Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/mN0_1RUeiauEvJucjO28xh6Ak-E.roa
File: mN0_1RUeiauEvJucjO28xh6Ak-E.roa (raw, json)
Hash identifier: EsOweaiGC188kUyWDgRl4zKwWTaqjtQSP9ZfzcVNeeU=
Subject key identifier: 98:DD:3F:D5:15:1E:89:AB:84:BC:9B:9C:8C:ED:BC:C6:1E:80:93:E1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1335
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/mN0_1RUeiauEvJucjO28xh6Ak-E.roa
Signing time: Thu 14 Sep 2023 10:12:07 +0000
ROA not before: Thu 14 Sep 2023 10:12:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 222.250.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4917 (0x1335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 14 10:12:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=98DD3FD5151E89AB84BC9B9C8CEDBCC61E8093E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:e5:a2:d3:90:eb:f8:4c:f3:ad:09:25:7f:
79:a6:e6:29:27:f0:0a:f9:60:f9:71:80:35:2e:c0:
71:66:82:44:8b:0a:b7:ff:df:ed:4f:aa:18:9c:d6:
d6:2a:1d:1c:55:f6:c1:55:97:e7:89:a5:01:b4:20:
b2:99:12:d7:35:f7:21:fa:75:0c:9a:e9:01:b7:0e:
93:7e:ed:81:0c:62:89:0e:be:09:dc:0e:bf:18:aa:
b9:b7:ba:90:b4:52:e7:af:20:3c:90:24:9a:ad:00:
18:ea:0b:87:bc:e3:3d:8c:1a:05:fc:42:0c:18:83:
9a:0c:2b:91:cc:b8:5a:bd:68:c4:24:62:62:9f:f0:
86:a0:f8:6a:dc:85:f6:32:b5:d7:e1:15:61:8e:9f:
3b:dc:c3:05:d4:40:e0:74:a8:f9:45:c2:3f:07:f0:
e6:23:87:0d:35:89:7c:2a:17:99:c4:7c:57:fe:85:
b0:c5:09:bc:17:03:29:80:f4:10:9a:76:7e:ac:d4:
4e:33:8f:c4:4d:77:22:9e:ba:18:51:c1:7d:4b:20:
61:b9:33:4e:89:5a:a9:26:cb:8d:38:25:35:4c:60:
b8:fa:fa:33:04:7d:9a:36:ff:ad:34:40:96:46:9b:
45:86:9d:b1:9c:d6:43:40:8e:ef:ee:75:de:a6:39:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DD:3F:D5:15:1E:89:AB:84:BC:9B:9C:8C:ED:BC:C6:1E:80:93:E1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/mN0_1RUeiauEvJucjO28xh6Ak-E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.250.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0f:18:64:2f:86:ed:4b:c3:96:e3:e4:7d:2c:15:5c:80:b9:4a:
37:73:c9:c7:14:74:ad:04:f9:20:f9:fb:87:2e:e4:95:ae:e6:
e0:e1:a9:e5:e6:87:07:b9:71:28:eb:da:12:be:1b:36:21:6a:
de:9f:19:3c:e7:10:af:90:3a:7d:06:df:15:c4:42:7f:fc:08:
58:ff:e6:99:28:8c:87:56:d7:32:32:c3:11:a5:94:31:dc:92:
6f:dc:b9:06:58:4b:10:a2:ec:df:7f:d9:75:0f:39:d8:2f:ac:
f7:ee:bd:e8:28:c3:1a:54:97:8d:86:b3:33:16:2e:51:aa:b8:
70:f8:00:5c:0c:8b:6b:8b:65:a3:25:04:e0:9d:3c:35:5f:bf:
86:cf:06:7d:d8:c7:ca:97:4c:48:d0:16:cc:21:5c:e6:09:f3:
b9:3e:f6:26:99:5b:7a:17:1c:82:59:47:b5:4d:1a:47:cf:7c:
1d:5d:7c:e5:42:f8:46:8c:57:f9:af:74:16:91:33:6f:5a:f7:
d2:a1:44:3d:10:05:a6:c4:95:79:5a:4a:5f:2e:d5:0c:4d:17:
d6:a2:3d:f0:4d:cf:cb:db:ad:c2:fe:7d:b1:c5:4f:0a:37:21:
4f:22:29:a7:15:00:8b:ad:22:a9:a6:1b:ad:1c:a7:88:bc:48:
a8:a6:14:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org