Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/iwBBsFj0cKQlbvgrdhib3KmPW-0.roa
File: iwBBsFj0cKQlbvgrdhib3KmPW-0.roa (raw, json)
Hash identifier: W3pCEsAMjoo59g+s6ENKfT/rMg7Jn5Yd+KkgfA7utW4=
Subject key identifier: 8B:00:41:B0:58:F4:70:A4:25:6E:F8:2B:76:18:9B:DC:A9:8F:5B:ED
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C07
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/iwBBsFj0cKQlbvgrdhib3KmPW-0.roa
Signing time: Sun 07 Feb 2021 11:34:38 +0000
ROA not before: Sun 07 Feb 2021 11:34:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 210.201.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3079 (0xc07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:34:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8B0041B058F470A4256EF82B76189BDCA98F5BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:3b:47:8b:b6:a8:99:07:f7:ca:32:ad:85:
df:6c:45:87:ca:b5:57:8f:34:53:88:e9:14:eb:6a:
53:58:dc:0d:80:f3:d6:af:8f:38:ac:91:6f:ec:30:
86:69:92:bf:35:bd:e9:c9:ed:6b:39:77:b4:86:8b:
75:45:32:01:c6:60:64:cb:65:c6:43:f3:32:e4:be:
2e:db:1f:9a:ae:de:62:8b:c9:a8:df:97:8c:ab:ae:
21:a8:ec:74:26:76:4f:e1:e6:9f:31:5b:10:ac:2e:
18:b3:cf:16:1d:85:76:58:5f:58:5a:ac:1f:5e:4e:
91:12:8e:d6:ff:80:6c:85:8e:0d:47:1e:9c:b6:3d:
74:59:47:a6:7f:6b:9d:43:52:d1:2c:e3:7b:42:06:
ca:e7:56:41:2c:9d:f6:a2:7b:86:40:db:fc:c7:4c:
0b:30:d2:34:8c:1d:a1:55:91:11:a1:bd:56:fe:c2:
b2:c5:62:40:0b:1e:48:39:f8:12:75:f3:21:22:73:
55:0a:be:c9:5d:91:38:5e:46:0b:36:1f:58:77:de:
f2:77:17:c9:aa:c4:89:ab:ed:dc:43:08:91:27:2a:
83:4b:06:6f:be:ed:ef:36:67:4d:d7:66:ed:5e:b1:
d5:09:25:f6:41:a2:5c:85:1c:1c:b1:82:61:a5:77:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:00:41:B0:58:F4:70:A4:25:6E:F8:2B:76:18:9B:DC:A9:8F:5B:ED
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/iwBBsFj0cKQlbvgrdhib3KmPW-0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:cc:38:4c:0b:f2:ca:9c:83:e4:73:da:04:1a:40:ad:95:c0:
4a:02:06:48:dd:ee:fe:eb:70:67:a0:86:63:d3:5e:1f:6c:e4:
5a:4c:a2:86:96:e4:8b:d9:13:01:26:be:f3:66:eb:91:49:8d:
df:35:fa:16:04:98:40:e2:6d:8e:02:de:85:f1:4b:c9:be:35:
6f:64:d4:25:00:a3:95:34:1b:a7:5f:8f:08:7c:4d:1f:98:c7:
c9:a3:3c:5c:5c:4e:ae:2b:88:ba:18:76:00:2e:a0:7c:0f:cc:
b1:c2:0f:0c:67:34:70:89:54:ee:18:91:4d:62:34:d9:20:4e:
89:39:03:50:65:41:a2:36:ab:b2:b9:33:13:52:70:d4:d8:b8:
d6:e0:a1:b6:16:e5:f1:99:a4:a8:33:50:e0:74:b2:e0:ac:f5:
26:86:be:bc:d9:1a:64:d4:9d:b4:bf:1e:b1:a1:8d:fd:10:59:
67:d9:d8:45:eb:7d:50:48:e3:9d:ed:af:c7:79:73:c2:49:c7:
f9:71:b7:27:d6:9e:63:d8:9e:27:45:8f:7e:68:8f:e1:91:32:
e8:2d:6c:4e:65:62:3a:3d:43:20:53:bd:5c:6e:78:17:03:1e:
a2:59:d0:e9:66:92:3f:13:b3:58:24:fc:0b:e9:2d:12:71:0d:
4a:8a:01:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org