Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/laA0nv8qGH7dtjK6PXy31U3-L5g.roa
File: laA0nv8qGH7dtjK6PXy31U3-L5g.roa (raw, json)
Hash identifier: E58sX1GqtTEKZKOR4p9RT4ALNZCc/bpP6XqzxuhPPfs=
Subject key identifier: 95:A0:34:9E:FF:2A:18:7E:DD:B6:32:BA:3D:7C:B7:D5:4D:FE:2F:98
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0ED4
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/laA0nv8qGH7dtjK6PXy31U3-L5g.roa
Signing time: Tue 22 Feb 2022 01:17:43 +0000
ROA not before: Tue 22 Feb 2022 01:17:43 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9922
IP address blocks: 124.218.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3796 (0xed4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 22 01:17:43 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=95A0349EFF2A187EDDB632BA3D7CB7D54DFE2F98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:0a:9a:9d:56:e6:8f:7d:6f:d8:72:b8:ec:
74:57:2a:c2:30:cd:97:4a:44:73:db:3f:e0:03:ff:
bd:64:be:9c:34:61:2a:35:b0:68:8d:3c:72:33:87:
9d:d9:d2:88:44:eb:9f:72:b5:45:65:53:06:54:e7:
e1:24:53:62:4d:b9:6f:2e:71:71:1a:3d:a7:cc:c8:
fe:78:24:75:a7:79:bb:40:86:27:df:d9:11:fe:1e:
52:3a:e8:1f:d7:f3:12:c3:09:f9:1a:b6:26:68:e7:
6f:b4:f2:30:42:dc:8e:0d:14:d0:88:47:0b:a5:36:
09:ca:58:34:79:1e:8a:6b:b3:dc:c7:92:87:66:88:
c9:d8:03:4c:1e:43:9d:03:db:57:66:bd:b0:40:ec:
e4:f5:3b:22:e6:ec:48:8f:ff:5f:cd:ca:1b:89:ee:
81:6f:96:cc:90:bb:da:c4:2b:73:db:50:f4:e2:16:
4a:13:3d:1c:92:bf:7c:53:a4:ae:8c:4f:be:cd:63:
49:16:e5:c7:e7:df:24:9a:81:ed:68:94:17:e9:90:
4b:e9:fb:53:ee:e3:08:2e:c9:b2:6d:0c:8c:f5:ae:
96:fd:ee:f0:46:fc:34:f9:97:20:54:28:a7:5f:48:
5c:f5:cd:fc:d7:dc:fa:c8:d3:e5:54:a7:c6:ad:af:
c2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A0:34:9E:FF:2A:18:7E:DD:B6:32:BA:3D:7C:B7:D5:4D:FE:2F:98
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/laA0nv8qGH7dtjK6PXy31U3-L5g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:0a:56:9f:83:d7:38:2d:a4:fa:f1:26:ed:d7:bc:e9:67:0f:
2d:36:59:f8:42:9b:40:32:20:e8:51:cb:13:33:20:e5:3e:c0:
07:3d:77:26:bd:b7:81:8c:e5:c3:33:4f:8a:cc:93:3f:0a:2d:
81:a3:99:6c:9e:43:a5:61:36:bd:74:53:a2:26:cf:43:58:7c:
95:9f:03:8b:16:56:ab:d9:96:4a:8b:50:40:01:dc:6b:04:ab:
ae:06:e8:1e:ed:33:79:cb:ba:8e:17:e8:a3:1a:36:df:70:b2:
8e:2a:8e:62:a5:f3:67:2c:f5:2f:67:0b:d6:e2:33:e6:26:56:
87:9c:66:db:63:8b:d1:bf:58:b8:a2:5e:be:84:50:e9:32:3c:
b0:df:db:df:f4:fb:54:c7:ca:b8:b3:8f:6c:0d:30:36:6d:69:
50:e6:32:cf:18:d2:16:93:3f:e0:a9:46:46:4a:b3:85:7a:22:
a0:af:5d:aa:38:f0:57:a9:a4:29:cb:c6:5a:d8:ec:e6:6e:7e:
85:7f:ab:c5:5a:75:67:4e:9c:43:3a:fa:78:0c:cf:f7:ea:c5:
22:05:04:0f:45:ba:2f:06:82:eb:62:16:44:60:98:b0:71:52:
26:8a:45:cc:14:7c:09:82:44:b2:a5:eb:bc:ee:02:d1:c0:fd:
8a:ab:cc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org