Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/iN9wIn-PhNRXz9dD2uxpjpipm5w.roa
File: iN9wIn-PhNRXz9dD2uxpjpipm5w.roa (raw, json)
Hash identifier: eG5Tks3J+RMSw0Aaqe8IEJn95IYOjbJYrhAMARHxjtI=
Subject key identifier: 88:DF:70:22:7F:8F:84:D4:57:CF:D7:43:DA:EC:69:8E:98:A9:9B:9C
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0CB7
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/iN9wIn-PhNRXz9dD2uxpjpipm5w.roa
Signing time: Sun 07 Feb 2021 12:47:27 +0000
ROA not before: Sun 07 Feb 2021 12:47:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18419
IP address blocks: 124.218.32.0/19 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3255 (0xcb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 12:47:27 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=88DF70227F8F84D457CFD743DAEC698E98A99B9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:88:bd:60:16:c6:86:65:78:37:92:9d:2c:1b:
f4:72:e1:f7:34:be:28:91:4d:77:b8:25:20:b7:85:
2c:f3:06:60:6b:56:ce:f5:d5:30:43:4d:65:aa:18:
d3:2c:5f:a2:4d:e6:ff:66:dc:4b:71:ed:af:13:65:
73:c8:8d:72:ba:4e:79:11:39:06:d2:af:d0:96:a0:
ec:6f:c4:c3:c4:bb:4c:48:7e:e3:ed:1f:cc:0f:40:
1f:a7:14:49:a5:2d:b0:2b:7c:60:be:53:6d:c4:39:
20:36:81:0a:6d:4a:ac:41:7b:54:14:fa:ab:4e:11:
91:f2:dd:c1:f3:9f:7c:f6:08:7c:28:6a:f4:91:2d:
58:02:e8:bf:35:08:6f:44:2b:ac:da:cc:ee:b4:36:
c2:eb:47:b2:6c:d7:a1:00:e6:10:d4:10:f7:68:17:
c2:44:8e:75:e7:85:f9:f1:32:cc:11:2b:a5:20:2e:
5c:37:9d:24:ad:be:20:98:0b:f1:5a:08:10:d6:dd:
f2:74:a5:bd:04:1b:23:64:2a:f5:c8:d8:e2:82:0e:
c8:53:be:16:d1:37:3d:26:53:e5:78:9a:5b:09:0e:
6d:64:c1:5c:e6:8c:1f:e4:2c:5d:b9:96:82:95:96:
f0:9f:1a:96:93:32:78:b0:11:e3:17:58:98:a7:bd:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DF:70:22:7F:8F:84:D4:57:CF:D7:43:DA:EC:69:8E:98:A9:9B:9C
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/iN9wIn-PhNRXz9dD2uxpjpipm5w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.32.0/19
Signature Algorithm: sha256WithRSAEncryption
37:b0:73:0a:c4:21:36:ba:43:9a:9e:fe:c2:06:77:09:1e:3a:
26:33:42:d7:5a:92:1e:78:3b:f8:d7:10:f5:8c:b5:7b:eb:05:
a6:23:58:2b:25:fc:be:e0:84:cf:c1:ca:11:08:72:0b:cc:34:
c0:d0:9c:ed:61:3b:e2:95:22:9f:be:9d:a1:b9:fd:26:a8:18:
41:b6:e8:05:8d:9a:79:e3:07:99:f3:b8:d1:36:e7:c5:e3:64:
90:9a:10:81:1d:5c:f1:25:3e:ce:a5:cf:d4:7a:8d:6f:31:03:
59:1b:88:97:8d:89:ef:51:a4:d2:01:37:92:b8:39:54:75:bf:
2a:86:06:c1:9f:5f:ce:67:b5:16:84:ab:a3:99:8b:a5:8b:5e:
9f:55:75:e8:9a:16:d9:ab:1a:a8:8d:7e:84:67:70:19:51:0c:
34:a5:12:b7:0f:dd:1d:b4:0b:85:9e:21:06:5f:51:f5:03:1c:
02:47:c8:8d:60:e8:1c:cc:7d:8a:a9:6b:0a:40:69:d5:9b:3f:
e1:c4:6d:1a:2a:59:84:df:ae:13:ad:8e:3a:b8:b7:ac:2c:5e:
fc:49:d3:6d:a0:a7:b4:ab:64:7a:30:38:53:cc:23:42:79:be:
ef:0d:28:af:65:ae:ed:4a:ec:3c:95:8e:19:3f:ef:13:97:da:
4d:cb:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org