Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/mgYAZfq9QaEicIKUCNAQiiRoN-I.roa
File: mgYAZfq9QaEicIKUCNAQiiRoN-I.roa (raw, json)
Hash identifier: wBASS/mVY0+KIqOJfPdghbUvYTij2QszL61DrEBydfk=
Subject key identifier: 9A:06:00:65:FA:BD:41:A1:22:70:82:94:08:D0:10:8A:24:68:37:E2
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DF9
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/mgYAZfq9QaEicIKUCNAQiiRoN-I.roa
Signing time: Wed 29 Sep 2021 02:39:49 +0000
ROA not before: Wed 29 Sep 2021 02:39:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 210.63.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3577 (0xdf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:49 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9A060065FABD41A12270829408D0108A246837E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:bf:86:28:dd:a9:cb:05:e8:8a:61:c2:3a:
60:ae:12:b8:d0:21:d9:2e:9d:01:ce:e4:40:2e:5e:
c2:a9:e3:e5:3b:96:70:cd:e9:ce:70:b7:3b:e8:18:
ef:77:dd:48:00:62:de:51:1e:f6:af:32:22:99:a7:
8f:27:27:00:af:5a:b4:df:d5:c7:8e:c4:db:5e:13:
29:ea:f4:0e:36:27:87:06:fc:3b:26:84:3e:4e:bb:
72:14:6f:e0:b2:1f:33:27:84:e8:78:4d:9c:15:a0:
a7:87:85:c4:b4:2b:5e:90:f1:d4:a8:92:30:36:2f:
e2:e5:b0:8e:2c:ec:5c:4c:a2:ed:ca:ef:47:07:99:
b0:be:0c:b0:72:7b:05:db:1a:e7:f9:11:5a:2d:0e:
c2:7a:bb:c5:c6:06:34:3b:29:65:b1:d9:4d:99:b7:
0c:d7:d7:77:4b:11:b8:c6:35:3f:0a:07:43:57:66:
88:a9:e8:83:aa:51:9e:1c:0a:0e:5d:93:83:47:7a:
95:28:e9:3e:d5:3f:f1:12:e4:84:46:9b:5b:98:ec:
01:47:c1:f8:e3:4c:a3:60:7f:3f:b8:7e:8d:d2:9f:
1c:08:bf:37:dc:ed:9d:c2:40:5c:c6:b0:0d:20:de:
66:94:22:d8:1f:79:a9:5b:cb:a6:17:50:e4:84:2d:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:06:00:65:FA:BD:41:A1:22:70:82:94:08:D0:10:8A:24:68:37:E2
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/mgYAZfq9QaEicIKUCNAQiiRoN-I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a2:91:e0:41:3b:63:8f:fc:2a:e1:31:85:90:a6:2b:76:b3:27:
64:b6:e1:8e:ac:6f:7e:f8:d2:1e:80:b6:a3:fb:c5:82:6c:18:
72:1f:50:82:0d:80:b6:0a:df:8c:fb:a2:67:51:ac:10:9e:14:
ef:4b:44:c7:c9:95:df:02:2f:96:3d:cd:1b:8c:0d:f3:bf:ad:
d8:1c:db:77:a4:68:40:c2:9b:d4:63:fe:dc:47:c9:44:2a:db:
80:2d:c1:dc:15:f3:31:16:f8:bc:23:7b:01:e9:71:8a:d1:2d:
fd:14:b8:7e:ed:3c:85:be:d2:96:11:87:c3:f9:08:6f:8e:e2:
9a:7a:00:85:e0:70:f2:8f:6b:2a:d2:ea:d4:80:db:9a:7e:46:
31:99:39:17:36:36:f3:80:2a:b6:47:72:09:09:00:78:c4:de:
1c:06:7a:ac:d7:f7:95:12:7b:bb:e3:09:92:45:84:3c:7f:52:
d2:43:fd:c9:da:c4:b7:08:ae:f4:ad:b4:79:f7:da:1a:70:f4:
c3:63:11:41:84:d8:5d:4f:91:9f:55:23:90:b6:67:84:7c:09:
7d:04:b1:70:ab:04:7a:86:14:b5:40:bd:29:0c:82:ad:83:ca:
bb:06:4d:e0:31:87:f7:df:fe:9d:c4:3d:51:d4:1e:99:7f:79:
d2:08:fb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:52 2025 by rpki-client