Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/irKJMwAixWS7HqDYF5VvxbrkcTE.roa
File: irKJMwAixWS7HqDYF5VvxbrkcTE.roa (raw, json)
Hash identifier: A2llx9u0vz7OeMuhRtvORGfCfnE66DzmSiKqAUmRcjg=
Subject key identifier: 8A:B2:89:33:00:22:C5:64:BB:1E:A0:D8:17:95:6F:C5:BA:E4:71:31
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 108E
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/irKJMwAixWS7HqDYF5VvxbrkcTE.roa
Signing time: Tue 16 May 2023 08:36:20 +0000
ROA not before: Tue 16 May 2023 08:36:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 219.91.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4238 (0x108e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:20 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8AB289330022C564BB1EA0D817956FC5BAE47131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:10:c5:9b:60:81:60:e6:46:da:09:89:ca:
64:c8:77:76:c3:80:d2:78:96:ae:89:48:39:01:13:
bc:81:a4:07:f2:c4:a2:6c:ad:de:e6:b4:0b:b8:82:
a6:63:18:dc:75:c9:be:a9:b3:3d:f5:41:5c:39:2f:
b3:f6:27:d7:42:41:3c:1e:78:cc:bd:36:a1:56:70:
35:e3:77:e3:ad:03:45:67:26:8d:a4:47:48:22:d6:
5f:2f:5d:b9:84:89:7f:3b:19:f4:0c:50:49:ae:b4:
b1:e5:be:06:54:bb:76:7c:e5:a1:e8:7b:e7:51:eb:
6e:62:23:f3:ff:70:ca:a2:c4:f6:0d:99:03:34:d9:
78:66:89:88:c2:5e:b7:cd:7c:46:ca:d1:e3:04:83:
b6:95:26:34:8e:7c:bd:49:92:cb:0c:a9:8a:8f:8b:
85:d8:99:e0:b2:81:29:b3:07:05:34:31:68:af:7f:
85:31:cb:be:ff:b5:ac:27:09:eb:45:f4:1f:8b:62:
a8:15:4f:b5:77:c9:42:4a:02:84:ef:4c:0c:ac:e3:
7c:53:c5:67:1d:e6:21:14:12:9b:68:83:a0:93:fb:
20:ea:de:5c:bf:c3:60:ab:19:cc:f5:99:b9:22:27:
ea:d4:41:60:74:d7:ef:5c:81:d1:b5:2d:b5:ac:0b:
6d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B2:89:33:00:22:C5:64:BB:1E:A0:D8:17:95:6F:C5:BA:E4:71:31
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/irKJMwAixWS7HqDYF5VvxbrkcTE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.91.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6b:dc:c9:eb:75:9d:db:ef:ba:8a:51:f0:ce:a2:16:26:ac:63:
60:c6:18:4d:b7:c2:3a:a1:bd:9a:b7:46:47:7a:95:de:5e:de:
79:e4:66:fd:89:cd:54:5f:74:83:26:c5:79:09:d7:c5:59:13:
ad:23:26:53:03:99:02:ee:01:41:66:37:34:78:b1:fd:f7:bd:
2d:5f:cd:6c:57:1f:c4:eb:75:97:22:3d:85:fa:e5:c0:f4:12:
6a:36:dd:43:a1:0f:37:e4:9b:f2:9d:09:c3:1b:0a:f1:e8:0a:
4a:7e:a5:11:5b:c6:08:e2:fb:ce:7f:a4:3e:4e:6d:2b:3d:2f:
77:8b:1a:a4:d8:21:b0:d9:84:10:14:1e:00:5e:d0:05:e0:8a:
d5:00:13:a6:1b:92:a6:f9:cc:48:a2:da:58:22:33:d9:49:34:
4a:56:b0:e9:c5:b0:bc:51:8e:ec:be:39:ab:51:db:64:14:61:
c5:e1:07:2d:00:10:26:36:69:2a:fa:d2:d5:2d:b7:f9:8c:5e:
dd:b0:54:ac:11:37:5a:90:97:fc:66:8b:e8:ca:58:38:59:4c:
16:ec:59:5f:72:b6:a6:9a:71:ee:ba:ad:d3:12:dc:a1:bf:53:
60:fc:af:ab:f4:0e:19:81:27:2a:03:64:c4:75:b9:d6:71:6e:
5b:01:7d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org