Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/hwUI6tTYkDIzB9TZcYBP-uWjKCI.roa
File: hwUI6tTYkDIzB9TZcYBP-uWjKCI.roa (raw, json)
Hash identifier: FUtgX1mN7GU/5/W6yaJY7CKquvuujrX0P7UBGaiS47o=
Subject key identifier: 87:05:08:EA:D4:D8:90:32:33:07:D4:D9:71:80:4F:FA:E5:A3:28:22
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12B1
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/hwUI6tTYkDIzB9TZcYBP-uWjKCI.roa
Signing time: Fri 01 Sep 2023 08:04:51 +0000
ROA not before: Fri 01 Sep 2023 08:04:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 60.244.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4785 (0x12b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=870508EAD4D890323307D4D971804FFAE5A32822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:fc:cc:5a:0d:5f:f5:e6:81:6e:cf:21:bc:
ef:63:94:76:1e:57:d9:21:12:5d:c9:b2:8b:28:4c:
fa:b1:a1:cc:1b:07:6c:2d:99:df:0c:fa:41:4f:a8:
d0:e2:c3:d3:3a:79:24:5e:03:9c:ed:d8:d1:3f:42:
b5:ac:09:e7:60:cb:c6:cd:8b:9f:ee:fc:52:87:18:
06:a5:54:01:4e:37:9b:db:3d:87:ca:73:29:8f:c8:
b4:82:22:bd:17:7a:8a:55:5f:82:bc:11:8c:71:c3:
70:ac:15:5f:f9:b5:08:f4:0e:73:dd:14:a7:2c:cf:
87:5e:0a:55:f3:e5:64:7e:02:20:dd:6a:9c:68:5b:
96:34:36:ca:d4:5f:87:1a:81:dd:bc:0e:7f:e4:7b:
32:92:e8:b3:26:16:5d:ce:c8:71:b6:df:78:e7:73:
fe:7e:a3:26:bc:af:df:2b:dc:d9:b1:af:dd:94:29:
2d:6c:13:1b:24:5a:3f:78:10:ab:7f:90:f3:76:e0:
03:26:04:08:47:f7:cc:c1:36:a6:de:3a:74:f9:60:
be:3c:c4:95:e7:24:52:a4:af:f6:45:f1:dd:26:06:
f0:bc:e3:7d:b2:83:9a:10:8e:16:e8:73:f2:6e:c5:
7b:63:2a:4a:91:92:2f:20:c2:b3:2f:b3:f5:bb:92:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:05:08:EA:D4:D8:90:32:33:07:D4:D9:71:80:4F:FA:E5:A3:28:22
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/hwUI6tTYkDIzB9TZcYBP-uWjKCI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:bf:a3:e3:e6:b7:4e:df:dd:a2:d1:d1:ea:9a:e4:c9:2d:24:
60:f9:08:47:c7:3d:04:b9:fe:9c:e4:84:28:09:e7:7f:d8:a5:
1e:71:8e:2c:2b:aa:6c:a2:6e:40:a7:4f:43:ff:f2:50:6c:3b:
60:db:64:6f:54:77:0e:99:fe:18:ff:2b:85:df:57:74:06:ea:
4f:fb:30:3e:0c:bb:92:43:9c:cf:f6:f7:80:92:1e:a9:a4:12:
8e:76:35:3d:ad:19:de:7b:46:df:0e:4d:b5:f8:a9:42:c1:ba:
97:d0:f9:44:e2:74:ff:14:fe:4d:43:af:14:cf:5f:e2:93:c9:
6d:20:c1:50:46:81:d8:44:8a:cb:53:57:15:20:16:1e:74:24:
66:08:04:e4:2a:48:3c:3c:cb:bf:46:50:28:34:f8:d7:88:94:
df:a2:90:9d:cf:ae:29:95:db:46:60:f4:07:81:71:39:05:7f:
aa:fb:ba:b0:95:ba:fd:1d:a5:b7:ff:66:4b:58:10:60:78:29:
44:5e:60:3f:89:39:10:c3:3c:26:3c:ab:84:69:2e:5a:13:77:
c6:b5:e3:f3:4f:a8:9f:c3:cb:e4:e1:97:fd:42:0c:b6:7f:53:
a2:e8:14:90:df:6c:b9:67:f1:d6:aa:11:c9:29:be:12:f4:41:
9d:b3:48:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org