Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/w3i4hgbSSmFvdDzDP5C_sbqBVso.roa
File: w3i4hgbSSmFvdDzDP5C_sbqBVso.roa (raw, json)
Hash identifier: 4L1DLC4v0bIxGhjPhlQVjtIwV4/Ez3aY6oVB+LQSEu0=
Subject key identifier: C3:78:B8:86:06:D2:4A:61:6F:74:3C:C3:3F:90:BF:B1:BA:81:56:CA
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/w3i4hgbSSmFvdDzDP5C_sbqBVso.roa
Signing time: Thu 15 Sep 2022 02:40:22 +0000
ROA not before: Thu 15 Sep 2022 02:40:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 203.79.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C378B88606D24A616F743CC33F90BFB1BA8156CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:e4:63:59:05:18:1e:d8:b5:4b:5d:8e:49:
64:22:68:f8:55:57:a9:50:b9:ed:61:25:93:79:bc:
61:53:9a:18:30:55:8f:3a:59:77:1e:56:7e:d3:98:
91:8c:00:2a:92:7c:62:2c:2c:50:0a:a3:36:ea:c8:
dc:cb:b4:77:72:77:60:a9:e7:ba:ab:cb:68:a3:e7:
9f:44:ad:7c:54:d1:2a:9f:3c:cf:88:d8:b7:f0:43:
c4:b4:4f:cf:5a:29:e4:17:3f:d6:b4:b0:27:01:26:
f1:c4:ec:07:89:f3:3c:5e:a3:91:97:d5:9e:56:e4:
17:8c:7f:3d:d9:53:fa:4a:7b:9b:7b:03:bc:77:b2:
56:a3:a5:29:f7:4b:50:c6:89:a2:fe:9a:ae:6c:93:
05:85:38:e7:db:d5:7d:9c:1c:ec:c3:f8:21:da:56:
ba:5e:68:db:c5:6e:76:74:90:79:ff:41:c9:10:22:
2f:51:8e:4a:64:e3:a0:4c:f3:a0:ad:f4:4b:b2:7d:
39:70:66:69:4b:24:07:18:9d:4a:43:0c:94:6b:80:
38:60:2d:d2:89:c4:22:75:e6:b6:78:70:c7:82:76:
98:85:46:ec:68:2f:77:87:1d:13:d9:33:f7:36:cf:
3f:7f:98:50:2f:26:7a:a6:92:b3:9e:00:ce:4c:bf:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:78:B8:86:06:D2:4A:61:6F:74:3C:C3:3F:90:BF:B1:BA:81:56:CA
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/w3i4hgbSSmFvdDzDP5C_sbqBVso.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:59:5f:d7:c7:cb:c1:a5:d8:9e:a1:4e:95:fb:22:2b:8c:6f:
a3:87:b8:d7:63:fd:18:d3:a1:0f:e9:21:f8:83:e4:79:4e:3f:
f8:e4:71:b6:26:e0:f8:15:1c:61:0a:59:08:78:1d:f3:27:b7:
b5:8e:6a:7c:5a:3f:31:25:83:5e:c5:0b:73:25:8c:f1:9b:33:
f7:6a:7f:0a:b3:45:6c:c6:61:fa:40:f9:01:8b:b0:63:9e:50:
a5:66:cf:b8:cf:77:75:c6:30:dc:91:b4:31:bf:d3:9b:9e:4a:
5b:f8:7b:8f:b2:68:c4:c8:cb:7d:24:5f:12:ba:6a:e2:3d:ac:
56:18:bf:f1:d2:bd:e2:c7:da:a2:f1:c7:35:d4:15:78:51:43:
c2:ff:8c:70:8c:dc:c8:b2:1f:8a:ef:c0:e6:80:c1:dc:7a:39:
7a:04:78:d1:0a:b1:01:7a:87:dc:a6:bd:08:8e:65:7a:a3:4c:
13:cc:b3:63:7d:66:26:e3:e7:ff:ba:b9:5d:c7:1f:eb:d8:37:
4c:1f:21:95:45:2c:18:60:8e:43:48:cc:a9:e8:16:2f:d9:a5:
05:72:3a:2d:8e:1e:bc:a6:be:e8:ca:e5:ff:54:f5:71:2b:c7:
32:40:07:11:39:55:fc:89:34:17:52:f6:43:7e:85:b8:f8:3e:
7a:67:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org