Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/re4wfRVdz91uyM8hfdW9oLEULBU.roa
File: re4wfRVdz91uyM8hfdW9oLEULBU.roa (raw, json)
Hash identifier: PSXl/C6jsbRoE2jFL0p3/u7gBqYj9aaKpPTGEwJu+Ao=
Subject key identifier: AD:EE:30:7D:15:5D:CF:DD:6E:C8:CF:21:7D:D5:BD:A0:B1:14:2C:15
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12A4
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/re4wfRVdz91uyM8hfdW9oLEULBU.roa
Signing time: Fri 01 Sep 2023 08:04:45 +0000
ROA not before: Fri 01 Sep 2023 08:04:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 124.219.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4772 (0x12a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=ADEE307D155DCFDD6EC8CF217DD5BDA0B1142C15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4c:54:99:70:66:94:56:c2:1b:83:61:d3:78:
f9:ff:87:7c:ed:fd:c4:ef:90:91:87:c3:31:de:56:
4e:d8:7f:08:f9:66:b1:11:6f:b0:32:c2:1b:0b:de:
32:35:aa:c4:36:71:c5:c2:c4:f6:60:4f:b3:9d:a7:
f9:53:68:12:26:f4:fc:05:2d:be:63:73:37:04:63:
b1:63:eb:be:38:2f:7e:5c:00:95:e9:d8:e7:18:e4:
4d:eb:e9:3d:18:57:0f:fb:f4:fc:b0:5e:00:8c:fd:
0e:81:3c:11:0c:ea:69:6a:95:44:00:0b:27:ce:34:
fe:e8:f2:9f:4c:69:59:92:c1:0c:2d:bd:c2:df:b9:
9f:21:16:a1:7f:95:9f:ed:03:20:26:c2:ef:2a:fa:
8d:76:05:71:60:9a:1c:b8:3d:73:61:eb:16:cd:f4:
d9:89:af:79:ed:24:3a:d1:7e:43:ab:b6:4c:6c:19:
97:a3:ce:2d:a1:0c:37:b9:e0:46:2f:47:07:53:9c:
e2:b2:b0:76:b9:9d:34:db:e7:2f:ce:7a:75:ca:2b:
48:ca:12:2a:a8:68:6a:4d:f5:e7:37:fc:7c:9e:86:
df:5b:59:6b:62:75:a4:87:2d:1f:d9:01:08:25:36:
35:d7:19:3f:b4:b5:c9:9f:6c:43:19:51:6d:3d:bf:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EE:30:7D:15:5D:CF:DD:6E:C8:CF:21:7D:D5:BD:A0:B1:14:2C:15
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/re4wfRVdz91uyM8hfdW9oLEULBU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.219.0.0/17
Signature Algorithm: sha256WithRSAEncryption
1c:e5:a1:ee:bf:91:a0:93:98:22:67:9d:48:39:c8:68:c6:52:
5b:b7:4f:91:6c:f7:11:c2:fc:1e:da:4d:bf:d8:52:54:5d:88:
77:d7:c9:be:42:cf:23:0b:bb:e6:97:59:3c:91:75:91:5b:09:
de:77:1a:ef:30:77:30:55:c7:7d:3b:3f:d7:71:d2:3a:a4:0e:
1e:9e:c8:18:19:d2:d5:89:59:4f:a2:60:29:14:9c:5b:26:c7:
cb:ea:87:a3:d4:c3:94:b1:43:dd:38:f1:d0:15:bf:ea:5e:e0:
e6:1a:80:b2:c1:ec:08:1a:fc:80:cf:64:35:18:9e:bc:56:f5:
f2:04:f3:87:87:39:90:cb:f3:33:b8:35:75:82:9a:58:d8:ef:
93:55:94:c1:b3:61:d2:01:69:d9:a2:cb:ca:b5:e4:21:03:a4:
48:3a:4e:e0:9a:fa:f9:a5:08:20:91:f5:2c:ed:05:24:76:d7:
67:76:56:b9:8a:2f:bd:7c:17:b8:af:31:04:22:d2:62:b8:8e:
31:70:47:4d:dc:14:55:1b:8c:52:ad:94:f9:dd:92:2c:bc:c0:
55:9a:e1:d0:1b:5e:d0:70:42:5a:ed:d4:3b:75:ce:43:b9:35:
0e:09:4b:d4:31:d2:9f:6e:1a:fe:84:90:70:36:d4:4b:16:fb:
a6:67:8e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org