Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/vw2HQyVxLg_HsDvkAI4_DD8VX94.roa
File: vw2HQyVxLg_HsDvkAI4_DD8VX94.roa (raw, json)
Hash identifier: uuuvH5tyMSkOfgqnfS2182aVo7GDUe8QGWatpY2Lj1M=
Subject key identifier: BF:0D:87:43:25:71:2E:0F:C7:B0:3B:E4:00:8E:3F:0C:3F:15:5F:DE
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DA4
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/vw2HQyVxLg_HsDvkAI4_DD8VX94.roa
Signing time: Wed 29 Sep 2021 02:39:23 +0000
ROA not before: Wed 29 Sep 2021 02:39:23 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7482
IP address blocks: 2404:0:2000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3492 (0xda4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:23 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BF0D874325712E0FC7B03BE4008E3F0C3F155FDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:7c:3a:ba:a6:6c:f5:a4:15:e6:1c:b0:00:
10:6c:10:18:3a:90:b3:7d:ab:1c:c0:d2:d1:02:5f:
0b:f9:58:73:5f:8f:c6:0f:9c:57:66:5e:a3:25:5b:
24:0a:38:e2:b7:6f:1f:fd:05:86:e3:9f:9d:cd:e5:
03:7b:4b:d5:40:f5:d1:bb:fe:72:dc:67:a2:41:12:
d2:ba:fa:6b:8e:c7:73:76:13:10:e9:61:74:b0:c4:
a1:48:67:86:d2:af:51:32:10:75:24:17:29:5a:e9:
34:d1:d2:50:b3:fe:bb:17:9b:04:28:c6:c8:2e:c8:
ca:e7:5e:d1:03:55:f6:37:c7:b4:b7:e1:5e:90:bf:
24:1c:71:89:ae:1c:de:c4:20:51:6a:e4:a1:f3:10:
71:5b:f8:c6:49:e3:49:8f:c4:43:7e:c8:27:11:98:
c0:80:72:ab:4f:92:ca:e4:70:9e:bd:ac:1c:ad:14:
90:cc:0b:46:ea:f6:0a:be:76:0f:d4:cf:4e:86:9c:
03:13:a2:88:ba:4b:5a:88:39:53:56:ca:85:30:db:
c7:07:b4:94:d0:29:e2:4d:ac:14:b5:a7:a3:f3:d7:
2f:c6:f1:fd:ca:37:cf:92:11:ff:37:1f:0c:b0:f2:
25:74:9a:92:63:62:3c:4e:95:65:4b:1d:11:4f:21:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0D:87:43:25:71:2E:0F:C7:B0:3B:E4:00:8E:3F:0C:3F:15:5F:DE
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/vw2HQyVxLg_HsDvkAI4_DD8VX94.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
45:fc:94:33:3e:57:69:66:8a:a4:a0:16:14:59:e5:6a:f1:22:
52:74:7a:40:95:61:0a:47:5d:ef:7b:ce:06:e7:48:3b:e5:01:
d7:1c:4b:5d:31:5d:b3:13:8c:62:af:a8:ec:51:e4:9c:72:4e:
c4:01:f5:53:29:78:cb:bb:24:93:8e:af:04:91:82:74:ed:0f:
0f:8c:91:a2:14:24:f7:09:7e:6e:83:db:56:26:cb:5e:73:5e:
96:0e:90:e4:40:8c:ac:9b:f5:8b:1e:76:76:d1:51:a0:d6:39:
c5:67:56:93:a9:59:0f:6d:b8:33:9e:32:54:44:63:ae:18:66:
83:65:cf:8c:84:be:ec:d8:05:71:2d:39:41:60:23:4d:90:a3:
ea:f9:72:fe:e0:ad:d7:ea:1e:7a:55:7b:8a:16:c4:0b:0c:d4:
f9:20:df:e7:d6:54:33:45:e2:81:c5:01:9c:ed:e0:71:6f:e6:
98:ad:5c:37:14:07:cb:f6:92:90:50:71:f6:36:98:3a:29:be:
72:a4:6b:80:90:8d:6b:2b:2e:16:72:98:4f:79:c7:38:e4:b4:
44:67:af:77:e4:bb:64:33:d3:11:77:da:91:1a:98:6e:2a:a8:
46:1c:84:fd:71:1c:43:a7:6a:64:8d:2d:94:37:1a:ea:58:a2:
75:7d:77:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org