Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/mw8_yi6gRTTSLfinD857Jb_0F6o.roa
File: mw8_yi6gRTTSLfinD857Jb_0F6o.roa (raw, json)
Hash identifier: nVCcx+NI4WCylYVhrVLy3BzZ5jhVtBtUVN75jhlJrUE=
Subject key identifier: 9B:0F:3F:CA:2E:A0:45:34:D2:2D:F8:A7:0F:CE:7B:25:BF:F4:17:AA
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10A0
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/mw8_yi6gRTTSLfinD857Jb_0F6o.roa
Signing time: Tue 16 May 2023 08:36:25 +0000
ROA not before: Tue 16 May 2023 08:36:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 2404:0:1000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4256 (0x10a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:25 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9B0F3FCA2EA04534D22DF8A70FCE7B25BFF417AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:49:d6:de:6a:e9:37:f3:8c:2b:85:50:d7:
fe:92:a6:e8:e8:57:da:3c:a8:5b:84:60:fe:8e:a5:
d5:77:28:8e:2b:74:b8:b7:56:fe:a1:ac:ae:a7:28:
ea:0f:81:59:af:9f:0a:57:88:97:26:59:97:cb:55:
fb:41:c1:2b:ef:66:3a:88:a2:d2:10:f5:b8:46:3b:
95:37:52:d2:48:a2:0f:3f:5b:ce:4f:8c:01:e8:a9:
61:af:07:62:a7:fe:4c:1f:6b:04:57:f7:12:f1:23:
b0:f3:60:0d:be:32:58:d4:2c:09:01:df:7f:d2:13:
78:48:b7:0a:35:2e:96:6f:e4:a0:4e:22:6a:9e:11:
d5:6b:10:60:5c:5c:0a:61:13:09:81:06:66:58:c2:
81:59:74:d2:58:c2:d8:a5:c8:b1:79:b7:fc:76:be:
bd:97:eb:e3:35:7d:ba:1b:59:e3:20:11:1e:3f:57:
f8:60:9c:42:bc:23:43:a8:92:a3:12:79:6b:cb:c0:
eb:84:bb:be:cc:6d:fd:d7:e7:92:ce:e2:db:21:96:
a3:a4:aa:5c:30:95:07:27:78:2c:4d:5b:cc:b1:b1:
dd:fd:f8:2d:6c:d3:02:e3:9b:91:4c:b5:e4:51:c6:
fb:53:1d:4b:c8:99:86:28:0b:1c:a0:5b:39:12:48:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0F:3F:CA:2E:A0:45:34:D2:2D:F8:A7:0F:CE:7B:25:BF:F4:17:AA
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/mw8_yi6gRTTSLfinD857Jb_0F6o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
3a:28:b8:d6:b3:03:1b:01:0f:65:ec:2b:c2:28:4f:b1:9f:08:
e5:1f:e3:a7:62:2b:3e:c4:8f:3d:e2:be:91:0d:29:aa:88:23:
11:f6:e5:f2:86:08:36:61:01:51:1d:af:bc:df:ad:8b:e2:90:
10:7b:9f:31:9e:67:92:71:28:00:b4:e1:20:0c:36:4d:e5:92:
ac:0b:1b:e9:78:36:67:b3:eb:b0:0a:3e:02:a0:17:45:f6:ba:
b3:ad:c6:04:c2:f1:b3:f0:a4:32:15:d7:49:b1:fd:ec:80:e4:
d4:93:cd:38:be:40:c1:80:c7:c4:4c:dd:dc:1c:fd:4e:1e:a1:
34:79:27:05:65:16:11:46:ee:10:c7:71:03:5e:60:8a:24:5d:
09:41:99:f4:a8:3b:79:e1:9f:67:9b:ba:63:a0:2c:ba:7a:12:
91:6b:9d:4b:7b:89:81:b4:36:17:60:20:53:04:25:58:bb:4d:
5a:43:8e:ba:c2:e6:78:80:d3:9c:70:20:d9:5f:a0:89:eb:70:
aa:ae:cf:08:41:6e:82:87:c5:da:c3:26:f9:f1:be:08:3c:e2:
f7:21:40:de:a8:97:c7:9c:c7:8e:4a:18:cc:c0:0a:27:e6:5b:
ec:6c:03:95:8f:da:3e:8c:60:0e:42:92:a5:ed:9f:da:6d:92:
f9:22:64:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org