Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/relB9yEcjk2b7VI4umeDduCJeF0.roa
File: relB9yEcjk2b7VI4umeDduCJeF0.roa (raw, json)
Hash identifier: VLwUehsRXgJWkht6MgIzUo1OI80c7rE+oPbus0FYMyA=
Subject key identifier: AD:E9:41:F7:21:1C:8E:4D:9B:ED:52:38:BA:67:83:76:E0:89:78:5D
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/relB9yEcjk2b7VI4umeDduCJeF0.roa
Signing time: Thu 15 Sep 2022 02:40:19 +0000
ROA not before: Thu 15 Sep 2022 02:40:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 203.79.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ADE941F7211C8E4D9BED5238BA678376E089785D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:98:83:e9:5e:69:05:61:99:64:20:b0:31:
1d:35:c8:6f:69:e9:c9:2f:de:72:22:83:cc:40:e8:
64:82:2a:b8:7f:73:11:5a:b0:86:f4:2d:e6:d4:09:
71:fd:01:2c:9f:b9:6b:12:8f:e8:9d:76:0d:b0:4d:
08:33:53:1a:f3:17:10:d1:51:29:76:4e:2e:56:57:
32:43:91:b6:85:ae:dd:f3:bf:50:7b:a5:79:e0:a6:
1e:15:82:f1:20:2c:56:01:ca:58:04:ac:98:e5:10:
ef:63:09:0e:a5:35:81:2f:c0:51:8e:ee:6c:e8:3e:
d8:16:46:e7:82:4e:66:de:de:d9:dd:f0:49:a1:51:
90:eb:8d:13:fd:d3:80:af:00:82:60:f8:67:d6:2b:
ce:74:fd:07:f0:70:5f:3f:f5:98:7b:dd:17:8f:65:
2b:81:be:c1:62:6c:3a:0f:2f:d3:d4:a3:e0:2b:64:
66:02:8e:fa:5f:c2:b6:b3:22:51:66:32:5c:5f:3b:
f2:1f:2a:13:48:c8:c3:10:b3:b0:6a:f8:be:2a:07:
23:7a:30:47:19:9f:5c:85:99:bf:47:0f:59:e2:46:
1f:51:cb:30:28:61:cb:59:ed:2e:de:04:69:61:de:
19:eb:70:c1:87:14:6e:a9:91:59:d5:d0:4f:53:d8:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E9:41:F7:21:1C:8E:4D:9B:ED:52:38:BA:67:83:76:E0:89:78:5D
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/relB9yEcjk2b7VI4umeDduCJeF0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.235.0/24
Signature Algorithm: sha256WithRSAEncryption
83:61:bf:93:d6:a2:18:6d:b6:1c:34:fd:52:c9:b4:75:1d:b5:
e8:a3:43:ce:94:48:16:49:61:e0:cd:c3:2b:73:14:70:9e:a7:
f8:86:e2:e0:20:4b:74:9e:92:c6:fc:c5:0f:25:9a:9e:5a:ca:
83:09:78:73:f2:09:4a:d6:75:f7:d4:cd:ee:b1:53:f5:39:52:
d8:04:40:59:87:30:12:d0:f3:ac:57:50:f2:18:6f:03:a4:67:
a9:62:41:3d:37:00:f6:b9:11:c1:ad:95:8c:0d:62:ad:fc:4b:
55:8c:88:f6:de:32:89:7f:d0:67:d4:c2:6c:12:de:47:b9:73:
39:69:16:83:4c:a1:8f:d1:31:a7:a7:03:f0:b6:a7:14:1c:2f:
02:08:e4:4b:32:e0:6e:d6:ee:94:23:e6:0d:ed:c9:3a:3e:ba:
c4:8d:9f:14:7b:e6:7a:5d:bc:93:66:1a:61:67:a2:25:76:37:
64:51:ca:90:5f:07:a8:30:ab:cf:7c:18:10:83:8f:72:98:6c:
44:e2:8f:fe:fe:da:41:0a:b4:b6:d9:a6:5e:5d:f6:29:25:2d:
50:48:fd:15:a0:c1:2a:f9:3d:c2:98:ea:d7:51:db:1b:7a:6f:
53:a0:19:72:8a:e4:60:a7:00:7c:23:b4:63:39:67:c0:4d:74:
c9:5c:15:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org