Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/kFcRDNPfQdAhSo21qp2T0j15xDI.roa
File: kFcRDNPfQdAhSo21qp2T0j15xDI.roa (raw, json)
Hash identifier: NmIPwTwoOyZzWfU3mi/S1qt4R21kAX3WlB+G5uFh6g0=
Subject key identifier: 90:57:11:0C:D3:DF:41:D0:21:4A:8D:B5:AA:9D:93:D2:3D:79:C4:32
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DD8
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/kFcRDNPfQdAhSo21qp2T0j15xDI.roa
Signing time: Wed 29 Sep 2021 02:39:37 +0000
ROA not before: Wed 29 Sep 2021 02:39:37 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9311
IP address blocks: 210.200.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3544 (0xdd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:37 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9057110CD3DF41D0214A8DB5AA9D93D23D79C432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:86:f2:3a:74:81:5d:ab:15:20:12:84:8a:
d8:55:8c:d3:29:00:7b:3d:4c:fe:14:90:88:c4:3b:
8e:e3:0d:5f:bf:77:36:09:e7:6c:6d:36:82:fc:01:
bc:c0:87:f8:19:87:ad:8b:63:16:cb:f4:af:b1:b6:
92:4a:e9:63:d6:e1:ee:84:8d:56:38:38:df:ee:69:
f2:79:3f:58:2b:86:b3:0e:06:d2:0d:5d:73:8e:6e:
fa:a2:25:79:dd:b0:53:eb:10:bf:e1:09:2a:90:e0:
ca:09:ea:b5:1b:0d:fd:99:a5:bb:e1:65:b4:08:be:
bc:13:5b:f0:b4:9d:fd:73:97:f3:98:42:84:e9:7d:
bf:ac:0f:6e:ed:1d:25:8e:1f:39:0b:e9:3b:e7:79:
43:25:f9:b5:7d:05:ff:41:fb:36:3d:36:8d:4b:08:
87:2e:2e:61:28:fa:0b:f9:ac:ba:a9:d7:db:05:e6:
41:55:31:cf:c5:6b:e9:cc:89:32:ae:16:19:67:5a:
7b:b0:57:3b:41:12:6d:30:36:19:1e:f5:d4:6a:16:
ad:82:ae:ee:b0:27:6c:f0:54:54:11:ed:aa:b1:0b:
60:f6:41:bd:06:80:e2:87:45:46:97:2c:75:ef:8b:
1f:b1:c1:e1:52:7d:7d:f1:4a:0f:17:85:05:58:a2:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:57:11:0C:D3:DF:41:D0:21:4A:8D:B5:AA:9D:93:D2:3D:79:C4:32
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/kFcRDNPfQdAhSo21qp2T0j15xDI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
7b:4b:d7:79:e0:bb:fe:fb:42:32:fa:76:b5:df:fa:52:e6:45:
9a:3b:68:0b:80:29:bc:e4:c6:3a:1a:9f:75:da:74:1c:ea:77:
e0:a8:87:ac:49:0b:15:f6:59:08:db:77:16:0a:20:0e:bb:8d:
90:15:fa:71:94:b0:47:2a:2c:89:da:44:15:42:4c:e8:17:85:
ba:09:d3:56:fa:32:35:5f:62:53:9f:4d:09:f2:1d:fe:11:bc:
32:a9:11:8a:03:ed:5f:75:9b:0b:45:8f:b0:25:20:e6:35:b7:
19:0d:63:69:58:5a:45:eb:d4:b3:f2:2c:e8:4d:29:57:04:2f:
84:c2:16:3e:cd:6a:df:56:99:80:13:19:73:f1:a4:63:a5:b3:
76:5c:b9:63:a8:f6:0d:c2:f6:d9:13:0b:96:0d:b2:0a:c4:36:
3a:7c:cd:b6:20:ed:9c:b8:9b:03:c0:de:1f:f0:c8:d6:c0:f7:
71:d4:85:84:65:58:05:3c:d9:e8:e0:42:76:1b:3e:2c:0b:ff:
58:b4:fc:6a:5d:e6:10:c0:8b:08:ae:2f:1c:04:b2:17:0c:1f:
b6:ef:cf:79:6d:f2:02:39:89:0f:a8:59:5f:55:e7:c1:ab:45:
0b:83:40:d8:ff:a7:7d:0d:c5:ff:5d:b8:11:0f:e8:28:8d:5c:
12:4c:36:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org