Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/tObob184dN9xberwL_ZJcWLDeIA.roa
File: tObob184dN9xberwL_ZJcWLDeIA.roa (raw, json)
Hash identifier: qG4Vpj3UdSTc/ZD3GVA41u5kkT10NUVKDD3+s7Zy+GA=
Subject key identifier: B4:E6:E8:6F:5F:38:74:DF:71:6D:EA:F0:2F:F6:49:71:62:C3:78:80
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/tObob184dN9xberwL_ZJcWLDeIA.roa
Signing time: Thu 15 Sep 2022 02:40:08 +0000
ROA not before: Thu 15 Sep 2022 02:40:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.203.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B4E6E86F5F3874DF716DEAF02FF6497162C37880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:55:b4:54:07:d7:2f:59:2a:06:c7:7d:56:
f8:94:4a:5d:74:fb:36:7c:f7:4c:42:df:e6:d5:10:
b2:78:6a:e1:7c:86:9c:2d:26:b7:2f:e2:60:94:26:
e1:7a:c2:cd:94:59:b7:8b:17:d3:0e:7b:58:36:2c:
17:d4:85:13:6f:95:ab:c9:f7:fa:ae:f0:11:0c:17:
3c:d7:9d:c5:dd:55:31:ed:1b:b8:de:13:1c:cf:20:
a6:78:06:6b:f9:ce:4a:3b:1d:a6:d1:fe:a2:0a:84:
e3:f9:96:39:50:a2:7f:8f:7e:d6:6d:6b:55:f2:a8:
f9:3f:71:c1:12:a0:3b:c4:a8:2c:a4:45:ab:11:c5:
1e:7a:b7:ec:d9:2b:36:5c:1e:3d:f1:df:6e:93:be:
af:0d:58:df:4f:37:2a:f8:7c:3b:10:49:68:21:06:
05:be:77:5b:6d:3c:b3:5f:77:6d:fd:85:16:e1:76:
a2:9e:5c:3a:02:4c:1f:73:e5:01:91:04:53:bc:9c:
13:f3:aa:dc:84:60:cc:d5:ed:93:39:de:38:8e:c9:
3e:8e:0b:d7:b6:ca:cb:ed:ef:f0:82:34:c4:70:bc:
64:f6:df:25:94:1e:fe:7b:5d:23:30:27:5f:15:c6:
a6:41:94:12:2f:8c:14:23:77:b2:3d:7c:f6:da:7a:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E6:E8:6F:5F:38:74:DF:71:6D:EA:F0:2F:F6:49:71:62:C3:78:80
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/tObob184dN9xberwL_ZJcWLDeIA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.0.0/18
Signature Algorithm: sha256WithRSAEncryption
6d:12:27:00:d8:6a:5e:e9:4e:0e:80:71:e2:55:1f:7b:2e:62:
73:a9:d5:ab:25:63:a6:ef:28:2c:8e:ed:b9:b8:da:8d:a0:25:
ce:fb:1d:e8:d1:7a:d0:ab:b5:23:db:a9:85:97:a9:b4:ef:28:
ed:11:6e:46:5b:8e:e8:53:74:8f:1f:a1:fe:ec:be:0b:70:e3:
18:9d:69:55:97:9d:7e:28:a2:ce:57:91:4e:c9:01:66:89:32:
ea:8b:3f:d1:84:dd:bf:50:2d:cb:9e:8b:e9:5b:b1:a8:af:5b:
de:0f:a6:f6:cd:3d:37:ef:df:2b:cf:28:37:6b:6b:9a:06:56:
44:b8:7b:63:9c:02:ea:d7:ce:77:c7:9f:6d:51:96:89:b8:7b:
e8:2c:1d:2a:2b:80:34:07:a4:70:6a:a8:13:19:1c:59:15:e1:
92:e7:de:34:8a:b7:5c:79:50:df:51:b5:39:97:9a:bd:6f:e9:
2a:38:8f:2b:6c:09:c1:31:a7:c0:73:7e:6c:85:10:42:b5:e5:
32:dc:14:5f:77:c8:fb:25:19:db:8b:db:4b:7c:cf:a1:ae:97:
b7:cc:cb:29:bf:5c:f0:9e:11:a1:54:78:42:57:85:e6:3d:36:
8c:0c:7c:17:fc:83:f1:35:1d:af:28:59:6b:22:d3:fe:ec:d3:
83:a3:bb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org