Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/pJg-IkhTIBfyoX0bfiFnfoC3r3s.roa
File: pJg-IkhTIBfyoX0bfiFnfoC3r3s.roa (raw, json)
Hash identifier: tqyNibq9GB2okEerkNW8trtG2Zu4Iuu7oAO7W3w8oc4=
Subject key identifier: A4:98:3E:22:48:53:20:17:F2:A1:7D:1B:7E:21:67:7E:80:B7:AF:7B
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/pJg-IkhTIBfyoX0bfiFnfoC3r3s.roa
Signing time: Thu 15 Sep 2022 02:40:10 +0000
ROA not before: Thu 15 Sep 2022 02:40:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.201.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A4983E2248532017F2A17D1B7E21677E80B7AF7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:c2:76:3e:2d:9d:61:98:79:77:08:19:63:
88:88:26:5f:a0:14:da:40:74:88:bc:bf:62:98:92:
ca:20:ee:b9:66:0d:04:94:96:97:d9:6b:43:89:e3:
d2:c0:0b:df:eb:64:dd:a6:0b:e5:f3:93:b8:7b:b9:
e9:7c:18:f6:2c:23:3e:49:57:e4:ab:cf:72:11:96:
b3:d4:8e:2d:e1:4f:b0:da:b3:0b:51:39:9e:9d:e6:
be:54:09:a6:3e:4c:a1:af:eb:6a:27:5c:ec:c5:88:
26:19:cc:62:b0:86:9f:05:51:84:02:bb:40:0f:47:
3d:ad:73:b3:20:d4:18:f8:8f:77:58:21:0c:12:89:
ad:89:f3:8a:34:79:52:40:62:42:69:14:23:9b:f1:
06:ae:14:5e:ce:d1:8f:a4:78:7b:b7:12:8d:7b:d3:
72:e9:e6:d5:55:53:3f:99:e9:37:7e:ff:19:62:74:
28:e9:66:5e:dc:86:0f:98:0a:75:73:a8:11:e7:84:
d8:b5:46:38:06:9c:cb:c0:d7:98:de:07:76:2a:9d:
c7:8b:aa:1e:13:f2:03:d5:aa:74:b1:46:28:9a:0f:
3c:76:eb:e0:4a:c6:5c:7d:9c:c0:1f:74:43:70:c1:
18:a4:1a:2e:f1:74:40:4e:66:a2:38:04:96:f2:08:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:98:3E:22:48:53:20:17:F2:A1:7D:1B:7E:21:67:7E:80:B7:AF:7B
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/pJg-IkhTIBfyoX0bfiFnfoC3r3s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.78.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b5:3c:ae:95:3d:2f:b4:3e:6b:51:a0:0e:05:2a:09:f4:1e:
f1:b1:02:40:0b:a3:12:79:67:88:aa:85:14:fa:ed:a5:68:88:
3f:98:19:59:01:c8:a3:89:83:f9:49:6c:2f:9c:a9:50:f9:25:
2e:9b:c1:2b:e4:41:a1:6c:84:48:b3:8b:41:2c:4f:3d:88:22:
77:11:d6:19:db:a3:7f:a9:d9:44:cc:e8:3d:9e:65:eb:ff:1a:
d0:5f:68:69:b2:0c:8d:92:93:e1:75:f7:37:04:a3:9e:2b:8b:
3c:4a:99:14:19:7b:d3:a9:72:9b:a9:3d:2f:f7:2f:f0:ca:ca:
17:f2:7f:97:56:29:a2:bf:74:b6:b5:c6:80:41:28:67:68:0b:
eb:40:a5:23:2d:01:07:ff:04:60:a4:93:7f:cb:e7:33:11:55:
90:6d:74:38:9c:ae:17:a6:e6:ff:54:6d:c3:fe:1a:88:d0:a7:
64:a5:63:7c:08:59:65:8a:59:62:f7:a4:48:42:0a:7c:b8:cf:
56:f2:49:c1:53:bb:e0:c4:08:33:31:e7:d6:06:8e:de:a9:61:
5f:e9:9c:7a:84:56:4a:15:df:d7:5a:a5:60:0d:fb:02:0a:bb:
4d:9e:92:43:fe:75:62:e4:7b:97:71:92:70:b2:4d:71:44:de:
f6:11:be:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org