Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/qSABGfT5nLOLNQHeajYjdPY0yoE.roa
File: qSABGfT5nLOLNQHeajYjdPY0yoE.roa (raw, json)
Hash identifier: 473ie/nSug+owB8u7Ueb2DSih3VmeI6nu3l509b9z9o=
Subject key identifier: A9:20:01:19:F4:F9:9C:B3:8B:35:01:DE:6A:36:23:74:F6:34:CA:81
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 124E
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/qSABGfT5nLOLNQHeajYjdPY0yoE.roa
Signing time: Fri 01 Sep 2023 08:04:18 +0000
ROA not before: Fri 01 Sep 2023 08:04:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 210.200.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4686 (0x124e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A9200119F4F99CB38B3501DE6A362374F634CA81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ec:42:4a:6a:97:6d:3b:48:14:7c:cd:27:b0:
ac:62:2a:a6:00:fa:2c:40:d7:32:9b:42:da:c2:ae:
1d:f3:7c:48:00:c1:ea:82:a1:e2:b9:0c:91:b2:3e:
28:f7:88:67:ac:c5:cd:57:85:9f:a0:9d:71:16:7a:
dd:ac:32:eb:d5:3c:fe:03:88:f2:5c:88:aa:bd:68:
76:56:ce:e2:d7:df:4e:e3:e8:b9:89:f9:1a:33:25:
0d:19:1b:ea:69:b3:36:9b:36:97:bd:6e:c9:3e:63:
3f:25:94:fe:57:6a:fd:82:f3:63:6b:26:55:48:ae:
f0:6b:cd:a3:01:2e:d4:ee:dc:8d:68:6f:0f:ed:91:
7c:a4:22:81:16:35:19:c8:dc:08:d4:73:b8:e4:fe:
57:c5:e3:27:82:fc:0a:52:55:66:96:c4:38:a3:a5:
e4:d6:48:07:27:8e:34:54:32:4a:5b:33:8a:ee:21:
cb:1d:1f:47:b9:89:4e:c3:63:13:9b:43:b1:bc:33:
7a:60:32:a6:55:fb:88:6a:ac:80:6b:ab:7c:33:6f:
6c:77:02:0e:96:ad:bc:d7:e5:58:33:0d:76:f5:5f:
89:a3:95:39:5b:34:6b:8b:fe:58:fd:52:0c:08:50:
9b:bf:a4:05:0e:92:77:d6:13:fd:b6:7d:55:2c:70:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:20:01:19:F4:F9:9C:B3:8B:35:01:DE:6A:36:23:74:F6:34:CA:81
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/qSABGfT5nLOLNQHeajYjdPY0yoE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.83.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:85:95:41:50:13:f1:4b:1e:62:c9:45:29:03:2e:b9:25:69:
9a:3c:2f:fb:6e:c8:85:cb:10:92:c0:fc:7e:0a:8e:6c:7e:d6:
fa:6d:6b:d0:ec:ff:fa:ce:22:3e:20:0f:76:66:69:50:09:08:
b9:6f:2f:f5:40:f1:53:ba:3d:9f:84:6a:6c:1f:cd:f9:21:e7:
32:45:a0:51:ce:56:2b:a0:7d:17:e3:08:6c:50:dd:65:2b:b8:
2e:30:59:0d:e1:ed:d8:19:ca:80:34:89:d6:bc:7e:80:29:92:
45:29:3d:ae:a6:c4:e4:b7:35:35:08:c3:37:e9:47:10:d8:5c:
de:e1:76:7f:b7:dc:ac:e3:fc:d4:e9:db:67:1c:bc:42:c4:59:
4d:74:0b:97:0c:05:76:cd:e5:25:e7:e0:ff:71:99:b3:6a:8d:
19:00:1f:b6:9e:c3:e3:2d:17:a7:d8:57:a6:43:e4:1c:c7:28:
0f:06:c0:8d:cb:f1:b9:c8:2b:44:64:f2:54:37:58:b1:41:77:
c6:29:99:b3:5c:8d:b2:37:8d:1e:1a:a6:4a:0c:1d:70:c8:07:
1d:b0:03:6c:6d:da:8f:3c:77:a7:4b:b4:80:08:61:9c:20:0a:
a1:0a:fa:4a:99:d2:e0:d4:2c:1e:eb:ea:14:f8:6c:44:be:19:
c9:f2:f7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org