Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/pxE7Fwhldkxc8kHsgDfzKKlQS6k.roa
File: pxE7Fwhldkxc8kHsgDfzKKlQS6k.roa (raw, json)
Hash identifier: LLYX+0K+hm5ncIyjVx7bsA1aHcttM+EzRwxKs+yKoWg=
Subject key identifier: A7:11:3B:17:08:65:76:4C:5C:F2:41:EC:80:37:F3:28:A9:50:4B:A9
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/pxE7Fwhldkxc8kHsgDfzKKlQS6k.roa
Signing time: Thu 15 Sep 2022 02:40:05 +0000
ROA not before: Thu 15 Sep 2022 02:40:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 203.79.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A7113B170865764C5CF241EC8037F328A9504BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:a9:a8:e6:88:ab:ec:40:44:57:f5:61:89:
82:78:5f:b9:2c:96:54:94:81:21:d2:ea:20:a9:0a:
a7:26:e3:7e:7d:70:3d:5d:cc:69:ab:2f:96:a2:0d:
24:20:04:49:e1:ff:b7:66:e2:06:fb:0c:28:9b:85:
26:3e:f6:8e:c5:e2:e2:b3:c2:ae:d1:99:2e:c0:11:
aa:84:e0:a1:32:13:c7:e3:98:c3:f9:25:70:77:7e:
94:3a:f8:fc:71:c4:ad:0a:27:c0:b9:1a:c0:be:2c:
76:94:e6:76:f8:37:d9:c1:26:dd:99:5d:fd:ba:79:
7d:48:0c:63:48:ce:a6:8f:a4:74:74:a8:26:81:23:
4e:0a:ab:9f:27:bc:3b:02:7b:f7:08:ef:48:8d:e4:
50:34:02:96:da:7e:44:9e:83:2a:9d:63:12:e4:af:
2f:8b:e7:2c:60:63:d9:51:9e:2e:d6:e8:bc:03:25:
67:39:fd:29:d8:ed:d3:1b:c6:45:e4:df:df:50:5a:
32:f6:eb:83:b5:11:38:7a:5e:ab:09:9c:30:3e:0f:
07:b4:87:b1:22:26:24:2e:d2:d5:3f:d9:ed:1a:cf:
ed:21:47:ef:30:f4:22:72:fc:c2:6a:a1:a4:b5:ae:
48:64:6b:6c:3d:02:04:bb:b9:de:49:f7:43:ae:3d:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:11:3B:17:08:65:76:4C:5C:F2:41:EC:80:37:F3:28:A9:50:4B:A9
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/pxE7Fwhldkxc8kHsgDfzKKlQS6k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.216.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:8c:bc:95:8a:03:69:29:de:7e:97:7c:0c:34:c2:a1:b8:7a:
29:cd:e4:26:d9:ef:e9:79:5f:b0:44:2d:16:60:99:c9:1e:35:
a9:4b:f1:af:e6:6f:86:4a:90:46:9e:53:13:fc:bc:95:15:bd:
98:f6:ae:68:da:e7:6b:88:41:dc:b4:66:cd:dd:1b:bc:2f:44:
cc:dd:e8:a8:e5:67:f7:7d:bb:1c:99:5b:fd:d8:6d:34:60:6e:
17:d1:1d:9b:ec:03:be:f0:b4:d3:5e:2c:33:72:1c:fa:d7:b4:
18:23:0c:d4:fd:46:da:fb:63:0f:09:da:f0:d3:de:7b:c8:fb:
18:36:53:76:3b:d7:a7:7d:63:97:da:96:18:60:dc:07:dc:1d:
26:8a:82:88:a0:fa:43:1c:e9:30:f3:46:39:74:ac:be:ab:e9:
89:d8:67:e0:23:9d:f1:ef:93:6a:9f:2d:ec:93:c8:89:9b:63:
b5:28:21:9a:04:07:80:24:3b:ad:79:50:cb:ad:82:2d:07:5b:
f3:70:97:a5:e1:ca:da:f7:22:8e:89:7b:3c:51:25:55:7b:8a:
d6:1c:c9:c4:bb:21:6e:f8:d6:32:c0:92:39:d5:e0:f6:30:dd:
04:30:a1:6c:94:85:a5:2e:d4:b6:b1:9e:15:90:eb:d8:16:ee:
ac:90:0a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org