Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/kprEe7jPGnQYMwMZUuTCPBuTvtk.roa
File: kprEe7jPGnQYMwMZUuTCPBuTvtk.roa (raw, json)
Hash identifier: b9k0M3oaRL0jPcxtce/+OlHy+/9poyLEA2FcLpVWVxs=
Subject key identifier: 92:9A:C4:7B:B8:CF:1A:74:18:33:03:19:52:E4:C2:3C:1B:93:BE:D9
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E02
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/kprEe7jPGnQYMwMZUuTCPBuTvtk.roa
Signing time: Wed 29 Sep 2021 02:39:51 +0000
ROA not before: Wed 29 Sep 2021 02:39:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 218.187.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3586 (0xe02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=929AC47BB8CF1A741833031952E4C23C1B93BED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:7d:7a:f2:81:6d:97:86:96:ba:6c:f2:e9:
7e:c7:5a:cc:45:cf:5d:dc:da:5b:57:85:82:af:63:
be:fe:4b:37:18:77:cd:42:43:17:81:8b:2b:89:f1:
7a:80:e9:b6:ca:e6:a4:d0:c0:1e:cf:64:40:ea:a8:
c7:3d:56:a0:be:7f:3e:d2:02:59:fd:05:f5:55:4c:
4a:38:d1:9c:cf:80:51:db:51:eb:5a:a5:93:0e:3f:
92:50:ca:e9:07:65:56:48:32:f9:be:d8:43:76:b8:
2d:93:61:a0:0e:ae:e8:ad:e8:21:a6:3e:f4:de:81:
1d:c2:d1:0d:cd:98:7a:f3:73:9d:d8:39:fc:33:6e:
9f:89:82:2a:8d:f1:40:0c:7c:c6:5c:70:a1:37:8b:
8e:07:a2:9a:a9:ba:4d:1d:c2:36:5b:48:70:7f:fa:
da:63:33:eb:c2:73:df:92:25:7d:b7:28:d7:44:84:
9d:4d:1b:f5:b9:ea:fd:af:8f:27:e4:f4:9f:5e:14:
ee:ff:f6:31:65:72:aa:89:16:5b:c1:78:c8:a6:91:
23:0e:a2:8b:55:f1:24:a0:00:9b:da:65:e8:b8:6e:
90:1e:b1:45:6a:27:bd:1d:34:e9:9a:58:95:67:3a:
4d:06:c7:c3:36:1f:71:48:d8:21:e8:03:6c:ec:ca:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9A:C4:7B:B8:CF:1A:74:18:33:03:19:52:E4:C2:3C:1B:93:BE:D9
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/kprEe7jPGnQYMwMZUuTCPBuTvtk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.187.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:13:d4:2e:bf:4d:9a:9d:a9:d2:7d:5f:87:25:95:30:74:c9:
52:97:04:9f:78:a6:9c:4c:00:27:e3:0a:73:95:49:b8:af:6a:
a1:7b:c7:45:4b:1a:fd:67:c2:0e:31:5f:79:f5:72:9b:75:b6:
4e:6b:2f:36:67:b4:1c:2a:b2:0e:25:b5:46:38:71:63:d0:e8:
c3:bb:a3:39:1f:4a:79:60:2a:36:7a:95:79:fe:1a:b7:32:5c:
5c:6d:47:23:1a:7b:53:59:10:91:0b:3a:ac:93:b9:1c:00:90:
9f:70:be:9a:36:b3:d3:7d:dd:b2:df:a8:66:7c:03:b2:ca:9d:
bc:1c:1a:e4:6f:ab:95:ed:2e:88:f7:bf:bb:63:0d:7e:07:3f:
20:26:0b:be:93:e9:28:a1:93:17:61:c0:d3:89:b8:ac:35:39:
c8:68:ed:ca:47:fb:12:a7:7b:fd:5d:62:7a:6a:fa:79:58:8b:
e7:62:81:01:67:bd:0a:ad:2d:15:70:3f:79:39:b8:34:d9:c5:
78:cf:da:9d:34:a6:84:32:1d:6a:57:d2:38:18:c3:e4:5d:ff:
1d:d2:24:d5:b0:40:38:fd:c9:45:c3:5c:dd:62:54:65:3f:2a:
da:ed:65:11:b2:41:95:00:98:66:b1:af:9c:bd:c5:be:fa:45:
c7:c9:34:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org