Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/owwYXkvFA8vFQLMwpyyY6Eetl6E.roa
File: owwYXkvFA8vFQLMwpyyY6Eetl6E.roa (raw, json)
Hash identifier: qIgDs6qauHCI5Dxe6tLqFMdaECtBJMiRT1FeILnxp+g=
Subject key identifier: A3:0C:18:5E:4B:C5:03:CB:C5:40:B3:30:A7:2C:98:E8:47:AD:97:A1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1269
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/owwYXkvFA8vFQLMwpyyY6Eetl6E.roa
Signing time: Fri 01 Sep 2023 08:04:25 +0000
ROA not before: Fri 01 Sep 2023 08:04:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 222.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4713 (0x1269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A30C185E4BC503CBC540B330A72C98E847AD97A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:7f:88:9f:31:f4:74:e5:ad:45:3f:4e:7f:
1d:1d:cc:ed:5d:e8:32:bd:1b:35:08:0d:a1:5d:45:
1f:10:7e:6c:c8:4e:a0:98:4f:e6:01:b0:e5:82:53:
07:91:09:51:78:a1:14:1a:f8:4b:34:82:01:01:b2:
45:1d:64:3f:25:5a:bf:e1:43:2a:f6:43:1b:e4:8d:
41:f1:6b:23:cf:59:fb:77:fa:06:90:c5:92:01:4f:
4c:b9:d4:84:f9:e2:25:b1:ab:22:8d:25:45:ec:64:
56:67:25:0f:6a:34:bc:cb:e9:86:10:06:f2:a4:32:
c0:26:5e:ec:73:41:9f:0c:b6:da:dd:32:65:6b:00:
bc:6f:e6:5a:01:47:05:78:3f:19:cb:ef:fa:62:8e:
e9:d3:67:97:b0:8a:87:62:10:8d:2a:16:9b:cd:b6:
23:79:36:d9:07:b9:9e:c2:d6:48:75:09:fc:ef:6b:
14:50:22:22:d2:cf:f3:11:c0:7b:e1:c3:60:b5:60:
50:72:6c:f4:49:93:db:45:74:dc:95:12:be:b6:c4:
36:88:7e:a9:16:0b:d8:5f:01:ac:26:b2:81:5e:08:
e6:99:30:0a:4f:a2:00:a9:b5:8b:90:7f:97:9c:ee:
eb:e4:cf:01:59:bc:ec:d5:d9:f7:0f:0a:6a:96:7d:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0C:18:5E:4B:C5:03:CB:C5:40:B3:30:A7:2C:98:E8:47:AD:97:A1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/owwYXkvFA8vFQLMwpyyY6Eetl6E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.156.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:9d:08:34:f4:3d:9f:ea:8f:de:ed:a7:ad:fb:af:c9:68:f5:
64:2b:42:3a:df:36:e2:b2:26:12:e4:08:e6:e7:29:8d:b6:13:
e4:da:a0:e6:6b:4a:46:11:ac:80:5d:67:de:7d:38:92:12:4e:
68:93:96:38:bb:57:15:ec:77:7d:21:a1:5d:ef:22:5a:d6:d0:
c0:03:c8:a7:8e:05:84:0c:7c:bc:fa:1e:51:af:6c:01:d4:2d:
ce:e2:8f:7a:d7:09:11:c8:72:64:a0:4a:7b:22:e3:67:00:74:
c8:7b:6d:e7:79:0a:06:3b:c4:14:77:e5:db:66:75:42:36:da:
22:d7:3a:fa:9b:51:77:eb:df:4d:d6:45:f5:b4:f6:9c:76:ba:
90:72:32:67:5e:49:6b:0b:fa:09:f4:bb:54:56:70:61:74:c1:
39:5f:0a:22:fe:27:8f:26:2c:f8:b2:4c:b5:4c:56:bc:d7:c9:
4c:76:3a:83:9f:f6:a6:a9:ea:38:e1:ca:a3:38:1d:16:3e:eb:
96:28:ae:d5:3b:0e:fb:14:94:41:f9:22:43:30:da:31:46:6c:
0b:c3:a0:62:70:5c:69:26:e0:f2:17:b8:77:8e:3b:c0:3a:3b:
b7:b1:d3:c6:e8:2e:70:ab:02:dd:27:e0:c3:e0:96:1b:5e:10:
9f:27:d2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:50:43 2024 by rpki-client on console-fra.rpki-client.org