Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/oqNXbIcijfPc8bGKPloHAeFSGP8.roa
File: oqNXbIcijfPc8bGKPloHAeFSGP8.roa (raw, json)
Hash identifier: j5mmOSo1ne4ik/G30NMC+Lo+WwzQYY5Ozv3f4Med/ec=
Subject key identifier: A2:A3:57:6C:87:22:8D:F3:DC:F1:B1:8A:3E:5A:07:01:E1:52:18:FF
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 090C
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/oqNXbIcijfPc8bGKPloHAeFSGP8.roa
Signing time: Tue 29 Sep 2020 10:01:24 +0000
ROA not before: Tue 29 Sep 2020 10:01:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 60.244.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2316 (0x90c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:24 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A2A3576C87228DF3DCF1B18A3E5A0701E15218FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:e5:d4:32:5a:55:1f:37:d1:2e:09:19:3e:
dd:39:d0:a1:17:61:54:db:1a:4e:b6:d2:04:29:1d:
a7:91:68:b0:1d:ac:3b:a1:b2:23:80:4f:21:8a:29:
2c:be:16:7e:39:8e:f3:42:45:e5:06:30:f4:a6:ac:
c0:ca:b4:68:b1:8f:1f:0c:48:f7:ee:bd:39:99:05:
a5:7c:15:ad:be:fe:e4:ca:67:3a:21:41:3f:db:61:
e6:c3:ab:64:1c:6a:f1:ea:ed:5f:f0:9d:df:fc:46:
5d:68:d7:18:72:72:e0:a0:39:9a:e0:1e:dc:ef:de:
5f:ac:0b:a3:0f:72:eb:eb:f8:a1:07:03:41:4e:d3:
02:eb:fc:8f:94:fe:7b:b3:98:72:8d:c3:f9:de:e3:
78:f6:9c:57:e3:0e:d4:90:60:2a:00:e3:f8:73:9c:
41:53:b4:81:87:78:f7:e5:00:a0:61:d9:ee:9f:71:
84:58:54:13:34:b4:2d:e0:4f:b9:8e:f1:af:82:b9:
fc:8c:17:f5:af:ea:91:be:d6:b2:e1:d2:7c:7b:f2:
71:46:6f:14:4f:ca:31:0e:dc:12:00:53:1a:42:f0:
fb:bd:37:ae:a1:94:f3:66:8c:eb:12:87:1d:b2:c4:
a4:2e:f4:f8:22:4f:07:4a:74:86:92:1c:43:22:0c:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A3:57:6C:87:22:8D:F3:DC:F1:B1:8A:3E:5A:07:01:E1:52:18:FF
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/oqNXbIcijfPc8bGKPloHAeFSGP8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:07:dc:68:12:6b:00:97:7a:3b:17:6c:2b:6e:8a:2e:72:87:
a7:d0:50:9c:52:ab:5f:87:92:1e:a8:ec:73:2d:97:2f:45:08:
ae:70:f2:76:58:88:45:03:41:f5:4b:54:03:99:9a:2d:35:81:
c6:fa:59:64:c0:f8:a6:0c:db:45:e7:45:7e:40:11:cf:89:a8:
19:1f:1b:fd:47:fa:c2:73:30:50:05:5a:cb:27:c9:23:81:15:
71:ae:1f:bd:98:7a:20:7b:4c:cf:67:e8:4f:97:45:c7:63:42:
bf:f5:b8:69:1d:5c:bb:1f:48:85:99:5f:05:d9:57:a3:1e:eb:
f0:43:59:d9:23:67:3c:89:6d:d5:e5:ea:10:15:34:19:28:1d:
22:77:bf:9c:1f:f3:9c:ba:90:23:fb:ee:c4:8b:c3:7b:68:f7:
ab:f3:6c:0b:6b:45:3f:d3:69:90:8b:09:4d:88:20:c6:89:69:
f6:05:f2:7c:d3:9f:69:2e:81:b6:8a:0c:bb:61:69:70:d0:0a:
1b:18:65:17:97:7b:c9:60:fd:23:6f:1b:e6:29:58:16:c8:09:
79:43:0e:3e:51:05:e2:0b:4a:96:42:23:02:1d:5d:1e:55:ca:
de:72:d8:ee:d8:b0:7f:51:c9:f6:1e:33:0c:b0:c4:8d:15:70:
d6:56:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org