Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/lX3YiTPs9CxGIMbi2184t375VH0.roa
File: lX3YiTPs9CxGIMbi2184t375VH0.roa (raw, json)
Hash identifier: IXrJcTHdNcNDBP+RrFKPBcCX/NKk89sBvjNe2iNVxpA=
Subject key identifier: 95:7D:D8:89:33:EC:F4:2C:46:20:C6:E2:DB:5F:38:B7:7E:F9:54:7D
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 08FE
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/lX3YiTPs9CxGIMbi2184t375VH0.roa
Signing time: Tue 29 Sep 2020 10:01:20 +0000
ROA not before: Tue 29 Sep 2020 10:01:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.63.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2302 (0x8fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:20 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=957DD88933ECF42C4620C6E2DB5F38B77EF9547D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5a:22:9c:c1:53:be:ce:90:3b:50:21:a1:7a:
09:e4:8e:9b:90:7f:8b:5e:73:1a:c8:29:df:5e:cc:
13:6b:b4:d8:33:58:bb:3a:90:49:78:7f:ac:86:69:
bb:e8:ad:13:78:e0:f4:e6:6e:35:2c:c0:4e:2c:5b:
c7:29:cd:11:fc:bd:79:d3:ed:3b:07:ae:59:7c:d1:
9e:98:09:19:63:31:46:5d:74:40:fb:5a:05:33:62:
5a:ec:e4:75:fa:21:29:4c:18:af:af:f9:df:15:2c:
37:e3:8a:01:43:2a:34:27:06:a9:1a:a3:42:48:21:
cc:42:f2:1a:c2:ef:b5:fa:3f:fd:f2:80:a4:ba:1e:
8d:18:7a:6a:b6:50:aa:3a:39:95:a1:d8:e0:be:d4:
26:e6:b9:d4:85:7b:9a:b7:0d:3a:31:72:17:9f:89:
1b:33:50:6b:b3:4c:54:37:3b:29:3c:57:cd:8b:98:
30:83:96:76:4c:97:49:a8:a5:c9:d1:1e:88:c5:fa:
02:7c:19:59:a4:da:0e:9e:ab:ac:a4:3d:c4:61:36:
9b:b3:8f:22:3b:fb:a0:b8:96:5a:ef:69:78:68:f4:
41:d3:f9:02:dc:d4:78:94:83:dd:b0:de:fa:16:a0:
84:d8:2f:71:24:95:6b:db:89:96:01:bb:46:92:44:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7D:D8:89:33:EC:F4:2C:46:20:C6:E2:DB:5F:38:B7:7E:F9:54:7D
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/lX3YiTPs9CxGIMbi2184t375VH0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.200.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:88:8f:19:f5:20:df:e0:e2:98:3d:c2:96:3c:51:e5:c4:b6:
32:06:1f:ed:17:27:48:07:fa:bb:ec:76:21:05:46:e4:77:d7:
fd:2d:d2:a1:21:91:0b:cd:0c:e9:3d:81:c1:66:6b:43:2e:3c:
01:b8:8f:6f:c8:b4:fb:2b:ae:c3:4f:53:f4:86:5c:eb:b9:5e:
8c:0e:42:e8:0d:3d:7f:43:83:e3:e7:0c:96:aa:b8:c9:34:ca:
68:87:5e:bf:d4:34:11:3f:d5:28:c3:90:b7:75:12:86:a6:5e:
dc:88:f0:86:8d:81:f9:5e:c1:75:f2:67:6f:6c:09:36:78:d3:
4e:f4:e5:7f:80:16:0d:65:72:79:ec:06:7e:13:bf:84:9b:06:
f0:86:b2:50:48:4e:10:3b:f2:97:8f:81:1d:a2:65:fd:0d:17:
4b:c7:f6:3b:64:62:1b:e7:c4:2c:c5:7f:6d:a0:0b:1a:3b:34:
a3:a2:7a:f6:2c:a9:94:c4:ee:c3:65:99:ba:0d:97:97:e9:a3:
bc:cf:fc:9d:be:35:a8:e6:eb:33:7a:7e:c1:0b:64:d2:23:e4:
2d:ad:98:7d:aa:44:00:cd:21:98:07:a7:0c:1f:cb:11:07:c0:
28:1a:63:0e:02:78:e7:fd:ee:25:ac:db:2f:6f:92:13:c1:7f:
6a:20:11:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org