Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/rxSSLTCw9pRGm0yJd-F9joJlzog.roa
File: rxSSLTCw9pRGm0yJd-F9joJlzog.roa (raw, json)
Hash identifier: F5IB3a7bveC9h5sjcUpJLHoYRx2V78ker3TaXmkJ7AE=
Subject key identifier: AF:14:92:2D:30:B0:F6:94:46:9B:4C:89:77:E1:7D:8E:82:65:CE:88
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0CD3
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/rxSSLTCw9pRGm0yJd-F9joJlzog.roa
Signing time: Sun 07 Feb 2021 13:00:34 +0000
ROA not before: Sun 07 Feb 2021 13:00:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.63.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3283 (0xcd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 13:00:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AF14922D30B0F694469B4C8977E17D8E8265CE88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:96:fb:d9:3a:51:b1:f1:11:8d:f4:56:82:f1:
f8:73:cb:fd:95:29:52:9b:9e:ef:25:07:4e:32:b3:
74:c3:c6:59:60:8a:9e:a5:84:23:6b:3c:94:32:ff:
50:32:af:7e:2f:cd:a1:af:4d:f3:f9:66:11:5a:42:
c5:90:43:7f:60:89:c2:01:50:94:40:99:62:2c:6e:
82:08:19:ef:bc:49:f4:e4:ef:36:81:de:cf:31:d6:
42:90:17:79:ad:1d:84:7b:5b:4b:d9:36:57:0d:15:
4d:7f:96:d3:5a:c2:c6:fd:51:6c:2f:8d:a6:94:e0:
39:e3:d9:04:72:ee:a7:c6:33:18:00:4d:4e:9b:96:
85:16:5e:9e:81:12:2a:ea:fb:ba:27:cd:d0:b3:f7:
f4:9f:9a:f7:9a:f1:ac:47:18:71:0b:75:57:7d:12:
4a:48:ae:d4:6c:88:15:b2:a1:3c:67:74:11:59:94:
4e:8f:ca:89:2f:ce:80:a9:d1:a8:54:9b:7e:d2:7e:
1e:18:c9:52:fc:8f:ad:67:c7:4f:5c:c1:5a:5f:5d:
83:4a:68:c0:4c:fd:50:60:a6:28:97:d5:c7:f4:de:
74:97:05:55:dd:d9:17:75:e8:85:80:c0:46:fa:c4:
d1:25:33:17:f9:db:b9:15:00:a0:f0:04:89:79:64:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:14:92:2D:30:B0:F6:94:46:9B:4C:89:77:E1:7D:8E:82:65:CE:88
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/rxSSLTCw9pRGm0yJd-F9joJlzog.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:1d:ab:25:35:bf:65:7b:88:85:e3:74:dd:6d:c1:08:8f:db:
60:a0:06:e3:10:e5:d4:d9:74:57:89:84:bb:38:ad:2d:76:83:
43:25:24:66:3f:a0:89:59:10:01:ca:17:63:c9:b8:8f:9b:64:
5c:87:31:3d:a0:ad:f1:43:de:7c:5d:f4:65:b3:51:fa:3e:d2:
8c:09:28:6d:8b:71:f0:39:06:00:b9:97:7b:6c:f5:9d:b5:a1:
79:b8:24:66:8b:9b:b6:8f:eb:20:5b:e8:af:7b:5c:d2:e0:c6:
66:33:f8:6f:5b:f2:d0:8f:5b:53:be:6b:66:ff:82:57:ea:3b:
dd:0c:3b:19:d0:ef:0a:e8:8b:81:51:49:a0:87:a7:5f:09:21:
1b:00:26:32:d2:f6:46:29:01:da:e3:de:f0:8b:35:67:85:47:
e6:26:91:3b:f7:11:11:73:0f:4a:6b:61:eb:7f:dd:41:f6:ad:
b1:2a:6f:3e:2b:1c:06:fd:6a:dc:15:73:bf:15:f0:cb:8d:cc:
c9:ab:0e:85:e1:e4:2d:7a:64:88:ed:8c:0f:7d:4c:2e:64:df:
42:61:87:77:77:e5:80:79:65:78:e3:70:e6:11:20:11:dc:b6:
36:e0:1d:e9:30:fb:00:19:c5:38:66:70:2d:15:5a:47:a6:72:
3b:eb:52:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:07 2025 by rpki-client