Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/lZL_4FKDF-emwCHuo5U2q3Zp2dQ.roa
File: lZL_4FKDF-emwCHuo5U2q3Zp2dQ.roa (raw, json)
Hash identifier: lL0ZivYAGgxPzQUVSTgLpvEqnSs0dPquDYVOSzEWU3I=
Subject key identifier: 95:92:FF:E0:52:83:17:E7:A6:C0:21:EE:A3:95:36:AB:76:69:D9:D4
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 125B
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/lZL_4FKDF-emwCHuo5U2q3Zp2dQ.roa
Signing time: Fri 01 Sep 2023 08:04:21 +0000
ROA not before: Fri 01 Sep 2023 08:04:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 124.218.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4699 (0x125b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9592FFE0528317E7A6C021EEA39536AB7669D9D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:f4:86:82:c2:c1:24:f3:15:76:e6:e4:9d:
56:d4:cf:f1:78:92:76:c7:f8:fd:38:00:73:b2:8a:
24:dd:bd:74:36:1e:ef:37:67:c7:68:05:98:98:18:
92:b0:c3:e9:15:db:08:5f:9f:1d:95:3d:88:69:a3:
2c:a7:22:c3:b1:4d:b2:26:77:74:e8:6e:87:ab:37:
66:1b:27:73:71:06:bd:ef:f2:0f:8f:46:ca:7e:25:
d6:fc:34:4f:d3:4b:03:bd:63:b6:e4:93:b9:cf:3f:
79:38:13:80:61:c0:cb:aa:c7:80:cb:96:66:18:ab:
dc:fe:24:8a:80:e3:a9:2d:b7:ab:dd:b2:98:1e:ba:
d8:56:63:cc:40:9c:fb:b6:eb:a0:65:24:cf:95:3a:
f4:5a:2b:42:27:ee:5a:c1:e4:d2:66:dd:79:2f:64:
fe:98:b1:7f:e6:90:a1:b9:01:a3:88:83:ff:13:18:
85:9b:6e:a1:8c:44:56:1e:17:45:ce:68:33:1e:83:
67:ed:90:1f:38:ff:da:96:36:33:3d:27:17:6f:15:
f5:93:4c:eb:4b:79:8a:b7:c2:f1:cd:fe:dc:e3:fc:
45:61:19:7a:64:6e:c8:10:6e:fa:85:8f:24:86:aa:
6d:12:85:69:9e:4a:8e:69:cd:6e:3c:5c:ae:c7:fa:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:92:FF:E0:52:83:17:E7:A6:C0:21:EE:A3:95:36:AB:76:69:D9:D4
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/lZL_4FKDF-emwCHuo5U2q3Zp2dQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.116.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:96:c4:02:93:fc:b9:45:e8:79:f6:fc:a9:c3:70:24:56:72:
af:52:c0:f4:7e:43:eb:9e:6b:24:c0:e1:b1:51:59:f2:01:36:
d4:6a:8a:8f:d4:2a:a5:be:0e:07:bd:3c:38:8b:f0:2a:55:e5:
71:92:69:86:bc:f9:bf:f6:57:75:cc:1f:60:67:82:4c:2d:b3:
7c:84:8c:cc:52:fd:02:8b:54:82:51:9b:b6:ec:5d:4f:99:7e:
9c:16:78:da:ec:e5:fc:5a:fe:9e:41:0f:1e:af:c0:cf:cc:fe:
06:ec:ce:14:ed:b9:8e:eb:32:e2:c4:e4:d6:87:c6:b5:c3:56:
d4:9f:7a:f0:bc:70:bb:30:0e:68:ae:36:b2:88:35:88:6d:e0:
da:31:2d:28:47:5c:23:ea:06:e6:eb:37:0b:20:81:88:e3:a2:
9e:21:42:07:35:66:9f:b3:8d:63:2e:d5:21:01:f7:55:57:1d:
f9:7a:1d:01:ab:fe:3e:f4:bc:3d:a1:8b:6e:87:9d:e9:38:a1:
c4:b2:c5:13:04:8f:cd:67:aa:46:46:5f:c1:e3:90:a4:84:f3:
1d:de:01:80:9e:c3:64:09:82:e2:62:24:36:65:f9:8a:08:a5:
d0:3b:ff:e8:68:df:b6:f2:a8:e1:6b:5a:51:7e:9a:10:50:0b:
07:1f:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:50:43 2024 by rpki-client on console-fra.rpki-client.org