Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/mti0soEeY4VuXLTUBvaFsK0txbI.roa
File: mti0soEeY4VuXLTUBvaFsK0txbI.roa (raw, json)
Hash identifier: tcN+rsei3u9i3zuF7eHwAMRo067qYIEIeFsb30JwPPU=
Subject key identifier: 9A:D8:B4:B2:81:1E:63:85:6E:5C:B4:D4:06:F6:85:B0:AD:2D:C5:B2
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 104F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/mti0soEeY4VuXLTUBvaFsK0txbI.roa
Signing time: Tue 16 May 2023 08:36:02 +0000
ROA not before: Tue 16 May 2023 08:36:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131591
IP address blocks: 223.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4175 (0x104f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:02 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9AD8B4B2811E63856E5CB4D406F685B0AD2DC5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d3:53:c5:ca:c4:07:12:6b:26:7d:09:2e:43:
1e:d5:21:a5:ef:f8:c8:40:49:16:89:71:62:8c:3f:
f6:90:41:61:66:b7:9b:8b:d7:4e:dc:f9:97:86:ca:
bc:52:f1:71:48:ab:69:6b:7d:a3:1a:4e:b4:c7:ea:
09:7d:9a:0f:23:e7:16:31:a6:9b:57:e3:e2:49:ba:
e9:01:80:04:50:5f:58:3f:2c:0a:b5:fe:cc:f5:c7:
96:58:07:12:c9:4f:6c:9b:c3:87:32:2d:10:89:7c:
ba:dd:ab:43:de:da:aa:dd:3b:69:58:6a:09:f2:01:
17:7b:be:59:b2:f4:76:64:61:8b:57:8b:03:aa:de:
fd:54:7c:f8:b7:bd:19:16:df:22:55:c2:49:7f:01:
09:54:3e:91:70:55:13:f3:f5:cd:df:43:f9:93:29:
38:cd:00:d3:e1:46:0c:85:22:25:1e:da:17:c7:a1:
cd:95:91:7c:71:35:a8:56:a1:0e:ad:2b:a2:11:a5:
f9:79:05:fc:d2:b1:22:db:d4:f0:19:3e:de:32:10:
a5:60:f9:39:72:f3:2a:a1:2c:6a:bd:1c:92:b9:5e:
f8:72:bb:5e:b5:73:22:a7:56:65:7a:ca:eb:42:ac:
93:64:e7:52:3f:7f:47:13:b1:8f:d4:c6:f3:ad:44:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D8:B4:B2:81:1E:63:85:6E:5C:B4:D4:06:F6:85:B0:AD:2D:C5:B2
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/mti0soEeY4VuXLTUBvaFsK0txbI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.22.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:76:57:67:07:f9:6d:95:dd:c9:e6:00:bf:3d:fa:b1:62:10:
19:71:1e:bc:1f:2a:5b:e8:48:22:12:f3:40:f2:9b:91:fa:1a:
4d:89:3a:71:23:21:98:80:82:d9:a8:39:ad:6a:12:93:3b:b0:
8b:ef:b0:02:fb:d9:a4:14:55:7b:a9:db:40:4a:8f:ec:05:e0:
3b:1c:40:c1:b1:f5:bd:b2:41:10:6a:79:93:c6:35:1e:1e:a9:
93:85:a9:52:74:6f:40:2c:04:19:74:ee:bd:b5:27:9d:ab:75:
e9:2d:67:65:d4:d8:b8:ce:a3:43:1f:e7:bb:69:ed:f5:20:b7:
d8:7b:8a:8e:7c:ae:23:c0:aa:4e:4d:b9:01:9d:b9:b3:cd:4f:
51:97:db:d0:c8:0b:b3:f4:58:f9:0d:7f:91:e8:cf:5d:52:d8:
3c:02:64:5b:db:a0:4f:87:db:74:c8:28:d0:b4:3a:90:d6:bd:
a4:ee:05:a9:8a:d2:06:cd:1d:bd:1c:0b:38:53:36:a7:74:53:
3a:67:71:a8:fe:10:8a:66:93:70:16:61:59:ba:9f:eb:af:a2:
00:96:e8:ee:23:94:57:f5:48:cb:5d:db:74:7e:5e:25:0c:bf:
c6:50:f5:3c:61:24:b3:c3:9e:6b:e2:73:76:e9:89:bd:37:7e:
4f:87:68:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:07:17 2025 by rpki-client