Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/j3LbtcULhUwtJJ3Y4XGq3ujGpuo.roa
File: j3LbtcULhUwtJJ3Y4XGq3ujGpuo.roa (raw, json)
Hash identifier: bCyFSRaJ/XHQlP9jGB5/Th19YQbN1gbUTsusuSTzrWE=
Subject key identifier: 8F:72:DB:B5:C5:0B:85:4C:2D:24:9D:D8:E1:71:AA:DE:E8:C6:A6:EA
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1038
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/j3LbtcULhUwtJJ3Y4XGq3ujGpuo.roa
Signing time: Tue 16 May 2023 08:35:54 +0000
ROA not before: Tue 16 May 2023 08:35:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 218.35.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4152 (0x1038)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:35:54 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8F72DBB5C50B854C2D249DD8E171AADEE8C6A6EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:13:5c:a5:34:d6:dc:f6:90:64:ae:6f:ec:7c:
1d:fe:a1:81:03:8c:03:ca:cf:15:67:20:73:1b:a5:
77:6e:b6:03:a9:f7:b7:b3:57:5c:a9:01:33:3f:ce:
d9:1c:61:4c:37:3e:3d:0e:1a:00:c8:58:41:d9:49:
d3:33:03:f3:ab:91:38:76:d4:00:b6:4e:66:ba:30:
82:2e:81:8e:f3:15:c7:32:2e:d5:9a:31:a7:fb:84:
49:8a:30:74:23:42:ee:71:ad:f1:38:27:84:ac:26:
98:1a:0b:81:24:b1:ca:10:e5:23:f3:8e:67:87:6c:
00:7b:d7:27:ce:f8:75:ad:f7:11:b9:38:a2:02:a3:
1a:d8:2b:f3:46:1a:5d:4f:27:7e:5a:99:1c:2b:25:
0a:b1:c9:04:1e:98:5f:27:c4:61:f7:2d:c9:92:b6:
50:61:fc:dc:22:bf:15:1c:09:bc:04:23:66:a6:0b:
1a:71:09:ea:0d:0b:5a:30:c2:6b:83:d2:cd:8e:8e:
c3:1e:e6:fe:0c:da:f0:ac:ef:36:7c:a2:9a:43:c8:
8d:df:69:30:f5:6a:56:be:1e:4e:23:08:97:6e:72:
49:37:2a:f7:64:09:ab:f7:76:a4:e9:c6:89:a6:0b:
9b:eb:78:47:00:5f:ff:1d:a9:8a:30:a9:0b:2d:5b:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:72:DB:B5:C5:0B:85:4C:2D:24:9D:D8:E1:71:AA:DE:E8:C6:A6:EA
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/j3LbtcULhUwtJJ3Y4XGq3ujGpuo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.128.0/18
Signature Algorithm: sha256WithRSAEncryption
28:97:2c:7c:2f:65:b9:9e:af:d0:15:c5:ef:84:30:4c:4c:bb:
74:bf:08:0f:79:bd:9e:b0:86:5f:fc:e8:89:2e:f7:9b:bc:9c:
c4:f8:ca:83:fa:2e:76:c5:71:15:aa:50:93:cd:ed:86:41:4d:
e2:a3:fc:74:62:5d:b6:0c:60:29:ac:29:3b:1e:c3:a7:5a:bf:
ae:dd:05:8e:47:9d:23:d2:9f:05:e1:ef:a8:ae:80:ef:ed:4e:
2f:fc:b7:73:4c:4a:36:76:02:d5:36:b8:1e:80:77:26:ef:b4:
8b:ad:6e:ce:80:78:45:6f:3e:6a:84:04:40:98:34:2d:21:ae:
52:43:ac:37:ed:43:13:75:0e:0d:6e:37:a3:34:82:cc:33:bf:
9d:08:b2:88:21:b3:89:3d:be:c8:6c:10:eb:ee:ae:a8:22:66:
34:35:98:8f:fb:24:9d:fd:40:ff:f5:46:6f:8d:10:ef:6f:0f:
5d:4b:e3:55:5c:2b:5d:65:c5:c6:1e:c1:e9:1c:e6:ef:28:54:
f5:c6:59:b5:eb:5c:2c:0c:25:e6:45:c6:04:83:01:41:f1:40:
a1:57:6c:dc:52:37:aa:82:1e:0b:c6:14:a0:6d:1b:f6:4f:a8:
8e:32:93:93:fc:e3:22:3b:1d:10:71:bf:f0:68:00:07:14:ce:
d1:1e:c8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:22 2025 by rpki-client