Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/uy1kg8C7F0oodh1UfBOv_2en4_M.roa
File: uy1kg8C7F0oodh1UfBOv_2en4_M.roa (raw, json)
Hash identifier: YxviqK+YR/M9MLFmpWt7SAZXGfVLYMGQxjt//JKrG8k=
Subject key identifier: BB:2D:64:83:C0:BB:17:4A:28:76:1D:54:7C:13:AF:FF:67:A7:E3:F3
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0910
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uy1kg8C7F0oodh1UfBOv_2en4_M.roa
Signing time: Tue 29 Sep 2020 10:01:25 +0000
ROA not before: Tue 29 Sep 2020 10:01:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 219.91.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2320 (0x910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:25 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BB2D6483C0BB174A28761D547C13AFFF67A7E3F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:4e:cd:5b:3c:27:85:7f:86:50:7c:d5:77:
81:7d:d9:91:a6:f8:21:5f:03:4e:f9:68:e4:71:63:
cf:9d:2c:04:86:41:88:c4:26:5a:f0:7e:d7:cc:6d:
ce:1f:76:cf:c6:3a:ee:2d:a3:51:8e:4c:e0:bb:03:
8e:4b:aa:94:fe:98:65:29:42:bc:f5:c6:ce:e8:5a:
bd:e1:40:0e:08:27:4d:40:46:0e:0f:5c:be:19:fc:
6f:4f:10:f3:05:46:27:94:c0:dd:e7:d0:70:23:e9:
b0:ce:95:93:eb:89:8b:b5:6f:9f:ba:b9:8b:a8:6d:
76:77:05:79:ac:79:07:83:4d:14:50:47:e9:60:31:
e5:9e:f2:04:96:d8:42:b8:ca:77:47:94:4d:74:d2:
5c:18:bf:cc:6e:95:01:52:0e:6e:de:4a:4a:9e:4a:
18:23:55:2d:cb:10:fe:b7:bf:a5:f8:14:eb:30:d0:
a6:95:d2:a7:6e:1d:14:38:49:a4:00:ac:0f:95:91:
c7:18:47:86:38:20:bf:71:84:c8:0a:04:74:cd:29:
7c:4e:c2:7e:ac:d0:59:14:f1:00:5e:02:13:56:4e:
1f:68:a1:06:77:81:0b:ff:90:85:d1:4f:f6:8c:9f:
9f:ec:3e:a9:ca:40:43:66:08:5c:ac:04:f9:8b:59:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2D:64:83:C0:BB:17:4A:28:76:1D:54:7C:13:AF:FF:67:A7:E3:F3
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uy1kg8C7F0oodh1UfBOv_2en4_M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.91.0.0/18
Signature Algorithm: sha256WithRSAEncryption
9e:fa:6e:7a:66:6e:8a:87:92:66:c8:43:a7:94:dd:bb:35:2e:
b4:e7:49:65:b0:db:81:11:9b:49:51:e3:06:cc:e1:4e:d5:63:
5b:1a:3b:3c:d2:9b:ee:fa:17:2f:66:97:9c:9d:66:7e:0b:aa:
9c:87:0d:ce:81:47:f4:80:5f:96:c0:c8:63:b7:ff:d6:a6:cd:
8d:8a:53:15:22:6c:98:c1:94:a3:c8:c6:62:3b:c0:a5:bb:0d:
84:91:ab:6d:fe:8a:a0:5f:0c:fa:22:ef:bd:f5:dc:a4:43:3d:
18:3b:08:73:3d:dd:5d:6e:bd:c0:ce:ff:7c:d1:db:3d:2c:7f:
04:43:d1:be:24:4a:e2:8d:92:20:47:d3:8e:a8:08:20:0e:d0:
14:41:54:72:b6:48:f0:68:c1:20:ca:43:3c:9c:fb:ae:95:43:
a9:56:56:10:bc:c2:6c:3f:f2:92:4f:37:46:12:61:a2:0a:7a:
af:41:eb:b7:bf:55:6c:3a:a6:06:96:eb:81:df:14:e2:0f:54:
4b:54:2d:18:14:19:81:45:9a:76:11:b3:1b:b6:6d:f8:ab:da:
b6:fd:1a:17:24:d3:46:e7:42:37:14:f4:69:32:ff:1c:f2:8a:
38:c3:19:c6:d3:bb:57:cb:f4:60:da:42:37:12:b9:56:0f:be:
25:68:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org