Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/uUROvmogA0P4ahOj7p7kz3px8OQ.roa
File: uUROvmogA0P4ahOj7p7kz3px8OQ.roa (raw, json)
Hash identifier: eOKOpVRD7DDbZm/uHulyCr0UTKiGijVyWimO58SSUHU=
Subject key identifier: B9:44:4E:BE:6A:20:03:43:F8:6A:13:A3:EE:9E:E4:CF:7A:71:F0:E4
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 114A
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uUROvmogA0P4ahOj7p7kz3px8OQ.roa
Signing time: Mon 07 Aug 2023 08:04:53 +0000
ROA not before: Mon 07 Aug 2023 08:04:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 223.22.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4426 (0x114a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Aug 7 08:04:53 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B9444EBE6A200343F86A13A3EE9EE4CF7A71F0E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:a3:3b:4d:50:bf:9d:43:da:8d:4b:ea:68:
00:7b:a5:b7:24:b7:bd:18:d1:2c:71:8f:5e:89:a0:
87:d7:16:7e:b0:3a:62:bd:c5:8c:2d:0b:ac:d2:e5:
dd:f5:98:9c:e4:18:20:bc:01:b9:b7:a9:45:67:b9:
e9:ea:ac:5e:6e:e5:eb:0e:42:6c:4e:91:57:3b:72:
61:ab:89:5c:cc:84:39:bf:ea:ad:2d:5b:eb:b1:27:
53:7e:65:b1:78:e1:c0:45:cd:90:99:23:80:69:fd:
9e:58:5b:65:c6:a0:15:67:ac:07:2a:cf:90:f2:fe:
1e:8c:87:b0:1d:e4:73:f8:cb:80:a3:69:ec:15:03:
1c:07:d5:f6:6b:05:f5:1e:79:2d:3d:4d:0c:42:8a:
87:34:33:a9:c0:64:92:d4:61:f6:17:c0:cf:10:33:
eb:68:8b:ba:9c:7e:41:78:6f:8b:af:59:e3:be:b7:
5b:de:c4:1b:d8:39:de:3b:82:d7:b2:cc:d7:f2:3e:
e4:cc:c4:82:2d:b4:6e:bb:af:5a:b3:f0:ed:13:29:
56:cc:99:86:99:1e:aa:f9:5b:3b:ff:21:b7:b9:0e:
30:3f:b8:96:e2:27:7e:d6:b5:62:c9:d5:35:93:ee:
f5:8b:c9:55:b6:35:49:47:ee:f7:ba:ec:e0:6a:48:
36:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:44:4E:BE:6A:20:03:43:F8:6A:13:A3:EE:9E:E4:CF:7A:71:F0:E4
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uUROvmogA0P4ahOj7p7kz3px8OQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.22.0.0/15
Signature Algorithm: sha256WithRSAEncryption
69:ca:3b:e6:00:1b:92:17:d5:62:58:f3:3e:49:6e:a5:01:f6:
01:49:2d:a7:ac:26:83:bd:10:9c:64:dc:7b:3c:3e:77:5d:47:
cc:58:f9:74:03:14:93:ba:5f:44:9f:f1:0c:ac:93:d9:43:e3:
69:0c:b7:b2:e6:ff:bc:da:d7:30:b6:a4:c2:60:e4:13:73:f0:
e9:0f:4d:00:46:3a:fb:9b:b4:01:40:b2:1b:64:61:7d:ea:03:
d5:78:95:54:b5:4d:cc:62:cc:62:27:d0:9d:fe:b3:d3:30:8a:
18:65:82:a9:08:59:0a:7e:55:ed:ba:1c:b0:4c:34:8c:2a:36:
5a:b2:6b:9b:5f:d1:08:29:cb:35:40:0b:24:f0:a5:01:3c:88:
4b:5c:dd:a0:b1:42:42:81:50:46:63:b2:b0:ef:0f:68:44:89:
21:8b:4d:e6:cd:1d:a6:4d:b9:1f:52:33:97:f1:c1:13:62:f7:
13:d0:be:ac:32:b9:55:fe:0b:d9:1f:29:d0:ea:37:e2:ea:a3:
b7:60:6c:4e:ed:ae:1b:3c:14:fc:c8:0c:92:8e:ca:9e:99:76:
8b:20:71:72:8a:ec:f4:17:b5:fc:31:58:f1:d5:b2:aa:f9:e3:
01:3a:d2:aa:a6:9a:5a:9f:5e:dc:21:6d:1f:16:f3:b4:03:de:
66:e8:f5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org