Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/m839Z1Jr36v0dbfCWx26PJ27eSY.roa
File: m839Z1Jr36v0dbfCWx26PJ27eSY.roa (raw, json)
Hash identifier: hEk1d/o9kgHdiK4u8TERE1l0vndYyBYxwJFvDxDKB3A=
Subject key identifier: 9B:CD:FD:67:52:6B:DF:AB:F4:75:B7:C2:5B:1D:BA:3C:9D:BB:79:26
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1069
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/m839Z1Jr36v0dbfCWx26PJ27eSY.roa
Signing time: Tue 16 May 2023 08:36:10 +0000
ROA not before: Tue 16 May 2023 08:36:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 124.218.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4201 (0x1069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:10 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9BCDFD67526BDFABF475B7C25B1DBA3C9DBB7926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:d9:92:eb:82:4e:ba:5e:cb:ee:26:dc:83:
5e:77:06:2e:e2:e5:60:d1:ac:99:20:e9:27:46:8c:
05:c8:59:73:ac:11:2f:b5:6a:12:7d:55:02:38:d9:
c9:5c:9b:36:0b:69:73:c5:74:a3:52:75:f8:fa:d9:
da:8b:7d:67:7f:1a:93:af:0d:9d:b2:24:18:4c:d5:
90:ed:cb:3d:b9:b1:57:3a:15:ab:0c:e4:a8:ec:17:
3d:47:56:cd:86:dc:98:dc:3c:79:30:1e:26:44:e1:
00:c0:71:23:9e:11:d1:39:ff:3f:9e:6e:59:8e:05:
12:50:6c:a3:70:de:32:e9:e7:f7:66:2f:d4:a7:8d:
2b:69:94:fc:bf:e0:ed:68:58:24:3d:7d:bf:84:bc:
60:04:21:b5:08:e7:76:84:15:21:c0:bc:13:e5:91:
0a:09:73:b7:63:2b:b0:9b:d4:d1:1d:08:0c:32:cb:
7d:f9:94:fd:95:52:8d:a1:2b:4c:58:9a:bf:ed:7b:
04:b9:75:1d:b8:84:f4:af:6a:5f:84:bb:12:3e:25:
06:89:43:15:de:9d:23:7d:6d:25:08:75:50:56:96:
a2:f6:af:7d:e4:1e:9c:cd:35:d8:3e:ef:b6:27:28:
90:a4:41:6c:98:35:b3:b3:6c:af:a4:5a:bd:a1:f6:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CD:FD:67:52:6B:DF:AB:F4:75:B7:C2:5B:1D:BA:3C:9D:BB:79:26
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/m839Z1Jr36v0dbfCWx26PJ27eSY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:44:c9:89:f0:d4:93:05:fe:a2:5c:d6:32:d7:0d:a5:47:2c:
82:9c:2d:5f:c8:75:42:c4:2d:fc:1e:b9:27:67:32:27:03:41:
0f:7e:c2:b3:34:95:d1:06:8e:fc:82:d7:85:aa:32:5f:d6:8c:
52:6d:24:53:28:93:36:1a:8c:4e:12:ee:67:49:2b:b5:59:7e:
bf:d7:eb:fa:23:17:74:a9:d4:7d:1a:d4:c3:b5:4e:46:af:7d:
6f:98:1f:49:ce:2e:b1:60:8f:0d:d5:32:01:68:32:61:a8:ff:
47:e1:13:3d:09:ca:8e:b0:99:cd:45:02:49:c0:47:74:3e:e1:
57:15:30:5c:a1:4b:26:ca:4e:4c:66:ef:4c:4a:50:cf:46:e8:
d8:2e:f2:6e:80:4c:57:7e:7b:b8:20:d2:53:14:0f:37:b6:15:
7d:27:56:e2:74:e5:9a:3c:2e:0f:55:2f:29:ba:1d:26:d6:22:
1f:24:45:20:ef:59:75:ee:c7:05:77:e7:6e:1f:88:8b:4e:dc:
0f:7b:4d:b0:aa:ae:7f:a4:51:89:40:6d:2d:da:63:15:f1:b0:
16:72:3d:09:8c:a9:5d:39:29:51:31:be:41:13:4c:28:ea:a0:
2d:9e:d5:31:3b:8f:d0:27:77:d8:b3:6f:41:f7:ae:eb:c4:ec:
f4:6a:a0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:00:05 2025 by rpki-client