Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/uzK6cjzyQLWqLRFMtXnzifxdumo.roa
File: uzK6cjzyQLWqLRFMtXnzifxdumo.roa (raw, json)
Hash identifier: f5kCbG0KASRsl+TqIrVu7X+M9fyqWlKnXJwTxwrg7iE=
Subject key identifier: BB:32:BA:72:3C:F2:40:B5:AA:2D:11:4C:B5:79:F3:89:FC:5D:BA:6A
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 097F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uzK6cjzyQLWqLRFMtXnzifxdumo.roa
Signing time: Tue 29 Sep 2020 10:01:55 +0000
ROA not before: Tue 29 Sep 2020 10:01:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24154
IP address blocks: 203.207.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2431 (0x97f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:55 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BB32BA723CF240B5AA2D114CB579F389FC5DBA6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:a2:2f:10:7a:a1:35:20:cd:09:8b:5d:f7:
b9:f3:e1:e7:92:06:95:65:0e:e5:69:79:b6:84:9e:
59:b5:9e:43:eb:b2:d1:f9:cc:d6:d7:13:c8:a2:c6:
97:f1:e3:2f:21:5c:0a:cb:e6:3e:0f:d1:d9:56:6c:
29:3d:3c:87:ec:e2:7b:9f:b7:68:08:89:1d:b1:b4:
19:52:51:44:9e:d9:9d:a9:38:26:c6:48:34:c1:59:
de:c0:e5:0f:90:ff:97:62:e2:e3:37:40:ae:ef:c9:
8e:c1:f9:d8:ba:29:4d:bc:ea:37:dd:99:20:42:b4:
73:96:9e:84:e0:75:65:f3:6a:0a:a6:95:a5:33:27:
b3:35:2b:e4:5f:ec:b2:07:06:87:fb:50:61:ed:70:
62:c9:73:69:1e:6b:11:96:ce:e7:79:84:a4:96:93:
95:59:95:30:01:f7:79:ff:82:76:68:d5:bc:5f:28:
f6:50:f3:0e:35:de:6d:70:43:18:94:f7:5a:d1:49:
de:77:55:d5:32:04:b9:40:bb:e8:62:91:fe:1a:f0:
a9:4f:5b:c3:31:3a:0b:3b:4d:a9:a5:b3:98:53:20:
ab:ac:f7:76:b3:c5:4d:24:e9:3d:26:2e:22:f0:f7:
0e:9c:54:5c:6d:64:90:6f:e7:bf:c4:d7:49:df:fe:
dd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:32:BA:72:3C:F2:40:B5:AA:2D:11:4C:B5:79:F3:89:FC:5D:BA:6A
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uzK6cjzyQLWqLRFMtXnzifxdumo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.207.44.0/22
Signature Algorithm: sha256WithRSAEncryption
38:d6:df:e5:d4:03:5e:fe:8b:96:ec:69:8c:b1:5c:c3:80:23:
06:aa:cf:2c:d8:28:6f:bb:ec:f3:35:af:45:95:4a:c8:f2:e7:
0c:f5:d2:98:ce:2a:01:d7:56:9e:34:f4:2e:d3:7f:73:79:38:
67:41:9d:a2:de:86:e3:50:86:b9:7e:a3:4c:62:a5:f0:04:12:
e7:60:2c:90:eb:19:81:cf:82:25:f4:50:d2:1b:21:15:83:55:
0c:a5:0a:f1:24:d4:98:d6:27:8a:52:79:42:df:fd:5d:40:14:
fa:15:1d:06:40:a4:20:64:9f:3d:5e:0f:96:33:10:57:0a:73:
be:d0:d5:c7:49:ff:45:88:96:b2:13:f8:10:db:26:a9:0f:47:
39:3b:00:fb:71:6d:3d:7a:81:26:d4:f8:16:87:55:d0:b2:a3:
08:23:f5:fe:8e:5e:7d:77:1e:6f:e0:2f:3a:91:37:ca:8b:cb:
f8:e6:9a:c3:1e:d8:08:13:dd:2c:7d:35:4e:e1:e4:09:b6:3e:
6a:dd:a6:74:4c:24:eb:5d:6f:92:cc:bb:73:b5:27:50:7c:0f:
c1:f9:f6:20:29:7b:3b:63:41:f3:89:8e:08:0b:94:29:fe:90:
45:c8:21:77:49:d6:d7:c8:d1:2c:fc:5f:69:5c:c7:c9:56:28:
32:25:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org