Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/uJWhGzHgOMO3axaaN4CTwU1wE0A.roa
File: uJWhGzHgOMO3axaaN4CTwU1wE0A.roa (raw, json)
Hash identifier: +HbiOwvVGMrI2DPEpiNSzmQhHU5532VoOT5LEUv6/gY=
Subject key identifier: B8:95:A1:1B:31:E0:38:C3:B7:6B:16:9A:37:80:93:C1:4D:70:13:40
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10D8
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uJWhGzHgOMO3axaaN4CTwU1wE0A.roa
Signing time: Tue 16 May 2023 08:36:43 +0000
ROA not before: Tue 16 May 2023 08:36:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 203.79.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4312 (0x10d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:43 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B895A11B31E038C3B76B169A378093C14D701340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:92:80:6e:76:3e:6d:4e:59:0a:c7:36:50:81:
4e:94:3e:b8:8e:c1:66:69:17:d9:9d:1f:d6:d8:fa:
54:e7:9d:95:30:72:10:ec:8a:f3:7b:ec:e8:15:3b:
b8:e8:bd:a8:8a:8d:07:01:68:7f:33:a9:59:ca:f0:
55:17:78:53:27:31:f6:46:1a:e0:af:44:4b:32:6b:
98:89:0c:5b:08:c9:fa:9a:a9:8b:67:93:b2:17:27:
41:20:90:73:ed:6c:4d:3f:bb:66:22:31:6d:e2:81:
f5:51:47:fd:41:84:04:b9:3f:c0:ef:fc:e0:02:f3:
26:7a:d8:8e:4f:0d:8f:a8:99:a7:86:24:02:45:e2:
58:f4:8a:b6:22:57:70:36:7e:0a:51:53:86:52:3a:
4b:4c:4b:f0:63:99:85:42:45:1c:f7:4e:8d:06:d5:
3f:c0:22:58:36:07:65:78:fa:9d:6b:21:aa:cc:89:
f8:b5:5a:bc:7e:a8:fd:79:59:ca:5d:37:78:93:00:
60:06:fa:9f:1d:03:b9:72:4d:4b:2c:0f:aa:15:73:
b9:d7:4c:6c:bb:f2:93:9c:7e:86:5d:ee:17:6a:4b:
86:9e:bf:32:23:9f:84:cc:11:5f:5f:27:60:ed:30:
b2:cb:cb:ee:27:78:2b:0a:39:e9:ba:3e:5f:59:86:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:95:A1:1B:31:E0:38:C3:B7:6B:16:9A:37:80:93:C1:4D:70:13:40
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uJWhGzHgOMO3axaaN4CTwU1wE0A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.128.0/17
Signature Algorithm: sha256WithRSAEncryption
57:28:56:2d:e1:c1:ae:c3:99:77:dc:0e:ff:29:f4:f5:d3:64:
a6:95:55:89:5a:21:69:db:aa:8d:3e:de:b6:1e:e7:8a:ec:62:
33:5b:fe:87:41:8a:14:ee:3a:c8:70:e9:c6:41:81:28:0b:8d:
80:e1:49:b7:bb:d5:41:a9:84:ac:b4:85:9d:c9:8e:5a:dc:3e:
72:05:73:a5:cb:98:d2:25:69:64:37:b6:d9:41:81:7b:83:75:
ce:20:18:a3:d3:de:d5:ba:23:40:ae:64:3c:f0:12:01:46:b1:
70:82:d5:99:77:c6:5f:9e:a3:71:cd:a0:c0:f1:bd:b6:1d:67:
1f:74:16:99:69:97:f6:14:76:3d:bc:90:69:d5:d8:aa:29:50:
3d:01:86:98:e6:41:5d:f6:57:17:ee:ec:6a:68:3a:16:d7:93:
dc:a1:2a:85:8b:da:4a:5e:5b:4d:e8:c2:66:38:8f:18:c9:05:
a1:fb:d2:38:62:64:22:38:2e:57:11:fb:98:cb:52:ab:a5:c0:
54:8e:c8:11:3d:ef:f4:af:7d:4b:d4:7a:80:7b:a1:bc:0e:33:
ff:b6:ff:1b:5c:fb:6e:af:af:f2:b2:be:c5:81:37:34:65:74:
ea:7a:5a:fa:c2:88:52:d4:1c:90:e4:10:db:d3:48:53:0f:30:
53:d6:3c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org