Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/p-0SgBtDF0oKxYervdW_cX1H9jA.roa
File: p-0SgBtDF0oKxYervdW_cX1H9jA.roa (raw, json)
Hash identifier: X15TY2ir7y7ZxsEhYEW3yEFevZUbBHUua4OEYImEAhY=
Subject key identifier: A7:ED:12:80:1B:43:17:4A:0A:C5:87:AB:BD:D5:BF:71:7D:47:F6:30
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1041
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/p-0SgBtDF0oKxYervdW_cX1H9jA.roa
Signing time: Tue 16 May 2023 08:35:57 +0000
ROA not before: Tue 16 May 2023 08:35:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 210.200.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4161 (0x1041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:35:57 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A7ED12801B43174A0AC587ABBDD5BF717D47F630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:47:ce:6c:f7:84:21:bd:1b:9e:93:53:cd:
0e:df:80:33:17:33:a7:84:9a:e4:54:d5:89:db:22:
6d:98:55:88:1e:9e:f0:d2:bb:03:58:34:80:61:27:
16:16:9a:37:b0:1f:ce:5f:0d:1c:e8:20:1a:0b:13:
af:27:a9:14:48:bf:ee:fd:7d:6d:46:50:5a:5c:d5:
8c:5a:9e:33:85:67:5e:b6:f2:71:f0:e2:fc:91:9c:
41:97:b8:2b:08:e0:46:e9:24:9d:bd:de:f0:6e:09:
33:dc:df:c4:0f:b2:a3:67:9d:3c:f9:eb:e9:7c:57:
41:95:77:fd:ff:4a:0c:25:01:a1:d4:8d:ce:57:c8:
18:07:53:81:e4:c3:94:43:36:40:60:4c:71:bc:d6:
e6:0f:ba:34:ab:95:ed:73:0d:ee:16:93:1c:93:55:
87:5a:a4:0e:06:f6:97:8e:8c:dd:c6:ea:9e:5b:f5:
91:ab:ae:8e:38:b1:0d:52:0b:29:22:4d:d2:a8:b7:
71:64:a8:96:82:9f:4e:06:00:21:f3:13:2f:e9:2b:
a6:e6:0c:83:f6:b0:a5:d5:a8:75:c5:ce:c5:57:3b:
c8:03:d3:58:61:ff:53:b7:5f:b8:fb:70:2c:ed:07:
72:be:f3:5f:e4:cf:5b:5b:6f:f9:1e:2c:16:78:bf:
97:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:ED:12:80:1B:43:17:4A:0A:C5:87:AB:BD:D5:BF:71:7D:47:F6:30
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/p-0SgBtDF0oKxYervdW_cX1H9jA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.79.0/24
Signature Algorithm: sha256WithRSAEncryption
04:8a:aa:6f:ef:2b:cb:00:1a:50:e1:d0:7c:fa:fe:63:88:95:
61:83:44:fb:c5:63:6c:08:ab:6c:5b:50:e4:a8:ba:2c:3f:ff:
01:8a:b0:69:b8:55:4f:63:13:36:37:90:e7:6f:74:5e:a1:64:
a9:2e:69:fe:db:6a:8e:de:b5:74:84:44:ec:65:df:59:ef:e9:
dd:6e:33:cb:90:4a:60:0e:50:f3:98:9f:33:2d:0c:4a:09:1d:
b4:52:fa:e4:46:a7:eb:7e:0e:a8:23:90:f3:5f:95:25:84:67:
4d:10:90:48:9f:9e:fe:b6:44:c1:c6:bc:59:34:11:b9:ac:3e:
7a:87:d2:d5:01:29:9f:2e:44:c5:d0:27:e1:65:8d:66:72:5c:
4c:0d:4f:2a:16:68:10:22:b5:2c:7c:30:b6:ca:e2:1a:a4:5a:
df:bb:8e:e1:82:53:90:62:0b:69:f7:e3:f5:61:40:9c:8c:55:
0d:18:b9:4c:99:e9:9a:16:72:2b:2a:1f:ce:5b:1a:eb:9a:5f:
f9:84:e0:4c:a6:c6:ff:2f:de:fe:c6:95:34:cc:f1:ae:2c:11:
a8:57:ac:f2:e0:37:bd:e5:e9:00:7f:b9:2f:35:17:ad:1f:e2:
1d:ac:53:8d:a4:46:b7:5d:ab:b9:af:15:ff:af:d9:83:a0:4c:
d2:28:9b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org