Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/nix-zHYRcDbmk0eD3WLg6S5LWIs.roa
File: nix-zHYRcDbmk0eD3WLg6S5LWIs.roa (raw, json)
Hash identifier: l/E9oBhjpcXdUoZ81JeX12w/moE4SzDc9iceZE/NJ18=
Subject key identifier: 9E:2C:7E:CC:76:11:70:36:E6:93:47:83:DD:62:E0:E9:2E:4B:58:8B
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 08DC
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/nix-zHYRcDbmk0eD3WLg6S5LWIs.roa
Signing time: Tue 29 Sep 2020 10:01:10 +0000
ROA not before: Tue 29 Sep 2020 10:01:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 210.200.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2268 (0x8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:10 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9E2C7ECC76117036E6934783DD62E0E92E4B588B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:58:33:52:af:8a:23:91:a4:eb:7c:15:0c:3e:
a0:f4:80:01:27:53:9c:6c:42:15:f3:9e:41:b2:4a:
18:71:db:95:61:2f:b2:f0:16:29:19:52:9a:2c:70:
70:1a:fb:61:ca:8f:30:26:7b:b9:5e:89:41:ce:2b:
7f:34:f8:b7:40:bc:4e:4d:e5:8d:a0:ed:da:b3:f9:
9a:a2:c6:7f:8c:e9:cf:96:dc:18:f2:0c:80:9f:63:
02:b4:3b:93:d6:3c:60:0f:1d:5b:c2:a2:e5:47:58:
54:d8:ce:c1:7b:84:a7:b3:cd:10:15:f5:48:33:96:
39:8a:57:e3:89:72:6f:8e:2d:56:4c:c4:9f:73:89:
c0:cb:aa:30:6b:88:b3:bb:07:9b:1e:29:dd:3d:b2:
48:5e:1e:56:ee:81:b6:57:f9:b8:66:f4:0e:90:cb:
9f:76:77:d5:d1:f3:4e:7b:ce:4b:de:53:5c:f1:81:
6b:1d:3d:a5:3d:a9:75:df:5f:c5:44:54:e9:52:47:
ba:c6:7d:47:54:e3:8d:6d:48:62:bb:e2:dd:f2:4d:
e7:8a:83:5f:0a:92:10:1a:55:93:29:04:d2:3a:fb:
a0:b0:26:f1:9b:42:b4:5a:ff:b8:9f:7b:b9:e4:e4:
96:98:55:99:a1:59:45:46:3c:6c:fb:fb:ae:33:c1:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2C:7E:CC:76:11:70:36:E6:93:47:83:DD:62:E0:E9:2E:4B:58:8B
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/nix-zHYRcDbmk0eD3WLg6S5LWIs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
03:e3:c7:5c:e0:9a:87:11:8f:c2:3f:2d:c5:02:08:01:df:60:
c1:ac:4c:71:b7:bb:d6:fd:21:c3:8c:47:7c:78:a8:33:a4:a3:
dc:ab:42:88:41:ef:50:06:a9:7f:bf:b6:05:9f:1d:46:da:6d:
02:a3:34:b6:89:84:8a:d7:eb:28:75:0d:6a:a1:a6:89:5b:7f:
2b:92:2e:c5:d6:3a:79:ed:d3:c3:8b:a0:38:68:35:0f:2f:eb:
8d:1e:d6:66:7c:e3:18:6b:e8:9d:55:f1:d4:3f:28:94:7c:de:
df:97:e0:8a:9b:c0:8b:88:6f:f7:88:8b:7d:5d:fa:c1:3c:74:
29:ee:ee:a7:29:16:b2:3f:14:5c:bf:f7:02:83:af:0f:e2:af:
60:d1:b3:4a:7c:0b:c3:c8:c4:ac:5d:76:05:87:10:2b:35:31:
9d:1b:84:bf:67:82:4c:ba:40:d7:80:98:5b:11:3c:2b:83:fe:
03:3c:a4:b6:73:9c:c0:22:5b:07:3a:54:66:9c:32:55:c9:d8:
6b:b1:f0:00:e2:32:7d:3f:6c:fa:e9:85:73:67:0b:97:de:3a:
f3:17:69:28:1f:d7:98:ae:b2:c8:30:93:4b:83:65:28:c4:16:
26:06:6e:76:07:78:87:9b:d1:26:87:dc:a8:20:4f:97:f7:59:
2a:b6:b2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org