Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ih0TEHpueeEDrSxYLYNEM4jqneQ.roa
File: ih0TEHpueeEDrSxYLYNEM4jqneQ.roa (raw, json)
Hash identifier: DsdMW0XRhCyMVJwZn8h9TZD/hWtIStzgV5cwD8ZP1GY=
Subject key identifier: 8A:1D:13:10:7A:6E:79:E1:03:AD:2C:58:2D:83:44:33:88:EA:9D:E4
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0FCF
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ih0TEHpueeEDrSxYLYNEM4jqneQ.roa
Signing time: Mon 06 Feb 2023 07:12:43 +0000
ROA not before: Mon 06 Feb 2023 07:12:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 124.218.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4047 (0xfcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 6 07:12:43 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8A1D13107A6E79E103AD2C582D83443388EA9DE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:34:a6:23:ba:5b:96:b5:47:d6:aa:0b:ff:
cc:54:4f:68:b6:7c:63:35:2e:4d:7a:75:ec:9c:41:
6c:12:f3:fb:0b:1e:95:f3:ed:bf:10:a5:6d:38:5e:
4d:a6:d5:93:d8:fb:e8:7e:7d:48:fe:67:9a:95:d1:
f2:a2:85:2e:4b:d5:50:bb:d0:4c:b7:8d:3d:e8:c3:
21:4a:0e:0c:16:45:a9:81:e0:a9:18:ac:76:96:d4:
16:cd:58:32:91:87:db:63:58:f9:ab:2e:0b:4f:69:
fe:31:eb:51:08:ca:02:77:7e:2b:b8:47:83:20:b1:
88:57:30:fc:c5:c2:79:25:74:00:75:8b:01:b3:63:
d1:4f:83:b3:ea:7d:92:92:a8:1f:54:cb:53:18:72:
6c:38:bd:48:65:1d:e1:fa:4f:da:4e:06:2d:8c:d8:
85:99:77:02:29:7f:a7:82:f6:3e:56:fe:c2:73:e0:
cc:fc:ef:05:c3:8d:63:f9:99:a5:0d:44:3e:2b:c5:
46:a6:29:34:19:03:0a:3b:ea:b4:7d:c1:21:6c:0c:
10:6c:fa:f5:8c:31:8b:75:b9:df:32:8f:06:b5:8a:
22:f8:09:6c:50:21:d1:14:73:8d:b5:55:39:d7:fd:
6c:45:ab:e4:b7:86:99:fa:52:77:a0:c0:6c:5c:2a:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1D:13:10:7A:6E:79:E1:03:AD:2C:58:2D:83:44:33:88:EA:9D:E4
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ih0TEHpueeEDrSxYLYNEM4jqneQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.108.0/22
Signature Algorithm: sha256WithRSAEncryption
23:48:37:5d:da:38:c6:f6:03:a5:4f:13:d1:a4:5f:e7:03:ec:
cc:b0:65:dc:db:50:f2:aa:2a:50:44:17:63:d3:15:a7:c1:1b:
89:56:97:71:4f:1a:55:cb:ba:00:2b:07:07:86:ad:2f:54:39:
64:6a:b3:18:98:22:f7:e0:e6:22:3e:f3:44:d5:55:f1:c6:18:
6c:06:d1:a7:7e:7b:25:5b:04:00:fb:e9:fe:41:ec:ac:6c:7d:
a9:6d:46:dc:49:67:a7:f0:5d:50:79:f7:6c:f4:d2:65:07:c9:
4f:65:b9:97:ca:5f:ef:b7:d7:e2:da:49:5c:f1:d0:3c:52:d4:
da:39:10:aa:ca:6a:27:0e:2a:f3:f9:f2:48:f2:30:8a:a9:4b:
fe:b8:91:c0:9f:a7:08:24:81:43:28:de:c2:09:40:3c:ee:94:
06:2c:2b:a4:fa:2f:c6:77:e2:00:84:f1:6e:bb:51:03:51:fe:
c7:84:0d:a0:45:97:cd:fa:6d:63:45:74:76:f9:4e:9d:6f:aa:
75:e2:c4:af:61:1a:7f:ab:c4:9f:32:61:0c:d4:9e:93:4f:70:
b8:ce:88:fa:03:ec:a4:8a:8e:dd:8a:c8:26:a3:3d:52:cc:86:
7e:ee:81:59:44:eb:cb:c3:48:9e:36:7e:25:52:09:74:0e:e1:
a0:05:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org