Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/uL2G550YLGWsqyx1fgwQp9pMCss.roa
File: uL2G550YLGWsqyx1fgwQp9pMCss.roa (raw, json)
Hash identifier: PKfXTiQ67GbaIWKD7axgg1XY7LXDkjd0DL4cZaH51Es=
Subject key identifier: B8:BD:86:E7:9D:18:2C:65:AC:AB:2C:75:7E:0C:10:A7:DA:4C:0A:CB
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10A6
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uL2G550YLGWsqyx1fgwQp9pMCss.roa
Signing time: Tue 16 May 2023 08:36:27 +0000
ROA not before: Tue 16 May 2023 08:36:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.203.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4262 (0x10a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:27 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B8BD86E79D182C65ACAB2C757E0C10A7DA4C0ACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8b:cc:0b:4e:1e:3d:59:67:43:42:58:dd:73:
3f:86:74:1f:9c:1d:23:82:06:cd:79:04:4a:da:4d:
fe:b0:b1:09:9d:65:51:b2:c5:3d:2b:0d:6b:a2:28:
99:95:66:2f:0e:74:dc:71:d9:75:6b:57:ee:cf:7c:
f1:f3:92:44:11:e8:a5:73:63:5f:48:f9:b3:79:35:
e4:05:fb:ac:e2:ea:bf:51:c8:bf:87:94:63:95:e7:
12:0a:c0:47:62:ac:0e:67:6e:f6:c0:cd:b2:0e:c4:
90:d8:b1:c9:8a:40:1e:be:af:e5:63:73:1e:b8:73:
1d:a8:21:ef:46:f1:19:13:92:a6:5f:66:af:8d:e2:
d0:a8:a3:8f:a6:b3:b4:c6:9e:af:f7:89:cf:7f:c3:
42:1a:dc:8b:e7:62:ce:40:33:44:c9:9d:c5:60:0a:
2a:9e:03:c7:e7:07:92:89:4d:c8:20:a1:70:55:dd:
0a:6c:22:77:3b:0c:0e:7c:5e:f1:54:e2:ad:d0:0f:
68:b4:6a:f7:ef:c6:12:0c:44:49:74:52:2d:43:4c:
1b:63:c5:b7:41:b2:bf:bb:af:94:3f:56:f6:12:eb:
0a:e9:02:97:78:99:ab:4a:9e:df:c7:6e:66:9a:42:
39:75:88:b4:73:61:63:23:9c:fe:38:73:53:d3:bc:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BD:86:E7:9D:18:2C:65:AC:AB:2C:75:7E:0C:10:A7:DA:4C:0A:CB
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uL2G550YLGWsqyx1fgwQp9pMCss.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.48.0/20
Signature Algorithm: sha256WithRSAEncryption
43:11:69:18:d1:fc:c9:cf:df:6b:f0:55:50:db:84:44:31:8f:
68:c2:f1:6c:45:47:06:ac:57:e9:79:f1:c9:04:d3:2d:47:ab:
36:0e:ec:35:80:3b:af:9b:1f:89:71:40:cc:c3:2f:99:0d:64:
a2:e5:66:99:5c:83:58:a1:55:00:16:1a:70:b1:5e:c0:fc:1f:
ce:93:25:91:28:80:b5:15:d5:9a:b3:c8:38:56:a6:64:47:38:
4d:7d:60:63:9b:4f:95:d8:a7:f3:53:25:db:34:c8:43:c7:fa:
1a:a6:e9:c8:ef:67:e8:37:27:85:eb:39:c9:a8:f4:f1:da:12:
87:25:dd:a7:f1:47:e2:08:9e:dd:ae:db:c2:04:5f:d7:99:50:
6e:52:f0:57:60:0a:e6:68:30:4d:11:f3:6a:da:be:c1:9b:2c:
1a:c9:1b:3d:57:0f:fc:6c:a8:cd:d3:76:38:a9:17:53:84:5b:
11:93:81:15:29:7a:7a:b3:bc:03:e9:be:bb:87:85:1a:0a:ff:
66:b7:a7:5a:39:90:1f:0e:16:28:db:45:fb:b3:2c:35:f9:bc:
18:fa:54:79:f0:e5:dd:80:ac:21:fa:49:e3:cb:14:a6:1f:5e:
83:20:42:b9:30:9e:03:5d:af:74:69:5d:20:fe:8b:e5:5e:10:
4c:5c:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org