Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/mDEL53IG4NR-ZUywww9C-Tf28tI.roa
File: mDEL53IG4NR-ZUywww9C-Tf28tI.roa (raw, json)
Hash identifier: iVbMjCqvOjy9VMDK3vPmJRHS0yZ3TDvnc7uCFPXW5Os=
Subject key identifier: 98:31:0B:E7:72:06:E0:D4:7E:65:4C:B0:C3:0F:42:F9:37:F6:F2:D2
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1256
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/mDEL53IG4NR-ZUywww9C-Tf28tI.roa
Signing time: Fri 01 Sep 2023 08:04:20 +0000
ROA not before: Fri 01 Sep 2023 08:04:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 202.178.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4694 (0x1256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=98310BE77206E0D47E654CB0C30F42F937F6F2D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:51:25:88:22:b5:b1:50:90:98:48:ee:68:
ad:25:ab:10:7c:ae:81:60:75:01:aa:fd:7e:5f:6a:
32:fe:7f:6d:e3:74:25:39:55:e3:cc:c9:9b:b0:0b:
d6:a1:d9:a6:b9:30:92:c3:16:a3:65:22:a2:52:63:
e0:ff:65:de:f8:31:67:a8:83:72:86:bd:13:e0:10:
11:d2:ba:71:ee:b9:56:62:bb:58:fb:0f:2a:13:f5:
84:dd:b9:27:67:23:f1:1d:10:03:ad:09:ee:46:86:
37:78:0d:99:0c:c8:78:99:27:34:9b:3d:4e:e7:5b:
8f:2e:01:d6:78:cd:17:5e:29:e3:4b:75:4c:43:d5:
71:56:82:53:18:16:2a:32:f4:3a:26:9a:c7:8b:d8:
56:2e:0a:c4:7c:b0:02:7f:0d:24:71:9c:f6:17:07:
58:e5:e9:9c:9d:c3:6d:44:7b:d5:ab:76:a2:33:0c:
cd:aa:6a:e0:01:88:ce:73:fd:93:1d:0a:c3:4d:56:
16:c8:2b:80:56:f7:4f:de:ca:3e:1d:a1:61:53:5b:
8c:e6:0b:96:72:64:8d:8e:3a:c9:17:2b:3c:f2:40:
75:d3:ec:97:80:cb:4f:12:24:54:84:91:8b:23:6d:
ae:3e:8c:d9:bc:5b:2e:ab:af:f0:bd:17:f1:35:00:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:31:0B:E7:72:06:E0:D4:7E:65:4C:B0:C3:0F:42:F9:37:F6:F2:D2
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/mDEL53IG4NR-ZUywww9C-Tf28tI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.178.128.0/17
Signature Algorithm: sha256WithRSAEncryption
99:e1:ca:5f:5a:15:24:bf:3e:b5:00:e4:e1:bd:bc:ac:42:e8:
aa:94:9f:4a:80:0f:dc:8b:8f:23:01:b7:ea:31:73:36:12:52:
1f:29:8b:2b:fd:42:32:2a:80:5c:39:0e:ab:a8:d5:af:e8:80:
f8:8b:d6:5a:6b:31:af:47:50:72:2f:7d:48:0d:26:31:30:99:
00:9c:9d:d6:f5:8f:10:20:51:f8:35:99:c5:8c:75:19:85:a6:
21:06:87:e6:67:93:74:a4:88:68:87:ac:7c:bd:5d:86:86:0a:
2c:ea:84:c1:14:be:ae:80:b5:66:7b:31:e0:49:2b:d5:34:86:
b8:21:9a:00:d8:4f:0a:50:31:b2:a8:06:2b:58:ff:de:cc:38:
6c:31:ee:e8:e4:d4:ca:6e:61:7d:0b:38:b0:66:0b:e2:98:52:
ed:a3:44:cf:15:a4:eb:c7:1d:77:83:6c:bd:ad:e4:47:68:c2:
9a:01:be:b6:0a:32:82:15:ba:32:6d:1b:70:fd:37:01:8c:26:
ab:cb:dc:08:df:5c:55:5c:31:c0:fb:77:30:41:f0:e4:15:11:
04:61:8d:d8:a6:a8:a2:55:40:c4:ca:aa:db:cd:a9:02:22:49:
75:9f:04:6d:4e:02:f1:19:b4:ad:71:1e:65:02:1c:89:52:05:
9e:4b:3e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org