b1:dc:a1:12:
c1:f2:79:bc:89:ad:3a:8d:aa:5f:bb:11:e6:10:82:
73:42:7c:fa:ba:19:7a:0c:46:27:e7:ab:0d:b2:b3:
c7:0d:e0:58:37:25:38:73:d0:90:9c:04:13:82:7e:
e0:8f:d7:01:f4:77:ff:ed:ec:bd:2a:23:76:18:de:
4d:9e:d3:21:6a:24:2c:d3:f7:dc:2d:ba:3a:20:bb:
2b:dc:3d:b6:e4:f3:a9:49:9a:bb:fd:39:3e:b9:d1:
35:21:fb:a0:87:d6:c0:f2:0a:28:a3:91:fc:53:95:
07:fa:06:52:68:58:8a:22:fc:73:5c:3e:aa:31:eb:
14:0e:5e:6b:34:23:a9:e3:81:7b:56:f1:1d:46:2c:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5F:07:B3:46:87:F0:6A:D6:48:E9:A5:91:EA:CD:AF:6C:C3:A2:42
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/hl8Hs0aH8GrWSOmlkerNr2zDokI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:1000::/40
Signature Algorithm: sha256WithRSAEncryption
75:96:6b:24:e2:bb:56:30:b6:64:b7:99:51:06:11:96:d8:ad:
57:6c:55:60:c3:e7:59:57:eb:bb:48:02:1f:cf:74:8e:3e:24:
e3:1a:87:d4:01:39:ed:86:12:f6:01:83:d1:22:ad:23:12:6b:
03:5f:88:8d:6b:b5:3b:64:ef:58:e3:a5:17:29:7c:b3:5e:83:
53:0c:f7:3f:7a:e2:90:58:38:16:d6:3e:7a:48:43:d5:4e:52:
f1:e8:78:51:bd:e7:cf:c5:81:eb:99:f4:49:c5:36:65:89:b2:
36:8f:fa:48:e1:e0:14:9c:80:78:c9:5a:da:9a:5d:7c:76:db:
52:2f:b1:b8:b2:14:1b:aa:7c:f5:3a:80:bb:c9:33:4a:65:00:
51:66:2b:42:39:65:c8:41:a6:6a:92:7a:bb:19:31:69:72:b3:
dd:72:91:cc:67:45:13:6c:cf:8f:fe:f6:a2:59:ba:ee:45:54:
21:39:96:21:ef:25:a6:f8:81:bd:9d:48:bf:41:af:db:c3:3d:
a8:11:02:e4:c9:7e:2e:02:68:66:d4:a8:d7:6b:65:a9:cf:8b:
94:04:ba:1b:69:73:8b:e3:7c:1a:73:fb:e4:9e:83:12:e2:28:
ef:81:5e:87:06:a5:b3:0b:5e:c1:c5:1f:9d:87:84:20:70:71:
c6:55:45:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org