Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/tJvWxAiGgm9kbq3pGhNtztqiXRY.roa
File: tJvWxAiGgm9kbq3pGhNtztqiXRY.roa (raw, json)
Hash identifier: uP5yL+czNpSTvr2sXW2PQ9i8fJMiNAFpjzxVCB2FzSw=
Subject key identifier: B4:9B:D6:C4:08:86:82:6F:64:6E:AD:E9:1A:13:6D:CE:DA:A2:5D:16
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/tJvWxAiGgm9kbq3pGhNtztqiXRY.roa
Signing time: Thu 15 Sep 2022 02:39:57 +0000
ROA not before: Thu 15 Sep 2022 02:39:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24154
IP address blocks: 210.202.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B49BD6C40886826F646EADE91A136DCEDAA25D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:d3:ac:88:19:a8:4c:11:4a:50:9f:5c:fa:
0a:05:6d:d4:46:e8:98:60:94:78:17:47:de:61:ac:
8f:de:6d:5e:c9:06:ca:9f:bf:fa:5d:6c:7d:bd:50:
2e:50:bc:44:e8:39:00:92:c1:96:7f:20:a9:25:8e:
75:73:45:90:01:b0:49:5e:58:ac:3f:f7:a3:de:3c:
7e:d9:fb:92:b1:dd:0e:b2:fd:57:c2:ca:d9:c9:66:
e4:1c:72:c3:9e:4b:35:38:8e:4c:f5:aa:f1:66:e6:
22:41:95:37:a1:cd:0e:b2:98:07:de:2e:4d:ff:ac:
36:28:c6:c6:61:6b:ee:20:50:f5:09:14:ad:e0:78:
1b:b9:b4:03:10:8e:15:dd:3a:50:6f:35:00:5c:7b:
7b:5f:d9:b1:a4:8d:46:7f:7e:db:16:5d:e1:f7:f5:
9c:45:f5:0f:51:31:21:05:7b:36:ee:3a:17:9d:88:
a6:41:a0:b0:7d:8f:13:a1:df:20:e8:d2:89:75:c2:
a7:f1:df:15:94:14:9c:c0:01:4d:ea:7d:19:f8:8e:
d3:6c:40:d0:f1:59:a4:02:17:1a:17:bd:91:f7:f2:
fc:68:7a:0e:25:fd:bb:7e:15:0a:86:c2:2b:44:f9:
c0:b5:d4:91:fd:61:97:40:cf:33:6c:4a:15:2c:8f:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9B:D6:C4:08:86:82:6F:64:6E:AD:E9:1A:13:6D:CE:DA:A2:5D:16
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/tJvWxAiGgm9kbq3pGhNtztqiXRY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.0.0/19
Signature Algorithm: sha256WithRSAEncryption
44:b6:61:f8:59:56:44:9a:c6:f1:37:75:fe:2e:e8:57:87:28:
43:9c:2d:0c:fb:a0:ce:1a:53:8b:92:72:0c:d7:95:5f:cb:7a:
22:e9:66:05:d2:2f:bd:5d:8f:c6:88:43:be:3d:6c:4c:0c:78:
d0:b0:9a:5a:dd:61:fa:f5:c3:29:be:0c:ea:9c:b0:b6:63:bf:
52:0f:d3:19:ff:29:75:03:ff:bd:68:29:81:e3:9b:bf:9e:d5:
5a:1e:b6:8a:ff:42:c1:79:51:ed:af:21:b5:a0:da:ad:77:3f:
df:50:ff:e7:a1:52:78:91:0e:97:a2:7b:cb:a1:ab:0a:7b:58:
75:18:85:1f:cc:0b:70:7d:3a:1e:4a:fc:21:9c:3a:6d:d9:35:
90:83:d7:ec:4a:dd:3c:a2:59:bf:62:6e:00:9f:3f:00:46:95:
80:df:45:7c:e4:ae:65:d0:1f:fe:92:83:fd:60:a2:42:aa:13:
5e:a3:91:4d:1d:0a:e0:17:db:e3:8b:59:59:66:73:95:2d:37:
73:40:80:bc:75:53:ad:5b:14:d7:c8:89:04:4d:a8:37:b3:d2:
92:9e:72:81:f2:a4:45:72:73:02:93:85:ad:c7:1a:5d:03:f0:
49:a7:ec:db:e5:f9:0c:cc:cb:70:91:e2:6f:59:cc:68:5a:0a:
61:be:e9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org