Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/lquVl91RMGK4c-h_o7qATJiWDWc.roa
File: lquVl91RMGK4c-h_o7qATJiWDWc.roa (raw, json)
Hash identifier: orJpG9eeXUCxvkIWhCVSErRMmLT4dgCBt79PQGDdRhk=
Subject key identifier: 96:AB:95:97:DD:51:30:62:B8:73:E8:7F:A3:BA:80:4C:98:96:0D:67
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E01
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/lquVl91RMGK4c-h_o7qATJiWDWc.roa
Signing time: Wed 29 Sep 2021 02:39:51 +0000
ROA not before: Wed 29 Sep 2021 02:39:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 218.184.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3585 (0xe01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=96AB9597DD513062B873E87FA3BA804C98960D67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:79:3b:48:27:fd:af:a5:5e:02:11:5b:8f:
0a:a9:37:d1:e6:ec:42:23:9f:2a:0a:b2:aa:25:68:
99:ef:b3:da:ff:a8:d9:86:be:2e:d8:c2:fe:7c:f6:
5b:7b:d3:7e:70:26:ae:c8:4a:9d:23:03:fa:ff:b8:
f9:17:55:7b:72:37:e0:8e:c3:3a:c3:14:ba:5f:7f:
b0:45:04:48:de:dc:ec:34:5f:32:a6:0a:4d:49:86:
0d:de:6a:19:83:9d:dc:60:c8:a2:b6:e7:36:8d:5f:
a8:95:1c:4e:de:56:1c:b0:24:2a:60:94:87:29:40:
71:49:0e:04:a6:d4:a0:66:86:78:c3:36:09:e2:b1:
e8:eb:be:aa:00:f0:56:e2:06:61:d8:d9:34:3b:37:
03:8c:f8:98:9f:71:f1:5a:3a:dd:7a:08:0e:76:ae:
24:e7:67:7c:e2:73:92:fe:95:71:29:4d:fe:59:6d:
44:ee:b5:4b:ed:4b:7e:70:71:18:71:59:18:ba:87:
99:26:0a:e7:f8:39:67:75:bb:1b:e7:2a:57:b8:27:
9b:22:d5:6e:8d:db:9c:eb:30:14:5f:6b:b7:82:a8:
2e:d9:c0:08:20:5f:49:7e:85:9b:45:68:4d:ae:54:
1d:13:81:36:f2:15:5d:f4:21:78:93:7d:8e:78:09:
93:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AB:95:97:DD:51:30:62:B8:73:E8:7F:A3:BA:80:4C:98:96:0D:67
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/lquVl91RMGK4c-h_o7qATJiWDWc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.184.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:50:cd:30:c5:0e:51:08:0d:b1:48:85:60:89:7f:1e:3d:a3:
6a:00:5c:28:ed:b7:df:a8:e1:28:4b:26:78:d9:91:31:f9:6c:
cc:be:ca:15:48:52:12:de:f1:77:0d:b0:75:f6:cf:b2:36:5c:
e4:65:37:e8:ac:42:a3:bc:c8:ad:16:03:29:8e:98:01:84:1c:
e3:40:59:08:75:eb:e3:12:9f:58:ee:a4:1b:3f:ef:4c:0b:b5:
0d:42:c7:25:a8:d9:72:a3:c6:90:5b:29:ee:d9:6d:36:61:44:
8a:a9:44:1a:f5:24:69:97:2f:8c:7d:64:ad:94:13:b9:d1:42:
96:f2:b6:49:a3:ca:6d:19:60:75:6a:0c:2c:38:17:ea:77:47:
16:17:28:3f:fa:be:b4:57:b8:cb:bf:16:43:16:65:e4:01:6a:
d9:cc:87:ac:6d:ae:82:95:3c:43:92:d6:3c:c2:97:61:d5:f3:
02:98:05:76:ef:17:3c:ed:70:e5:42:30:c3:53:28:e1:de:0f:
16:b6:8f:b4:f6:a0:e9:7f:eb:57:79:ed:a0:b5:9a:25:bf:8d:
52:db:e5:f2:b6:9d:10:d5:ae:81:a5:76:61:f2:8d:7d:b7:96:
64:12:3d:02:32:0e:7c:10:d6:57:c3:42:2d:c7:49:39:12:3c:
04:cf:14:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org