Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/hqavFEpXGwiqyFM4Oqh34spGEIY.roa
File: hqavFEpXGwiqyFM4Oqh34spGEIY.roa (raw, json)
Hash identifier: 7tefn/gTkEAQAH0A2fHv/Fn74rMaHCTXE3nZBOQBcoQ=
Subject key identifier: 86:A6:AF:14:4A:57:1B:08:AA:C8:53:38:3A:A8:77:E2:CA:46:10:86
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E5C
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/hqavFEpXGwiqyFM4Oqh34spGEIY.roa
Signing time: Wed 29 Sep 2021 02:40:17 +0000
ROA not before: Wed 29 Sep 2021 02:40:17 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 210.203.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3676 (0xe5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:40:17 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=86A6AF144A571B08AAC853383AA877E2CA461086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:26:43:31:bf:f8:75:1b:0d:5e:90:c0:4b:4f:
e4:24:29:e2:68:b9:93:bf:fd:4d:65:84:00:f2:2d:
b5:d5:7b:59:1b:fe:1b:8d:da:f1:5a:3c:03:5a:12:
9b:2c:81:60:b2:d1:68:55:61:c6:e1:c6:76:86:6b:
63:9a:cf:6b:42:ce:49:d1:f4:d5:2e:5f:23:c5:32:
28:25:b9:ac:1d:ad:a1:e6:8e:dc:0a:71:77:5d:c5:
47:0f:45:1a:b3:61:77:47:7e:dc:ad:ae:ee:d7:84:
05:5c:7c:aa:23:7a:c3:20:e6:8a:20:95:fa:c5:19:
48:e7:18:e8:85:75:32:34:14:9b:1a:15:3c:b3:c0:
ba:82:56:01:92:a4:60:f8:9b:0d:ee:cd:b2:a2:54:
cc:e0:f6:89:9e:28:cc:00:88:58:55:44:65:4f:c6:
2e:8b:2e:1f:a6:a3:7c:66:83:39:7c:c3:fe:4f:48:
fb:e8:a0:28:da:69:c8:bb:df:ad:b7:a6:26:4f:db:
9f:c9:69:9d:f9:ad:27:17:6e:0c:24:25:78:a2:38:
ec:e6:7a:a0:52:58:ff:e4:be:f2:a3:f3:e6:8b:e2:
01:da:e8:5e:f8:ca:8d:bf:04:f6:fd:38:31:49:f7:
77:0f:5f:11:2c:dd:cb:a8:a2:ae:80:28:3f:d9:4b:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A6:AF:14:4A:57:1B:08:AA:C8:53:38:3A:A8:77:E2:CA:46:10:86
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/hqavFEpXGwiqyFM4Oqh34spGEIY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.20.0/22
Signature Algorithm: sha256WithRSAEncryption
51:1d:a5:e8:d7:c0:3d:08:22:93:4f:dd:0e:2b:c1:59:64:a4:
57:4a:9b:92:dc:bd:85:34:1a:7c:ca:67:2f:17:5c:5d:cf:b3:
2a:c4:29:33:04:79:e6:c1:69:6f:6f:59:a0:c3:eb:d7:ac:8a:
a5:32:bc:32:7a:b2:9a:c1:34:1b:19:8b:d4:37:24:a7:cf:f5:
9f:7a:2b:92:38:1f:c6:fe:fb:c6:d1:2b:70:38:bf:13:b6:03:
a4:db:55:07:3c:d3:67:5c:28:14:b0:d9:14:6b:88:7a:75:00:
13:98:35:c8:4b:e5:ab:dd:b3:80:32:2d:92:ce:23:11:c6:d8:
ba:60:6c:1d:37:cf:15:0f:55:76:00:e9:c3:2c:12:51:3e:3a:
ba:40:51:55:02:ef:aa:9e:bb:80:9a:17:65:d2:a0:ad:ca:cf:
ab:af:63:e1:03:aa:92:1b:57:01:bf:fe:73:dd:e5:87:dd:0b:
8c:3d:4e:c2:9e:bc:00:fa:68:5a:e5:9c:04:9a:dd:f4:9c:0a:
a9:8a:8b:2b:76:4e:12:54:88:d3:15:bb:e1:bb:7d:35:81:5f:
8b:83:d3:57:85:c8:82:1f:c7:d5:6b:54:a8:c7:81:df:dd:ec:
19:27:87:b1:65:ad:e4:46:ba:dc:dd:44:a3:6c:a2:2d:8e:a1:
bf:24:b8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org