Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/lU5TTLZ0pLjpcl8elVY89vQzFfw.roa
File: lU5TTLZ0pLjpcl8elVY89vQzFfw.roa (raw, json)
Hash identifier: 1gxDXxv7E0WKqH5Ez/rzkPyQ7RC4S/oO3dq++PTQQAs=
Subject key identifier: 95:4E:53:4C:B6:74:A4:B8:E9:72:5F:1E:95:56:3C:F6:F4:33:15:FC
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 08E9
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/lU5TTLZ0pLjpcl8elVY89vQzFfw.roa
Signing time: Tue 29 Sep 2020 10:01:14 +0000
ROA not before: Tue 29 Sep 2020 10:01:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18419
IP address blocks: 124.218.32.0/19 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281 (0x8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:14 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=954E534CB674A4B8E9725F1E95563CF6F43315FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7e:96:02:8d:55:10:e9:df:39:0a:36:63:e0:
66:d7:b0:1e:f7:57:b3:4a:bf:1b:4f:cf:4f:58:b1:
b7:24:81:3f:17:5d:c9:b0:0f:32:09:08:2e:e3:64:
21:27:5d:2b:93:0a:4c:b8:19:27:85:28:4f:80:b9:
70:bd:7c:54:58:a5:46:ea:64:e6:20:56:27:1e:71:
ae:bc:d3:a2:50:b7:e6:48:14:ee:4e:42:6e:cf:34:
9d:22:31:a5:f2:40:cb:62:11:cc:c3:22:67:31:74:
ae:7f:01:b2:7f:05:fc:94:58:48:4f:e8:96:46:18:
d9:91:98:14:27:eb:4f:3a:95:78:9b:2a:20:66:4c:
bb:9e:60:91:ba:25:88:ce:e2:c7:84:e3:85:4f:11:
a7:7e:40:87:27:d8:c8:31:92:04:10:f7:f4:2e:33:
f0:1c:44:ba:42:32:d6:d3:c2:33:b4:9f:de:9d:1c:
af:f4:04:e5:0d:10:ae:c4:ab:e8:40:f4:85:89:3c:
57:1e:51:5b:61:c4:d8:be:b5:84:0a:2f:e2:a9:dd:
ae:d1:14:73:b8:28:0d:7b:3d:a6:9b:d3:b4:33:1e:
45:97:9b:5e:33:76:91:82:b1:0d:6f:73:4e:3d:88:
02:2e:33:d9:ad:7c:b7:e0:b4:71:c9:c6:25:39:fe:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4E:53:4C:B6:74:A4:B8:E9:72:5F:1E:95:56:3C:F6:F4:33:15:FC
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/lU5TTLZ0pLjpcl8elVY89vQzFfw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.32.0/19
Signature Algorithm: sha256WithRSAEncryption
68:57:41:cb:b3:2a:38:7e:14:31:1c:a7:ad:d0:c0:a3:22:35:
20:bd:a3:e3:52:cc:c6:9c:5f:88:5f:02:d5:99:f2:8b:eb:bd:
be:da:3a:36:bb:ff:77:73:16:d5:d1:b6:22:89:b6:52:38:a4:
53:24:30:c1:90:1a:b3:c6:3f:db:db:87:3b:01:4d:75:fb:1d:
c5:9a:a7:ab:b8:6d:5e:f9:f0:8f:7e:1b:0e:36:9c:cd:02:85:
12:3e:a8:67:66:1b:21:55:50:1f:67:5f:02:ae:20:c1:72:2b:
9c:2d:6f:93:a9:a0:a2:8e:ed:b5:53:f8:26:c4:dc:b8:ac:97:
d8:64:3b:ac:e1:91:75:41:9e:bc:c9:ca:98:b7:c0:5e:54:09:
92:04:0e:30:35:7e:1d:68:74:0f:51:e5:38:de:6b:3c:c8:3d:
18:9d:e4:0e:80:27:0e:2b:ee:0a:18:bb:de:13:43:87:43:1d:
c3:a4:de:41:2a:6e:03:85:05:2a:8c:43:f4:f6:f2:4e:8f:89:
2d:e4:f8:5d:ad:39:f9:cb:f9:11:45:da:3c:bd:75:54:e7:3a:
c3:5d:2e:bb:26:3d:31:cc:2a:2f:98:d7:5b:1f:67:08:f5:f8:
70:07:f4:1b:c4:ff:68:a4:2c:dd:58:cd:c9:cd:e6:4c:1f:39:
99:50:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org