Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/njsO76-WD2YiTG3DSg3iB6UOTaU.roa
File: njsO76-WD2YiTG3DSg3iB6UOTaU.roa (raw, json)
Hash identifier: JfQeKxXe+NU91xn14PQb0HijB0zY2K5PkQAYn9mHOwY=
Subject key identifier: 9E:3B:0E:EF:AF:96:0F:66:22:4C:6D:C3:4A:0D:E2:07:A5:0E:4D:A5
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0931
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/njsO76-WD2YiTG3DSg3iB6UOTaU.roa
Signing time: Tue 29 Sep 2020 10:01:34 +0000
ROA not before: Tue 29 Sep 2020 10:01:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 210.203.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2353 (0x931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9E3B0EEFAF960F66224C6DC34A0DE207A50E4DA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:23:49:44:ab:bb:8e:0a:02:4a:5d:2f:a7:
ab:2e:f3:c6:17:d0:7a:ce:53:3f:e6:ec:8d:d0:25:
7f:17:35:91:70:42:58:a2:b9:52:a6:f0:72:28:de:
2a:08:5b:8e:88:3e:48:b5:e6:23:42:7e:2b:a6:4c:
0a:64:1c:24:0d:79:df:c4:30:c1:61:42:69:df:b4:
39:37:33:00:48:87:c5:64:f5:d7:47:f5:c9:cd:d7:
e6:1a:92:3f:94:a2:50:86:41:2d:85:dd:9d:08:6f:
aa:86:78:55:87:fe:94:6d:b2:9e:54:37:11:fd:0a:
67:81:76:55:6b:7c:c2:11:6d:9e:83:14:49:d0:f9:
53:b1:6d:59:ef:5b:0a:57:0b:2c:49:d2:cf:a7:64:
85:c3:99:3b:30:f3:c2:8c:c6:02:37:47:66:72:07:
7c:05:29:3f:e2:98:0f:a0:12:c1:e7:19:08:c6:a8:
d2:7c:01:85:9c:e2:5d:c3:99:c4:35:42:1b:91:0e:
3a:22:82:4c:cd:4d:5d:97:ff:2b:d8:cd:92:d6:c0:
16:66:ec:9e:4d:f0:f2:65:03:a9:8e:a6:f2:9e:58:
4b:3a:91:69:d2:cb:c0:a2:af:d9:1d:7c:75:81:d6:
38:4a:7a:2e:7e:a5:06:a4:01:cf:39:65:d9:2b:07:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3B:0E:EF:AF:96:0F:66:22:4C:6D:C3:4A:0D:E2:07:A5:0E:4D:A5
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/njsO76-WD2YiTG3DSg3iB6UOTaU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.64.0/18
Signature Algorithm: sha256WithRSAEncryption
00:b5:6d:67:0b:6b:63:0c:6a:b0:c3:a2:67:a1:e4:31:68:db:
3d:2f:3c:58:a8:5f:af:d7:a8:5d:6c:c2:31:e6:b2:31:2f:38:
fc:79:8f:71:1a:6c:d6:1d:00:28:24:c7:a1:2d:ec:4d:f0:9f:
a5:34:86:cb:51:74:1a:8f:83:7f:d7:85:ed:4d:ea:37:ec:0c:
79:2b:71:cf:46:86:dc:b0:82:3e:bd:76:e8:da:6e:18:18:f9:
2d:f6:6b:9e:a5:f2:a2:07:de:09:83:eb:60:86:48:73:aa:d8:
ba:b6:03:fd:87:10:95:01:a8:82:21:51:98:15:12:93:08:b1:
22:d5:c9:33:81:4d:4e:ee:1f:28:d6:18:75:e5:22:dd:e3:72:
99:c9:eb:1b:74:3c:b3:6f:51:a1:90:7a:67:33:26:b8:00:9a:
47:eb:c1:72:b3:f5:99:96:80:fc:ff:fb:b0:6d:3c:84:54:a8:
53:d8:39:b7:3c:de:91:32:06:fe:ba:dc:34:46:8b:fe:31:2a:
b6:aa:55:3b:81:0d:88:9f:82:27:9f:30:bf:77:e4:11:23:a5:
18:39:60:36:a5:b9:79:e1:c2:87:1c:7e:d0:5a:6a:7a:b3:f8:
a2:35:db:ab:62:1c:d6:44:d5:51:0a:aa:b2:08:28:7b:58:47:
d4:a4:f0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org