Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/jigIdwzobPW-fGCIZdWYwf7nKC8.roa
File: jigIdwzobPW-fGCIZdWYwf7nKC8.roa (raw, json)
Hash identifier: n8wQpWCTWuukNBUsokvraio4xCsQTpFYy/f+p0pVb8w=
Subject key identifier: 8E:28:08:77:0C:E8:6C:F5:BE:7C:60:88:65:D5:98:C1:FE:E7:28:2F
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0948
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/jigIdwzobPW-fGCIZdWYwf7nKC8.roa
Signing time: Tue 29 Sep 2020 10:01:40 +0000
ROA not before: Tue 29 Sep 2020 10:01:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 210.201.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376 (0x948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:40 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8E2808770CE86CF5BE7C608865D598C1FEE7282F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:bd:11:37:88:63:cb:41:8e:9f:24:2d:1b:
61:12:bb:9c:65:1a:e4:80:30:94:f5:b5:d4:0b:0b:
3e:68:ec:99:64:f6:0b:7c:1f:f5:b0:97:49:a4:b9:
8e:7f:16:53:8a:1c:0f:37:d4:fe:9e:a8:2d:77:43:
10:d8:d3:42:c8:34:69:75:e0:55:08:2d:30:fb:16:
2d:ee:7b:2d:9c:68:f0:b4:50:f5:0b:52:82:90:fa:
af:46:fd:65:84:b6:6f:95:f1:60:18:06:34:96:2a:
26:34:86:f0:df:8c:6b:77:9d:58:d1:da:ee:5d:67:
df:61:1e:5d:21:31:62:68:55:00:9c:28:85:5f:3b:
4b:05:cb:3b:92:1c:e8:e9:d5:fd:03:7c:d6:1d:ef:
26:fe:a7:d8:67:40:86:ee:45:07:87:59:c0:7e:c1:
7b:3e:9e:b3:ec:03:e3:01:d8:29:0e:f9:4e:4b:6a:
6d:14:6e:a2:0c:9a:b9:32:5a:3b:0f:16:0c:b2:04:
89:96:46:eb:82:ab:ef:53:20:85:87:47:d2:51:17:
42:b8:79:bb:38:bd:2f:d2:6c:f8:48:05:bf:11:05:
66:66:52:3f:e0:49:85:8f:08:55:30:40:d6:32:eb:
3a:24:6f:14:8b:d2:0c:a8:3c:12:d1:4c:55:18:6f:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:28:08:77:0C:E8:6C:F5:BE:7C:60:88:65:D5:98:C1:FE:E7:28:2F
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/jigIdwzobPW-fGCIZdWYwf7nKC8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4e:5d:bb:eb:a8:41:d6:6f:12:8a:69:4e:8a:5f:12:d4:23:16:
2e:c9:0c:55:bb:77:c1:3b:cc:a2:73:82:f1:7c:1e:c2:5e:8b:
88:19:ec:d8:93:ca:01:46:a5:2b:72:7f:18:4c:28:1c:4e:ae:
3c:9e:96:18:6c:59:50:c4:f0:0d:28:87:d8:b9:a4:1e:e5:0d:
0e:6d:97:fc:26:c5:e8:9d:21:e7:6a:87:cf:4c:44:82:52:57:
d7:ab:5c:d6:22:43:c1:f6:9e:85:d2:00:66:3b:e2:23:71:8b:
3a:50:13:2f:cc:b9:52:91:1d:83:7c:03:56:da:15:e4:7b:cf:
da:b7:5f:97:74:0b:40:c1:07:30:d2:36:df:8c:9a:22:c6:bb:
ec:d2:0d:3b:bf:67:08:8e:2b:47:e4:33:aa:ea:03:e4:08:68:
f5:0c:ef:c5:b1:82:ba:b3:14:c2:df:17:8d:c2:4a:e1:8c:b0:
66:81:01:64:f2:00:c7:a2:18:bc:c3:2d:19:a0:f2:58:fe:b8:
54:8f:90:12:86:72:80:1d:e5:85:e2:51:59:4a:0b:0a:13:07:
00:02:5e:f2:37:b6:8b:a9:df:e4:bf:21:d3:a4:bd:f5:37:a9:
a4:8b:9e:e1:60:82:1f:cf:8b:58:95:53:a3:7f:52:2f:35:7b:
f0:dd:a3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org