Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/rpgDZ_7VBI66G9LBUqdOcWDsEvw.roa
File: rpgDZ_7VBI66G9LBUqdOcWDsEvw.roa (raw, json)
Hash identifier: YXi3T3oAKBFloZZCU4O6CmtEc1D1dohRycGbJT5fwXg=
Subject key identifier: AE:98:03:67:FE:D5:04:8E:BA:1B:D2:C1:52:A7:4E:71:60:EC:12:FC
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12EB
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/rpgDZ_7VBI66G9LBUqdOcWDsEvw.roa
Signing time: Fri 01 Sep 2023 08:05:10 +0000
ROA not before: Fri 01 Sep 2023 08:05:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24155
IP address blocks: 203.201.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4843 (0x12eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AE980367FED5048EBA1BD2C152A74E7160EC12FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:1a:3f:6b:2c:a1:9b:b3:93:db:a1:94:e7:
50:7a:86:f4:56:4b:e8:3f:72:c2:01:b7:35:bf:81:
de:ac:be:e3:1a:07:06:f6:7b:cc:a7:a6:97:b7:f6:
44:2f:ce:51:35:f9:9e:b7:89:59:95:55:9c:22:6b:
cc:3f:af:4e:a5:74:50:92:38:47:f5:71:77:f2:4f:
da:8d:75:ff:a8:0e:9a:6e:3d:0b:78:1b:e9:d8:6d:
e1:49:e7:9e:4e:3c:52:68:f0:48:65:2b:fa:2d:82:
6b:cc:0a:88:b4:07:0b:0f:d7:f3:0f:9b:4b:d5:82:
a2:5f:82:c8:ac:70:a9:3c:b7:fe:33:a5:eb:ef:e5:
5c:16:af:b5:bc:44:cc:ff:31:b7:29:04:bf:be:d3:
03:a4:b4:82:8e:e8:95:70:1f:c9:6d:d9:75:33:83:
14:e3:71:63:09:45:bf:5a:3f:07:6d:be:cc:99:9b:
e4:f9:63:35:d3:d4:f3:31:c9:e3:7b:99:a2:01:87:
24:fb:11:da:0c:18:9e:7e:0f:de:3a:9f:68:45:f5:
59:43:86:6c:74:de:6a:38:54:77:48:d9:17:a8:96:
10:4a:41:91:03:b0:ff:12:27:61:69:49:c9:da:37:
42:c9:bd:92:e5:e4:eb:de:d0:41:03:83:87:d4:47:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:98:03:67:FE:D5:04:8E:BA:1B:D2:C1:52:A7:4E:71:60:EC:12:FC
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/rpgDZ_7VBI66G9LBUqdOcWDsEvw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.201.32.0/20
Signature Algorithm: sha256WithRSAEncryption
87:43:92:75:8e:d4:39:95:f1:62:3b:2c:53:a0:f2:db:5d:41:
19:34:aa:53:a6:ee:1f:a3:5d:41:34:da:64:59:09:a7:b8:75:
66:dd:f4:c2:57:4c:c8:6d:7a:51:24:03:79:79:d0:ca:34:1c:
96:91:ac:ed:c3:8b:97:45:65:60:71:2f:b2:c1:dc:a8:9f:79:
74:c0:52:cc:44:be:94:f4:b7:84:12:d5:3d:d8:6e:69:87:2c:
de:7f:e7:35:36:18:a8:35:e1:99:32:86:be:33:af:57:1a:6b:
e3:af:66:ab:43:d8:40:05:da:9d:6d:5e:8a:37:11:b2:9f:e7:
ca:46:65:95:50:0f:57:b2:2c:d0:cc:58:c5:de:89:20:e8:bd:
cd:89:ea:cf:87:31:00:d8:f3:b7:b5:fd:98:e6:7c:d8:13:24:
0d:12:c0:9a:a3:57:69:17:82:fc:6d:89:cf:2f:4c:11:24:e3:
11:23:12:ea:92:cf:35:23:3f:4d:e2:14:87:52:2e:96:75:7f:
dd:71:30:88:a9:b3:dc:40:85:df:46:df:d6:8f:50:f3:69:39:
c7:25:d1:25:49:cf:bc:57:c8:f6:07:08:2f:82:2c:ec:4a:35:
e9:72:25:8e:78:b9:14:a5:73:bc:7b:7f:89:ff:98:8d:99:20:
9b:76:c7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:54:32 2024 by rpki-client on console-ams.rpki-client.org