Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/uA3mZR6dpblLDnlztvujtgZj93w.roa
File: uA3mZR6dpblLDnlztvujtgZj93w.roa (raw, json)
Hash identifier: +sr+Khfoig2WMX20iDgUt57izJIzMWYfRNmomDgJR3s=
Subject key identifier: B8:0D:E6:65:1E:9D:A5:B9:4B:0E:79:73:B6:FB:A3:B6:06:63:F7:7C
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0CC3
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uA3mZR6dpblLDnlztvujtgZj93w.roa
Signing time: Sun 07 Feb 2021 12:59:58 +0000
ROA not before: Sun 07 Feb 2021 12:59:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131591
IP address blocks: 223.22.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3267 (0xcc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 12:59:58 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B80DE6651E9DA5B94B0E7973B6FBA3B60663F77C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:64:79:d1:f7:09:ca:7b:17:00:cd:4b:9f:
fc:58:b9:9f:27:7f:14:a2:5e:26:ba:6d:3f:a8:f5:
63:87:e7:d4:3b:be:c0:a2:30:3a:8a:eb:6c:1b:83:
88:b3:29:67:bc:5f:2d:9a:92:61:ee:ef:5a:09:63:
35:61:19:72:7e:f9:18:95:62:82:c0:e6:f9:2e:d3:
63:66:e2:e5:21:f7:a9:5a:01:81:4e:6c:74:0a:57:
48:44:96:9d:24:69:a5:c9:0c:cf:86:48:a5:3c:2d:
e9:07:e7:ff:10:14:dd:4a:2d:e0:bb:5b:c6:ff:43:
99:da:84:89:18:22:60:80:7e:cc:ed:2a:4a:8a:8b:
67:2d:fd:b5:48:b6:25:41:06:12:7a:cc:46:22:b5:
81:7b:0f:92:53:fd:c6:24:32:8a:a6:5a:c1:97:ac:
84:5f:27:80:1a:ad:73:b7:05:8e:f0:01:1d:a6:15:
80:a3:a7:8d:e9:1e:d4:96:09:11:ea:dc:16:ec:9f:
87:29:5d:32:70:7b:ef:cf:13:29:b5:ea:b3:47:80:
f8:11:ee:49:4f:8f:ef:a6:ef:bc:1a:ab:e8:3c:78:
5f:de:2c:cd:e6:1a:92:6d:0c:0b:fa:20:af:0a:7a:
83:13:c3:f6:1d:bf:67:2b:be:ea:15:f2:3c:e9:b0:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0D:E6:65:1E:9D:A5:B9:4B:0E:79:73:B6:FB:A3:B6:06:63:F7:7C
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uA3mZR6dpblLDnlztvujtgZj93w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.22.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:4f:6f:1b:1f:c8:bb:b7:6f:9a:6e:99:97:4c:3e:83:da:c6:
ca:3d:83:7f:8b:16:af:7f:b8:5b:41:1a:3f:30:72:58:20:ba:
7b:c7:4f:3a:0e:33:b2:b6:ae:47:75:7d:84:3a:a5:85:a1:9b:
0c:c0:aa:b1:51:90:00:77:56:06:5e:64:c7:13:c9:11:b6:eb:
91:22:fa:b6:96:10:85:3a:67:79:2a:90:9f:c1:f7:30:10:29:
64:01:ed:bc:53:b7:14:e3:7a:bd:01:ea:1a:7d:24:29:ae:ec:
df:4e:49:7f:1e:6b:43:61:04:9a:ab:e3:d1:21:f5:2d:8d:66:
18:3e:b2:6f:59:d8:d0:c7:ed:7b:76:d0:bc:80:73:5a:34:fa:
12:6a:a8:f5:20:6d:ca:5c:47:3f:d1:54:ad:fc:bf:fd:15:3d:
6d:fa:cb:ca:0b:71:09:d0:77:01:ee:32:e8:bf:73:9f:39:99:
28:7c:1c:de:cf:86:ba:43:75:05:58:77:c0:7d:0d:85:56:3d:
73:da:8e:90:cd:66:69:f1:d9:c6:ba:af:e9:c1:a9:b5:f2:ec:
3a:f3:ff:c0:d1:bf:79:9f:1c:f1:5d:69:17:04:b8:59:93:36:
e1:0b:17:79:de:46:51:9c:35:45:63:30:68:aa:d3:85:da:b4:
82:27:79:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:03:22 2025 by rpki-client