Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/owqW_u4A3_MiolZCDxVKlsV8xFg.roa
File: owqW_u4A3_MiolZCDxVKlsV8xFg.roa (raw, json)
Hash identifier: mdcPi41QdzSMhJ9L0vL93v5te56q/ApMXEAbZ9VVtb0=
Subject key identifier: A3:0A:96:FE:EE:00:DF:F3:22:A2:56:42:0F:15:4A:96:C5:7C:C4:58
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 08DF
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/owqW_u4A3_MiolZCDxVKlsV8xFg.roa
Signing time: Tue 29 Sep 2020 10:01:11 +0000
ROA not before: Tue 29 Sep 2020 10:01:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 210.200.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2271 (0x8df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:11 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A30A96FEEE00DFF322A256420F154A96C57CC458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:30:cd:41:bb:08:d1:de:29:14:00:98:b5:
d1:02:da:80:72:53:a8:83:0a:90:08:93:ad:ac:bd:
bb:8d:4d:11:a9:45:47:1e:ba:aa:26:34:79:96:5c:
64:6b:c3:aa:49:90:7d:e0:b5:13:12:40:22:ad:42:
a0:37:8b:f1:cb:b0:56:a3:17:d5:4e:eb:5a:e9:68:
9e:c8:ba:3c:87:14:d9:00:28:02:e9:70:77:2c:98:
9c:c4:47:d9:50:df:40:3c:9c:19:16:e2:22:ff:66:
8f:ea:a7:ff:8b:a4:be:c8:b3:8f:00:a0:5e:48:0e:
c2:8b:15:8f:fd:cf:75:fa:ae:2e:dc:ac:c5:5f:50:
b5:4b:73:d6:d5:19:ea:97:66:b5:61:70:25:09:55:
77:f5:45:31:88:8c:cb:d3:97:60:41:65:49:0c:c2:
0b:76:e8:e9:ae:6f:80:99:0a:a8:6e:9f:70:71:e3:
60:61:7e:47:f9:78:13:49:cb:25:b8:6e:6c:89:bb:
de:fd:be:55:c6:49:7c:ac:68:30:9e:37:c3:36:06:
65:4e:a9:40:88:be:67:54:e3:97:85:dd:5d:70:12:
1e:ce:3b:5d:49:e2:88:7a:67:4b:bf:92:99:3f:0d:
f6:97:2d:df:61:4d:80:99:c1:57:66:80:5c:6e:ad:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0A:96:FE:EE:00:DF:F3:22:A2:56:42:0F:15:4A:96:C5:7C:C4:58
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/owqW_u4A3_MiolZCDxVKlsV8xFg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.128.0/18
Signature Algorithm: sha256WithRSAEncryption
c1:af:ad:e0:11:fd:cf:2c:0e:a1:07:28:a7:37:20:1c:91:12:
dc:45:79:2f:d4:c7:db:cc:45:7f:30:3f:6d:be:9b:67:31:fb:
ad:f0:41:55:18:40:0e:ab:27:2d:d9:11:40:c9:95:ac:96:ca:
89:b2:1e:27:43:0e:28:f6:20:65:a4:27:93:58:31:dc:56:84:
c4:82:8a:04:46:9c:f3:11:f0:ff:7a:0c:cd:1f:6b:1a:59:28:
2a:01:d1:72:dc:33:db:25:1a:9a:75:9d:6d:d8:ea:39:ae:24:
ea:5e:0a:6e:97:7d:f0:2d:94:cf:49:6e:63:cd:8e:a9:95:fe:
f6:c6:f3:9b:f7:83:41:b5:13:3d:da:9f:7e:42:8e:f4:62:4d:
57:6d:3a:3b:7d:43:1e:28:0f:9d:8b:02:0e:47:86:b1:12:c3:
88:52:5f:f6:01:44:76:e2:d8:65:e5:8b:10:94:3b:e4:c5:54:
a8:23:41:34:5c:c2:ac:64:c6:bb:9f:67:31:0e:f1:1a:60:6d:
d9:7e:90:f1:59:b9:77:3b:75:a6:ef:50:12:6d:1f:b6:d6:64:
56:a2:c8:30:f0:ee:c4:60:a0:79:f9:5b:81:ca:ec:86:be:b9:
06:bb:65:9d:bc:83:a0:e9:bd:4c:8c:de:07:e6:80:88:32:b4:
e5:28:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org