Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/q2kvMQdAw2uOr6oTVgh8l13llHM.roa
File: q2kvMQdAw2uOr6oTVgh8l13llHM.roa (raw, json)
Hash identifier: mwUgP8Y3+aRPcQeOhqMmZd8KTEus0/L4EwXZd7LZhNI=
Subject key identifier: AB:69:2F:31:07:40:C3:6B:8E:AF:AA:13:56:08:7C:97:5D:E5:94:73
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/q2kvMQdAw2uOr6oTVgh8l13llHM.roa
Signing time: Thu 15 Sep 2022 02:40:30 +0000
ROA not before: Thu 15 Sep 2022 02:40:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 210.58.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AB692F310740C36B8EAFAA1356087C975DE59473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:6c:03:4d:a9:2e:34:30:61:93:17:bd:c4:
6f:35:09:89:2e:ec:16:89:a2:0e:b2:47:1b:59:4d:
7f:f9:82:fa:9b:f0:46:7b:f8:e3:7e:69:bc:31:98:
63:e0:dd:ca:27:bd:9b:7f:74:c8:db:06:30:81:b6:
96:a8:58:d6:62:ec:07:19:85:1a:56:18:78:93:47:
ac:4f:36:b8:8a:89:21:10:ee:9b:36:bc:9a:ed:1e:
b3:c1:02:59:c6:de:2e:7c:35:3e:29:1b:d0:1e:87:
72:ec:4c:36:79:96:3f:93:ba:69:65:ca:9f:e2:cf:
e9:c4:41:c4:f0:35:aa:00:a2:64:60:38:2a:df:13:
d6:05:03:6c:b1:c5:a2:44:f6:c9:ea:1d:c9:c6:00:
b5:c9:09:09:40:a0:34:7d:62:4a:fa:88:55:16:57:
02:73:19:0f:fb:bb:bd:35:72:22:6a:8c:2a:b1:54:
e5:63:05:3b:71:86:ad:6b:f3:88:a6:1b:9c:94:0b:
72:25:59:87:d3:79:75:65:77:1a:67:54:19:3b:ad:
3f:a4:e5:48:f0:5a:da:40:41:d4:42:52:ba:ff:9a:
5f:14:92:04:fb:de:c0:b9:eb:81:55:81:f1:b1:1b:
c7:3c:dd:7c:83:a7:76:98:9e:ff:07:c5:53:03:05:
54:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:69:2F:31:07:40:C3:6B:8E:AF:AA:13:56:08:7C:97:5D:E5:94:73
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/q2kvMQdAw2uOr6oTVgh8l13llHM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.128.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:33:9d:54:ce:9f:14:1d:9a:ca:22:db:34:3a:69:bf:ba:ba:
46:2c:eb:77:a8:04:ca:38:45:10:63:8f:6f:8d:f8:ae:61:40:
72:21:84:51:71:71:a4:ba:5b:8a:cc:25:fa:cb:01:ae:9a:89:
ec:e7:95:d7:55:6c:c8:97:b7:81:63:e8:71:44:03:9f:c3:99:
b5:3d:6e:2c:35:2d:c6:0c:96:82:54:1f:6a:b0:97:0b:1c:c2:
0b:9c:46:21:90:43:8e:3e:82:0a:00:e7:d4:ce:c5:14:97:da:
04:45:cb:33:2d:cd:66:c5:c4:20:db:52:a9:7a:e1:d0:48:ae:
2f:50:0b:9d:2a:97:f0:74:e9:ac:14:21:94:9b:cc:3a:e1:ea:
b1:5c:2a:c7:91:c4:3a:ed:57:0d:50:b6:f1:50:1f:68:b7:fd:
72:49:33:ab:f1:91:cf:43:b9:26:db:3f:a3:9b:f3:35:4e:57:
e4:f9:9a:6e:14:cf:25:1d:19:dd:5c:b9:29:cd:68:b0:fb:6b:
b6:9e:70:c3:81:4b:a6:04:77:79:dc:33:13:ac:91:ff:55:72:
2d:60:44:67:49:b5:26:e2:32:a1:7e:c6:9c:2d:66:7c:04:de:
45:17:ad:13:e2:a3:86:05:e0:15:c9:41:04:25:a6:06:42:93:
b3:30:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org