Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/laTPoUvSAu0nRHu1hjplGbd6XvI.roa
File: laTPoUvSAu0nRHu1hjplGbd6XvI.roa (raw, json)
Hash identifier: Bg1BAkvbbjayCA92F1F7fHN/15e9HA+/O5nF33DcUhw=
Subject key identifier: 95:A4:CF:A1:4B:D2:02:ED:27:44:7B:B5:86:3A:65:19:B7:7A:5E:F2
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DDA
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/laTPoUvSAu0nRHu1hjplGbd6XvI.roa
Signing time: Wed 29 Sep 2021 02:39:38 +0000
ROA not before: Wed 29 Sep 2021 02:39:38 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7482
IP address blocks: 210.201.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3546 (0xdda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:38 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=95A4CFA14BD202ED27447BB5863A6519B77A5EF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:62:af:83:9a:81:ce:71:53:02:05:9d:f2:
e0:72:fe:49:fc:db:b1:8c:01:02:ed:2c:07:31:8b:
0f:b9:0a:55:9b:96:09:8a:2a:15:66:64:1a:81:ac:
ac:f2:a3:87:a5:b9:5a:e3:6d:ac:82:6d:67:5e:0c:
92:3b:9e:34:4a:32:ac:23:28:e5:9f:1c:f8:51:f4:
57:ad:33:31:21:a9:65:ab:04:76:39:7b:1e:5f:45:
4e:f8:a4:fd:2a:40:97:75:28:cb:6b:af:17:03:65:
22:d6:7d:d7:a6:3f:6a:94:df:2a:31:e5:8a:66:68:
82:78:b3:e4:00:65:25:f3:56:07:48:4e:53:5e:06:
20:0d:33:2d:68:ed:df:03:e9:83:6c:aa:95:a9:01:
cc:2f:da:2d:56:ad:b2:58:7d:85:8d:dd:aa:cd:f2:
b6:b1:2e:cb:96:c0:2b:6a:bd:de:1d:ed:0d:c7:36:
0a:86:eb:c5:02:5a:b8:2a:0e:3b:30:c3:2f:ec:af:
a6:24:c3:10:54:84:2b:b6:16:52:38:30:8d:35:35:
cb:dd:a3:09:55:47:64:b7:23:5d:f7:30:95:48:b2:
98:30:5f:5e:6b:eb:54:ba:f7:7f:f1:c8:d1:3b:21:
9e:6c:56:04:eb:28:81:df:fb:41:3d:66:02:db:05:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A4:CF:A1:4B:D2:02:ED:27:44:7B:B5:86:3A:65:19:B7:7A:5E:F2
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/laTPoUvSAu0nRHu1hjplGbd6XvI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.0.0/18
Signature Algorithm: sha256WithRSAEncryption
aa:94:fc:cf:32:c3:99:76:e8:b0:86:e0:37:d6:96:05:03:fa:
5c:11:ee:5d:25:eb:39:d5:28:e2:80:e5:dc:d6:fa:45:8e:17:
da:8f:f3:7c:da:55:89:62:95:00:20:98:c3:40:01:82:8f:25:
f3:58:b5:a4:86:a4:ae:8f:08:d1:17:4f:c2:ec:35:3e:a7:59:
d4:df:3a:ed:24:b5:66:9e:5b:0c:04:ad:9b:5e:9c:6c:b0:a1:
79:d0:be:09:7e:19:7e:32:59:98:b8:ff:66:8c:c9:72:f1:a2:
f0:21:ee:6a:cb:50:6a:d3:56:ea:ec:12:2f:3e:f3:49:ec:f7:
4e:ae:27:2b:b7:46:21:07:a3:c8:73:33:2b:59:c2:07:85:e8:
46:47:13:8a:81:49:34:d0:be:51:18:65:7e:2d:cb:fb:0e:9e:
9d:eb:ad:f5:88:f6:28:cc:46:60:60:ef:68:23:00:95:07:db:
53:4c:19:75:00:ad:fe:8c:f9:f6:2b:8d:d2:51:6d:72:91:f7:
e0:77:61:08:9d:bc:55:c9:9e:09:49:2e:ca:5c:6e:97:f7:f3:
00:bb:71:e7:29:6c:a2:da:55:78:91:2d:e8:a5:67:68:a1:77:
52:07:86:20:d8:11:7e:55:0f:0f:7a:f0:12:6f:4a:44:a7:82:
74:9e:ad:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org