Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/uuT-1DBzAh1Y8MvJ-9row7jeUoA.roa
File: uuT-1DBzAh1Y8MvJ-9row7jeUoA.roa (raw, json)
Hash identifier: urzvzv8BN0xVe1bFeMQAvqolbmWv/gxRhSul/RmObDA=
Subject key identifier: BA:E4:FE:D4:30:73:02:1D:58:F0:CB:C9:FB:DA:E8:C3:B8:DE:52:80
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 08DA
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uuT-1DBzAh1Y8MvJ-9row7jeUoA.roa
Signing time: Tue 29 Sep 2020 10:01:09 +0000
ROA not before: Tue 29 Sep 2020 10:01:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 210.200.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2266 (0x8da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:09 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BAE4FED43073021D58F0CBC9FBDAE8C3B8DE5280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:a8:92:bd:ba:de:b4:e9:db:ce:c2:d6:d0:
e7:e5:23:b8:00:94:35:ca:1c:84:1f:0d:40:02:99:
80:af:90:99:f6:2d:e5:eb:71:79:aa:fd:83:a4:88:
ad:1a:e9:45:52:bc:24:8a:59:88:fa:b1:a6:d2:f6:
06:88:32:26:d3:2d:06:26:13:07:7e:c5:cd:69:fd:
38:fe:a8:c9:d5:4e:f7:90:19:94:0d:30:28:2b:2a:
ac:de:eb:50:f8:0c:fe:f2:9b:55:25:9f:f6:25:9a:
70:a5:87:48:34:5d:7b:d2:6b:da:63:7a:45:b2:98:
51:d2:d8:ce:9a:10:cd:f8:c2:39:81:12:f7:de:d0:
7e:39:5c:73:a8:45:13:b6:9c:6b:01:91:88:9b:34:
3f:41:86:6e:6a:66:76:32:30:ad:c4:4b:3c:4e:5b:
ed:b9:8a:33:f4:c0:41:9c:b4:2f:55:40:8f:6f:6d:
94:26:e4:28:9f:a5:e6:b3:42:3b:9b:5d:e9:9b:cc:
36:0a:60:f8:ac:6a:83:72:9a:a3:24:9e:c1:c3:87:
cc:6b:e7:fb:64:49:e7:04:ca:b6:54:4f:e1:ae:40:
39:ea:01:50:c0:86:12:70:47:d2:33:d0:e6:0a:94:
ab:9b:99:8f:d4:e1:77:37:60:21:66:8c:13:9c:bb:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E4:FE:D4:30:73:02:1D:58:F0:CB:C9:FB:DA:E8:C3:B8:DE:52:80
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uuT-1DBzAh1Y8MvJ-9row7jeUoA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.83.0/24
Signature Algorithm: sha256WithRSAEncryption
33:31:3a:d9:75:37:7e:55:dc:57:7f:3d:41:cf:30:e7:4b:07:
d5:2c:6b:53:5e:12:95:47:8c:d2:00:e8:2f:fe:f8:06:51:11:
3f:1a:a9:08:cf:21:e6:c4:a7:dc:09:3b:ad:3f:67:81:73:ec:
f9:b0:c9:26:b8:7b:0d:5d:bb:f5:99:86:07:1c:70:d2:60:ac:
e3:9c:84:5c:b1:e1:09:b0:cc:0f:ad:2d:1c:b7:a2:8e:d7:c0:
b1:8b:31:49:c3:7b:6c:0c:7f:7e:2a:93:fb:7a:25:2a:c3:98:
46:9c:66:b8:fd:4f:52:eb:ae:0b:94:36:c8:b5:14:3b:c2:a5:
2b:0d:98:24:16:e1:3f:9e:c3:b4:84:51:5d:44:a2:e8:7b:e0:
be:65:7e:4b:0c:57:12:6e:3f:64:49:2e:33:62:3a:42:79:5e:
43:ea:53:37:f6:49:63:c3:58:70:36:3f:6d:4c:4e:da:50:ce:
8a:c1:52:1f:03:64:bd:f5:dc:24:00:c4:0f:d8:87:9a:da:1e:
60:57:e5:28:87:12:ac:4b:cc:c2:c0:ef:71:f1:df:87:8d:aa:
40:39:81:06:e5:e1:60:07:d7:d4:9b:65:b8:21:92:75:79:c6:
2a:4a:0c:f1:67:66:74:d8:0c:5a:0a:dc:2b:4c:5c:7e:44:7b:
5d:c5:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org