Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/lRW_qeZVLTflAXhNrZxexPPzzWA.roa
File: lRW_qeZVLTflAXhNrZxexPPzzWA.roa (raw, json)
Hash identifier: FqeBxpesoaP0ljh1sThgBJDB6meRJLrbNaW/a8UzIKo=
Subject key identifier: 95:15:BF:A9:E6:55:2D:37:E5:01:78:4D:AD:9C:5E:C4:F3:F3:CD:60
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0901
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/lRW_qeZVLTflAXhNrZxexPPzzWA.roa
Signing time: Tue 29 Sep 2020 10:01:21 +0000
ROA not before: Tue 29 Sep 2020 10:01:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.63.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2305 (0x901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:21 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9515BFA9E6552D37E501784DAD9C5EC4F3F3CD60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:d5:a2:7a:ba:29:b9:33:1c:b2:65:f1:ad:
af:7a:98:68:70:64:22:ec:6d:ab:a6:2c:4c:54:79:
76:47:59:77:a4:89:49:e7:d4:59:31:e4:68:6c:e1:
92:39:0b:42:cd:f4:fa:16:eb:49:32:41:ee:dd:eb:
8e:be:73:c0:83:46:da:c9:b6:ac:62:4c:b1:71:d0:
33:62:13:63:cb:18:38:f9:25:70:0b:09:5a:16:49:
12:4f:c7:d7:ca:13:6b:43:ab:98:c7:d0:10:ca:ab:
7d:59:dd:9e:48:6a:8e:cc:cc:a0:00:ec:84:ac:39:
2f:7b:69:ae:e0:ac:0a:94:69:b1:ec:22:54:09:0d:
f7:83:10:9c:18:58:de:11:9a:d5:d7:d4:62:7b:b0:
e5:cc:ba:7e:fc:57:d5:01:22:52:14:71:87:9f:53:
1e:3d:d6:ba:e8:20:10:67:df:55:36:94:95:bb:53:
68:02:44:93:10:67:88:1e:87:d2:36:01:eb:06:b2:
43:53:38:69:91:57:16:ac:30:e1:10:d8:1c:5e:03:
8c:95:35:ef:cc:1a:d9:15:e8:db:30:66:33:3c:dd:
b2:49:3d:bb:f2:6f:33:37:77:99:93:e8:a1:b4:db:
17:b5:89:f9:41:a2:e0:aa:0e:05:c4:8d:90:06:24:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:15:BF:A9:E6:55:2D:37:E5:01:78:4D:AD:9C:5E:C4:F3:F3:CD:60
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/lRW_qeZVLTflAXhNrZxexPPzzWA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.232.0/22
Signature Algorithm: sha256WithRSAEncryption
80:81:80:32:80:22:2b:ff:95:4c:5a:db:5e:9f:1f:f5:75:03:
78:e6:46:f8:91:8d:23:9a:6d:7b:80:e2:2a:e8:96:71:03:c4:
d7:19:b8:9e:04:99:f2:c0:a1:22:60:18:e5:44:7d:b0:b7:d4:
08:01:56:8c:09:66:1b:a7:89:9e:44:7b:81:51:4f:f8:f4:fe:
87:55:49:3e:9b:e7:ba:85:d1:3d:df:f2:ae:7c:ec:bf:23:b3:
4c:a4:1c:c3:a4:3e:ae:4f:43:e7:6d:cc:94:1c:81:ff:89:9b:
09:4e:17:a9:fb:bd:09:0c:96:3b:5e:ce:13:fa:cb:69:02:75:
f6:eb:84:c1:98:35:b9:76:cb:87:1c:26:bb:4e:f7:3b:93:99:
81:a7:37:94:74:f0:8c:eb:98:43:7c:0a:8d:68:bf:4a:67:89:
3a:de:db:13:54:e8:39:5a:d4:a8:17:04:d8:14:b9:13:e1:5a:
fb:aa:6d:2a:19:23:0c:e1:de:b4:36:af:98:72:f1:55:be:c9:
32:57:71:2a:a5:ff:af:f0:22:4f:06:0f:a3:82:ef:0d:3f:6d:
35:3a:69:74:d7:12:00:12:be:59:4c:35:d4:ce:ff:f8:2a:b8:
8d:52:77:08:0f:44:7c:a5:43:16:08:a9:0a:40:4c:f1:87:32:
94:53:f5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org