Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/nA5qPrcaoLoAENpY3ObU7-M0MIE.roa
File: nA5qPrcaoLoAENpY3ObU7-M0MIE.roa (raw, json)
Hash identifier: 4K8VMN6EWNypCczKtvKAjWCoyrKGZzyb0aL5QDjD8CA=
Subject key identifier: 9C:0E:6A:3E:B7:1A:A0:BA:00:10:DA:58:DC:E6:D4:EF:E3:34:30:81
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0955
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/nA5qPrcaoLoAENpY3ObU7-M0MIE.roa
Signing time: Tue 29 Sep 2020 10:01:43 +0000
ROA not before: Tue 29 Sep 2020 10:01:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 2404:0:4000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2389 (0x955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9C0E6A3EB71AA0BA0010DA58DCE6D4EFE3343081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:7b:32:26:84:47:47:b3:81:e9:1e:11:39:
0c:b0:be:3d:97:e3:de:e0:d1:0f:a6:f7:42:4b:d9:
a7:04:ab:99:07:2a:f5:c3:7a:36:37:57:c1:2b:e9:
ce:dd:65:a3:86:b4:51:27:55:be:69:c3:f6:5c:d2:
cd:1e:b6:61:ea:07:57:07:6a:0d:bd:5a:7c:57:0b:
89:12:a4:00:1b:92:7d:84:ec:ae:de:37:76:1e:0b:
e7:20:60:32:e5:ab:74:2a:46:c5:1b:c8:ad:47:29:
63:0f:d2:8f:37:72:8a:c0:ee:99:9f:34:94:44:6e:
c4:4d:14:77:d5:e8:76:b8:8b:8c:93:0b:74:dd:9d:
03:9f:89:35:4b:01:3c:5a:74:44:54:ca:5b:9e:54:
30:4b:46:27:d0:da:ef:17:d0:64:b0:35:4f:bb:ca:
bd:9f:f0:33:01:53:f3:21:31:7d:00:da:a4:48:e9:
f3:ef:15:b1:ee:c8:ff:f4:b4:62:f2:1d:42:2c:fa:
06:dd:85:2e:fd:ff:2b:08:6a:a3:82:82:d1:e8:ce:
90:9d:34:58:ed:62:e8:9e:ff:a9:5a:d2:96:56:a6:
60:5b:1b:17:a1:9d:26:3d:85:c7:82:87:68:3f:f2:
9e:15:08:cd:b3:2a:2f:0e:71:07:9a:12:36:db:3f:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0E:6A:3E:B7:1A:A0:BA:00:10:DA:58:DC:E6:D4:EF:E3:34:30:81
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/nA5qPrcaoLoAENpY3ObU7-M0MIE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:4000::/36
Signature Algorithm: sha256WithRSAEncryption
66:5b:44:43:e6:bf:0f:fd:ee:e8:01:29:c8:11:5b:d0:08:9a:
1a:83:21:d5:60:e7:96:4e:90:84:a4:32:1e:19:26:f6:51:bb:
95:a2:51:c9:21:50:4c:8e:a5:3a:16:d3:87:69:63:69:65:a4:
3f:01:93:0b:e0:8c:1a:94:7f:b1:5f:b2:fc:6f:ee:57:d1:24:
de:a8:58:77:f7:17:bb:87:f8:9c:e1:1c:90:d5:ae:cb:c5:49:
af:60:e3:4c:58:af:a3:f7:ce:d0:96:d4:68:71:51:2e:fc:1e:
80:da:f6:53:04:27:84:34:b0:a0:f2:d3:e6:66:43:8d:64:c3:
dd:8a:c6:0b:bc:5e:2f:e0:7c:ae:5b:d2:f3:43:d6:e6:cb:8d:
fc:2a:50:ee:13:4f:58:b9:2b:56:b3:de:87:b1:6c:48:6a:c1:
85:09:ec:e0:20:ad:15:fb:ae:be:14:2a:c9:11:08:28:c3:12:
f5:e9:49:55:d2:65:21:5a:47:e2:e2:90:66:46:54:e7:05:e5:
3d:36:1e:c6:12:90:cb:a8:27:d6:02:12:e8:b8:58:3e:8f:d1:
e8:a6:bb:15:85:8f:a5:43:65:2f:a2:29:bb:fe:12:3d:90:c9:
2c:b9:8e:c6:e3:60:f9:fc:80:1e:5d:a5:24:b4:69:50:ed:28:
ed:a2:52:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org