Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/n6lQDntgKnSuaQZ5LQ2GYUEgtFA.roa
File: n6lQDntgKnSuaQZ5LQ2GYUEgtFA.roa (raw, json)
Hash identifier: iGC3WM9ZaR7kzbdCKeZZ7/ozVpZkwrkk2cfLlfqFFRg=
Subject key identifier: 9F:A9:50:0E:7B:60:2A:74:AE:69:06:79:2D:0D:86:61:41:20:B4:50
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 124A
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/n6lQDntgKnSuaQZ5LQ2GYUEgtFA.roa
Signing time: Fri 01 Sep 2023 08:04:17 +0000
ROA not before: Fri 01 Sep 2023 08:04:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.63.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4682 (0x124a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9FA9500E7B602A74AE6906792D0D86614120B450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:64:71:cb:e5:4e:f2:fe:5a:96:81:e5:8e:
75:d6:35:2e:16:5a:5f:0b:80:16:b6:0a:10:11:93:
61:c9:fa:80:77:58:63:7d:a7:b8:a9:bc:46:ea:e0:
ae:17:ea:8a:5d:0a:82:89:71:66:dc:ca:85:40:c7:
35:60:a4:de:5e:50:a4:89:83:ff:82:c7:7d:b9:74:
07:44:0b:a6:44:6b:b9:a9:20:8b:65:d3:d9:fc:41:
da:e9:99:2b:f9:56:10:07:e3:40:99:22:c4:a9:c1:
9c:7c:b7:14:5d:0c:71:a5:5e:2b:06:29:dc:d2:3c:
3a:8e:1d:4a:77:e8:31:09:c0:75:8c:02:4e:6c:56:
81:bf:e1:b3:a6:61:22:a4:c9:a4:af:4f:e4:6a:43:
08:49:68:2e:ac:e9:e9:ee:22:0b:70:1a:45:03:d6:
fd:62:66:98:01:2c:da:5a:dc:ad:88:05:dd:23:df:
24:2d:c3:36:cb:5d:01:e1:32:6e:94:db:2f:96:90:
a0:63:06:a6:e5:03:84:4d:f6:53:49:e8:04:d4:ea:
fe:bf:b2:47:4e:64:29:af:4f:c6:bc:15:25:e5:d0:
6d:2e:b0:cb:95:1d:a0:3c:2c:de:50:cd:05:5e:3f:
6b:cf:18:a2:92:d5:60:65:62:d2:ba:10:5c:00:5f:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A9:50:0E:7B:60:2A:74:AE:69:06:79:2D:0D:86:61:41:20:B4:50
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/n6lQDntgKnSuaQZ5LQ2GYUEgtFA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.192.0/19
Signature Algorithm: sha256WithRSAEncryption
22:f9:b6:8a:86:05:16:21:9a:55:2d:46:97:80:76:9b:bb:67:
ec:07:88:8a:cb:44:96:99:02:85:f5:da:3b:92:d7:b8:e6:ee:
ae:84:31:a7:97:bd:29:88:9d:43:7a:f7:c8:d1:a4:a5:4f:e3:
09:2d:5a:f1:a1:16:10:15:c6:54:c7:12:9a:b1:28:8c:72:43:
ad:bd:6e:6f:66:fb:12:b9:50:7b:4c:a4:c2:45:44:35:73:b9:
bc:cd:a1:c1:9e:4e:3b:37:ff:17:ec:3c:c6:1a:bb:d5:eb:1e:
e8:a2:1a:6f:f1:64:0f:56:a4:ce:1b:2b:e4:b7:ca:db:32:85:
3f:fd:44:3b:d5:b4:96:5a:c7:be:0d:19:d6:04:a8:cb:03:89:
ea:dc:cc:52:af:f1:c1:87:c0:e8:68:b4:7c:73:eb:c0:76:1c:
82:dc:f8:89:0e:70:2e:51:87:07:dd:89:3d:d0:9b:0f:b5:2e:
21:fe:a2:28:2c:1d:a6:94:c6:37:7b:93:0f:f4:ca:97:ff:a9:
2c:94:01:bd:c5:c7:f1:28:ae:26:a2:45:5d:6a:0a:ae:1e:34:
33:0d:22:1c:76:63:9f:d9:1d:21:ca:19:5a:ee:87:fd:c1:65:
fc:0e:2d:71:46:ed:2e:bc:8c:0f:ac:6d:f0:b8:1a:bf:bc:b3:
a0:6c:c9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:54:32 2024 by rpki-client on console-ams.rpki-client.org