Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/pR4yRcRTFZeJS9rZkUQZQd2TDlg.roa
File: pR4yRcRTFZeJS9rZkUQZQd2TDlg.roa (raw, json)
Hash identifier: T6kA9C/2602vjhM4E7yCNIcfF5zb/8ayUT6CIB8AcXY=
Subject key identifier: A5:1E:32:45:C4:53:15:97:89:4B:DA:D9:91:44:19:41:DD:93:0E:58
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C53
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/pR4yRcRTFZeJS9rZkUQZQd2TDlg.roa
Signing time: Sun 07 Feb 2021 11:35:42 +0000
ROA not before: Sun 07 Feb 2021 11:35:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 222.156.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3155 (0xc53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:35:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A51E3245C4531597894BDAD991441941DD930E58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:34:c6:3b:0c:31:02:ba:c6:ae:db:05:bb:
30:d0:2d:e9:c2:9b:f7:5b:65:8f:a7:c3:5c:41:e3:
99:c1:70:fa:a0:0f:6f:86:30:d2:2d:a6:bc:d8:6b:
f2:47:20:6f:e2:21:a1:fd:19:b2:10:ce:98:61:01:
26:42:27:20:32:4d:c3:0d:be:d6:04:81:1c:ca:34:
8c:e7:7e:c2:81:19:e8:87:c9:78:4d:f8:6f:90:dc:
bb:4e:96:83:2c:72:46:f8:e1:dd:31:12:f5:93:90:
60:e6:fd:3e:7a:5b:8f:25:e5:e0:aa:9c:86:d5:b2:
fb:10:92:86:59:19:d5:31:f3:66:73:0b:69:3c:98:
b9:15:e9:df:ef:31:52:a3:dc:0a:f2:94:13:12:e8:
53:26:f4:6b:b4:be:fa:ef:11:31:ff:d5:05:72:bb:
f1:c6:7c:c8:51:bf:07:48:39:03:1e:88:58:40:7d:
dc:ae:86:ef:44:9d:e4:b9:60:b9:44:29:61:ea:11:
a0:10:68:59:72:ce:13:41:48:aa:3a:fa:ce:ab:3a:
84:e6:81:d2:0f:6a:25:ba:c8:90:8e:c8:ac:3b:1b:
be:1c:11:25:4f:db:53:e7:3c:41:63:d4:74:5a:3b:
f2:e0:6f:cc:43:3e:08:51:de:b1:76:db:c7:2c:3f:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1E:32:45:C4:53:15:97:89:4B:DA:D9:91:44:19:41:DD:93:0E:58
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/pR4yRcRTFZeJS9rZkUQZQd2TDlg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.156.247.0/24
Signature Algorithm: sha256WithRSAEncryption
05:6b:ad:99:e8:30:47:6d:c6:01:84:ad:89:1b:cd:5d:9e:79:
c7:d6:cd:15:c5:3d:14:f6:04:03:94:c7:ef:bf:0b:bf:b0:5d:
ce:40:29:82:5c:a2:0c:35:28:84:95:47:a8:e3:90:91:ee:2a:
34:2d:7a:27:1c:7a:9a:9b:6b:71:95:f3:28:90:06:90:41:47:
2c:e6:09:b5:5c:d8:78:a1:c9:6e:9e:16:85:57:14:16:0c:58:
ee:a0:87:d1:67:9d:e8:36:7a:8b:1e:4d:6a:7b:4c:35:bb:0c:
ac:49:9b:f1:e4:a7:57:93:95:cd:b1:4f:6a:9e:18:fa:82:9d:
51:e7:ce:28:50:6d:8d:5f:c3:7f:f8:38:b0:90:5e:cb:a7:69:
dd:9c:65:b3:a9:04:84:77:18:ab:d6:2f:53:8d:b1:14:72:92:
df:00:8a:94:9d:87:aa:6b:2f:b5:a7:b4:97:d5:32:a8:eb:5f:
80:a2:11:9a:27:49:94:53:6b:3f:1f:f4:26:e5:7e:2c:db:3c:
c0:29:7f:08:1b:04:30:88:a3:42:96:dc:7a:8e:f4:f3:d0:bb:
15:0c:71:1b:53:12:05:b1:11:a7:03:9c:b1:fa:71:af:7d:cc:
5d:fb:f2:68:02:21:aa:19:1d:92:e4:2a:41:03:38:49:03:9a:
7b:97:28:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org