Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/p8uaku4uTV8y7O-afhr_HnqPqe4.roa
File: p8uaku4uTV8y7O-afhr_HnqPqe4.roa (raw, json)
Hash identifier: rRjaSzdNepn75PDcNM4a9RrnHFlM9vz1JpwfjPG/fAY=
Subject key identifier: A7:CB:9A:92:EE:2E:4D:5F:32:EC:EF:9A:7E:1A:FF:1E:7A:8F:A9:EE
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DFD
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/p8uaku4uTV8y7O-afhr_HnqPqe4.roa
Signing time: Wed 29 Sep 2021 02:39:49 +0000
ROA not before: Wed 29 Sep 2021 02:39:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9311
IP address blocks: 210.63.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3581 (0xdfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:49 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A7CB9A92EE2E4D5F32ECEF9A7E1AFF1E7A8FA9EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:65:0c:bd:87:a6:41:7b:24:20:17:be:62:9e:
3d:98:8b:84:9d:4e:9f:fa:55:31:53:b2:87:89:18:
4d:82:55:2f:76:91:2c:03:68:be:fd:f0:fa:8e:d7:
98:a4:c6:8a:c9:17:3a:e9:27:53:e0:01:4e:82:60:
1d:be:b8:b0:da:77:06:c3:d9:80:c7:25:1e:f0:e0:
f6:18:1c:f9:14:28:18:b4:04:81:e8:9a:6f:ce:32:
a6:86:14:6e:21:3a:22:68:c2:5a:27:53:e7:64:b2:
4b:5c:c6:fa:49:8c:41:ca:6b:53:aa:f6:db:39:22:
7c:1e:64:1c:b1:f9:34:a0:5f:c2:11:9e:06:6a:cb:
b7:49:49:34:76:b5:2b:12:75:ac:a9:9e:40:75:69:
02:66:1c:d0:fc:7b:6e:00:b2:b2:e0:07:1c:9c:56:
2c:f0:bd:c8:17:6b:fe:2d:61:98:7f:03:54:02:ad:
d5:ef:87:0f:61:3c:b7:df:1c:bc:7a:d3:f4:4d:59:
98:11:45:e1:d3:b1:ea:22:c3:6c:b8:b9:8d:dd:37:
94:c0:86:1a:4d:98:5f:51:8f:78:ca:6c:e5:a1:b2:
e4:68:c1:46:8e:12:d5:a5:e6:03:58:91:18:02:f8:
48:6b:56:d4:fe:b8:44:6b:5d:a5:94:2d:af:4e:f2:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CB:9A:92:EE:2E:4D:5F:32:EC:EF:9A:7E:1A:FF:1E:7A:8F:A9:EE
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/p8uaku4uTV8y7O-afhr_HnqPqe4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:14:2a:bc:91:17:9f:89:c8:df:d5:1f:a8:73:01:9a:99:c2:
49:b6:ba:bd:95:4f:f9:2c:a6:3b:ff:fe:41:ba:f2:03:f9:0c:
79:63:88:29:d8:90:22:96:3e:71:d8:00:da:38:9e:5f:9c:cc:
31:65:da:4c:a9:8d:79:26:7c:2a:14:00:9d:76:5d:52:83:bf:
34:c9:8c:07:fa:27:1a:29:97:28:cc:4e:21:81:fb:28:68:89:
2f:da:ba:b6:d6:1e:8f:07:35:09:e3:a3:4f:e6:15:2c:c0:0b:
80:93:73:37:2d:5a:0a:6f:47:53:79:51:74:bb:88:45:c8:2c:
70:bc:fb:62:84:22:82:33:71:48:33:94:8a:79:f1:bc:b7:45:
1e:2e:64:3c:2e:46:6a:9c:07:a7:7e:01:63:d8:89:56:78:24:
3d:1e:5a:fc:25:9a:78:6c:e4:cc:2e:93:19:1e:37:0c:56:39:
a5:50:83:04:e3:6c:a7:44:0f:8c:02:b9:81:3c:1c:26:82:78:
04:78:24:74:64:2a:60:48:52:b3:c6:b6:bc:14:66:06:71:be:
aa:11:b5:16:d2:a3:57:06:7e:9d:6f:6e:ef:27:a1:83:cb:5c:
94:30:73:20:8a:f0:33:a3:7d:48:ff:84:da:4a:af:8d:06:ef:
c0:d6:12:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org