Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/rt1HjIjgVoIXX2wqARMfy7VqYYI.roa
File: rt1HjIjgVoIXX2wqARMfy7VqYYI.roa (raw, json)
Hash identifier: qJNLnMPoaR9B1oVuYaOhZ/50A242mOxQD0fcKk5B334=
Subject key identifier: AE:DD:47:8C:88:E0:56:82:17:5F:6C:2A:01:13:1F:CB:B5:6A:61:82
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DDB
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/rt1HjIjgVoIXX2wqARMfy7VqYYI.roa
Signing time: Wed 29 Sep 2021 02:39:39 +0000
ROA not before: Wed 29 Sep 2021 02:39:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9311
IP address blocks: 210.201.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3547 (0xddb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:39 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=AEDD478C88E05682175F6C2A01131FCBB56A6182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:af:45:b8:5e:2a:a1:98:63:82:b9:49:e0:
f2:fe:e2:d3:93:c0:bb:ec:53:ab:53:ad:99:28:39:
5a:c9:f9:16:dd:ed:a7:b1:52:11:ba:43:50:6c:4b:
6b:ef:b5:af:0c:dc:a9:d8:4b:83:2e:0c:d6:50:64:
75:85:cc:da:8a:dc:ac:88:7a:f6:9a:30:6a:ca:81:
96:44:f6:89:31:ce:ff:27:c4:e8:3c:53:93:57:f3:
c1:89:9c:44:dc:10:74:15:f2:e8:76:a4:ab:c2:8b:
ef:e6:17:e5:32:ae:da:20:d5:74:e0:a5:79:c3:8d:
f4:3b:c7:0c:c5:4d:0e:16:20:64:ec:76:8a:1d:38:
07:f7:34:cd:58:60:9a:9b:ac:ea:41:7b:82:7b:47:
98:ae:89:b2:aa:6d:89:af:4e:4d:63:3c:d7:b5:f2:
5c:21:6b:0c:23:bc:c6:be:fb:ee:77:82:36:c7:40:
3e:be:73:61:d0:c5:66:fb:d7:9d:e9:be:9d:fd:9e:
a7:98:12:c1:46:32:eb:a9:c2:e8:7c:23:95:8a:07:
2f:27:cd:d0:71:5f:6d:07:1b:31:f9:b7:23:4c:28:
0f:6e:89:b0:07:ff:0d:f8:d7:6c:82:ab:86:65:e9:
4b:60:47:20:98:30:78:12:ba:c2:ce:75:3d:11:39:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DD:47:8C:88:E0:56:82:17:5F:6C:2A:01:13:1F:CB:B5:6A:61:82
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/rt1HjIjgVoIXX2wqARMfy7VqYYI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:90:54:f5:00:ec:c8:09:1e:16:c2:06:32:e1:19:05:2b:18:
e5:29:32:6a:8b:b4:71:62:01:65:46:e6:1f:dd:37:1b:45:65:
09:3f:f0:65:1e:2f:ac:f4:25:7c:f5:de:7f:73:f6:54:ee:14:
ce:88:44:64:98:6b:89:96:e4:c5:23:59:11:b8:4e:01:e1:f3:
6f:e8:4f:91:35:8f:a4:19:3b:94:be:11:ad:2f:46:ed:17:ac:
50:2d:90:78:c9:60:9c:d6:03:94:57:62:6b:44:76:76:51:a5:
d1:3c:96:4f:22:5e:1d:6d:e2:27:04:e5:d6:cd:48:de:93:bc:
b5:dd:01:57:8f:d7:b2:57:ce:22:29:53:f7:a4:20:8b:59:b3:
50:94:16:2f:54:87:35:d5:e2:5e:78:be:b3:44:32:5f:67:51:
da:a9:c8:f6:bb:61:27:8c:31:43:e1:8b:40:94:2f:ea:5e:48:
83:c1:ad:15:89:17:6e:90:8b:4c:6b:bd:c7:c3:bb:40:99:3c:
97:f6:a9:83:3d:a9:1f:a4:a4:39:b5:16:cb:6c:45:e1:e4:03:
5e:0c:88:2c:8a:4c:5d:22:72:97:67:13:2f:65:98:2d:6a:dc:
33:c7:09:9b:09:82:18:07:ec:9f:74:10:82:49:04:93:57:f9:
2c:29:28:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org