Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/lmCDRiBstYrauMwGD_GxX4rHh1M.roa
File: lmCDRiBstYrauMwGD_GxX4rHh1M.roa (raw, json)
Hash identifier: Q9lWhceFhdHZfINJJROLJbzLIv+4WfstcWgr2uFxlPA=
Subject key identifier: 96:60:83:46:20:6C:B5:8A:DA:B8:CC:06:0F:F1:B1:5F:8A:C7:87:53
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 104D
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/lmCDRiBstYrauMwGD_GxX4rHh1M.roa
Signing time: Tue 16 May 2023 08:36:01 +0000
ROA not before: Tue 16 May 2023 08:36:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 124.218.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4173 (0x104d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:01 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=96608346206CB58ADAB8CC060FF1B15F8AC78753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:04:1e:62:51:32:e4:e7:e7:9f:6d:eb:6f:
86:2c:25:79:27:2c:b5:c8:9f:43:84:28:ef:75:ce:
0e:a4:bd:9f:17:70:59:cf:a7:44:cc:67:28:a2:76:
7f:f8:4d:b3:3f:07:7c:79:41:72:d4:07:a3:df:2c:
9a:82:4d:13:51:5f:87:bc:86:7e:ab:8e:61:8c:9b:
02:1d:b5:d4:ab:e6:2b:e1:59:15:da:c0:71:b7:77:
05:83:87:3f:e7:c5:20:0c:5f:85:4e:6f:7d:6a:1c:
11:2f:9f:27:12:ff:eb:59:1c:d5:0c:c8:1f:86:d3:
4c:05:b8:72:94:a2:84:2a:88:1c:b0:8e:16:d3:77:
82:79:52:c6:33:b1:7a:82:59:66:4d:7b:ed:cf:47:
49:59:cb:9b:fe:e2:c5:1b:e6:88:eb:c1:f2:04:01:
60:3f:52:96:30:a3:dc:de:10:0c:33:7d:5e:ec:9e:
28:2e:78:f1:04:c5:53:52:dc:c0:04:59:b3:ed:96:
ff:12:eb:f0:29:b4:e2:95:c8:c7:fb:1e:52:65:b9:
66:a1:fd:37:cf:f5:5b:db:15:b7:1b:0a:59:d2:6f:
09:16:fb:79:32:4d:fa:23:8e:79:d5:a0:83:b9:1b:
77:03:6c:29:d0:d2:2c:32:3c:1f:1c:07:c3:94:36:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:60:83:46:20:6C:B5:8A:DA:B8:CC:06:0F:F1:B1:5F:8A:C7:87:53
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/lmCDRiBstYrauMwGD_GxX4rHh1M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.0.0/18
Signature Algorithm: sha256WithRSAEncryption
aa:12:8e:8a:b7:88:f7:00:6b:7f:f3:bc:a8:43:a5:11:e8:7a:
07:4f:94:28:9e:df:de:1e:52:56:91:8d:a4:9d:c0:60:1f:9f:
8e:be:cc:bc:d5:1d:88:e6:41:ed:83:14:01:74:9b:60:a7:63:
78:78:89:96:28:1c:e2:ef:18:6e:ff:3d:9b:5b:f3:40:e0:b5:
2c:5c:10:13:52:a7:ef:29:94:33:3b:a3:1c:32:08:58:62:41:
77:c3:10:a4:fe:60:d8:bb:60:d3:68:08:3e:f8:09:98:6b:9b:
f0:dd:4e:d8:87:cd:4e:9c:af:b0:6b:49:cd:d1:ef:52:d6:90:
eb:06:87:59:fa:db:47:8f:ea:9c:3f:f3:60:5f:d3:5a:fb:62:
98:68:4d:0c:4a:f3:4d:09:63:5e:d9:23:6f:5b:0b:e9:14:af:
b3:d3:f1:32:56:48:5c:7c:58:4d:b5:11:4b:2b:d8:07:79:6d:
da:93:fe:5f:45:ac:43:60:08:16:52:ee:e5:08:3d:52:1c:5e:
84:65:cc:53:cc:32:6a:83:37:2e:1a:42:5d:a0:85:f9:79:81:
b6:98:57:64:45:dc:21:32:30:c1:4d:c8:45:f2:c5:37:00:aa:
fb:c8:5f:ed:8d:6d:7f:d2:06:7d:88:bc:f4:6b:25:76:04:1a:
50:79:cc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org