Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/uA4LNh1dWvvGLGLbqU4MZh71N0Y.roa
File: uA4LNh1dWvvGLGLbqU4MZh71N0Y.roa (raw, json)
Hash identifier: O+c3kpK0aGDs95Ba4sS4pMR3TKmfHKW1id7vAwf3t7E=
Subject key identifier: B8:0E:0B:36:1D:5D:5A:FB:C6:2C:62:DB:A9:4E:0C:66:1E:F5:37:46
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DF5
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uA4LNh1dWvvGLGLbqU4MZh71N0Y.roa
Signing time: Wed 29 Sep 2021 02:39:48 +0000
ROA not before: Wed 29 Sep 2021 02:39:48 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7482
IP address blocks: 210.203.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3573 (0xdf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:48 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B80E0B361D5D5AFBC62C62DBA94E0C661EF53746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:4f:82:26:45:35:16:c6:fc:05:51:6d:c8:
3f:ee:37:37:07:4a:30:f8:a8:e2:ab:06:d7:24:25:
d7:14:ea:04:98:44:bd:14:cf:0d:ff:11:e3:bb:1d:
8d:d3:0c:09:11:49:5e:34:47:cb:14:93:8d:72:c3:
98:7d:2b:d2:be:f5:b3:24:80:f1:f5:d1:be:62:07:
ff:3d:1f:a6:03:8d:79:cf:88:8d:11:3b:a7:0b:f0:
ad:62:54:0c:f2:3b:35:13:a2:73:d2:55:ec:b5:2e:
eb:47:22:ff:5d:6e:65:80:53:f3:94:de:67:91:5b:
2d:60:8f:e9:07:9a:b6:0a:56:38:0f:d4:32:ca:0e:
12:44:4e:5f:98:a2:33:a6:2f:72:4b:a5:ba:d3:69:
24:d3:a6:7a:00:2e:04:4d:1e:39:8f:9b:96:62:6e:
5c:8d:fd:fe:cf:68:d4:95:4e:29:08:49:12:da:4a:
bc:4f:e2:4c:7b:17:8e:b7:42:56:17:79:bc:3b:bc:
76:fe:b1:86:37:38:5e:c5:ea:a3:c9:e0:7c:d3:29:
7d:78:47:6b:83:a9:30:79:18:a2:02:0e:21:21:a7:
5d:70:93:0d:3c:cf:88:fd:71:30:37:50:26:17:97:
c4:4e:51:af:e2:be:c9:6f:aa:b5:50:c1:26:7f:75:
60:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0E:0B:36:1D:5D:5A:FB:C6:2C:62:DB:A9:4E:0C:66:1E:F5:37:46
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uA4LNh1dWvvGLGLbqU4MZh71N0Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1b:08:bb:41:04:21:4b:d0:08:96:3f:6d:66:d1:ff:84:f0:d3:
e6:8f:8e:28:01:57:e6:5b:d5:03:50:78:9d:e8:b4:f9:74:ac:
f7:68:a2:a8:4a:0e:9c:4d:68:7c:29:7e:d0:93:e5:ae:06:93:
1c:4b:0d:0e:f8:c9:9c:9d:ed:93:7a:a9:6b:70:25:f9:8c:23:
72:9a:bf:09:3d:71:e9:e7:ba:1d:e8:8a:53:4e:47:5a:06:3c:
eb:ff:14:14:41:43:3a:b9:fb:8e:c9:cd:fe:4e:7a:93:23:e1:
29:14:a1:80:0e:60:ca:65:0d:71:d4:00:cd:c9:b6:83:d8:43:
fb:d3:7f:f7:50:aa:c8:c3:15:1e:e7:57:a1:cf:26:91:8f:24:
0a:2c:bb:bf:46:2f:b1:2e:1a:78:06:52:eb:bc:73:2e:7b:c8:
cf:0e:8f:cc:03:c5:1c:da:0a:23:09:06:42:ab:2e:81:b9:4a:
71:98:3e:04:a5:0b:51:56:4c:7b:24:27:59:3f:eb:d7:71:77:
2a:14:c0:f4:09:fc:3e:d7:4b:3c:96:63:cf:7b:c8:91:5c:ad:
f7:19:5b:c0:0a:d7:7c:1c:5e:17:0a:af:5d:0e:fc:4b:38:f4:
ac:fb:52:8d:7e:17:f4:66:93:5b:d6:b2:b6:1e:ee:7d:f6:a3:
68:3a:a6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org