Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/w5_7YkdLHHGGb9x9lKhu0g46IrI.roa
File: w5_7YkdLHHGGb9x9lKhu0g46IrI.roa (raw, json)
Hash identifier: 3Ise45mnGA8nl/z8mqZ9GNLxJYxDxDLgxdaB+jTgQc8=
Subject key identifier: C3:9F:FB:62:47:4B:1C:71:86:6F:DC:7D:94:A8:6E:D2:0E:3A:22:B2
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0BC3
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/w5_7YkdLHHGGb9x9lKhu0g46IrI.roa
Signing time: Sun 07 Feb 2021 11:33:48 +0000
ROA not before: Sun 07 Feb 2021 11:33:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 203.79.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3011 (0xbc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:33:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C39FFB62474B1C71866FDC7D94A86ED20E3A22B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:a3:c2:54:5c:e2:47:d5:74:44:d2:09:8f:
5a:b7:8c:47:17:d3:ce:77:2b:7f:a3:c4:d2:a5:2c:
f3:46:35:d8:83:54:92:07:ca:f3:54:3e:6f:4c:16:
1a:07:e8:57:da:67:ed:0c:a1:ab:76:82:aa:ba:7b:
77:d4:18:87:8c:e2:fd:7a:0b:bc:b2:79:b2:aa:6a:
3f:cc:1e:c8:ea:2d:c7:d6:34:2d:4b:9a:e0:71:75:
2d:54:5f:c6:e3:c1:e1:f0:e3:ae:28:cb:04:4e:12:
01:69:d4:fc:d0:07:c8:43:f6:4d:22:f5:76:e5:54:
99:1e:15:71:f1:7e:cf:e9:cb:4a:1a:8b:43:ff:1b:
e3:bd:a1:2d:1e:5e:49:d5:57:8f:cd:e7:05:cd:6a:
c9:57:e3:c0:3e:35:b5:3b:d7:a2:5d:35:1c:bf:ec:
3c:75:b6:6b:24:a9:ed:5d:33:1f:05:64:84:71:62:
55:1a:c8:49:34:85:46:73:a0:f7:cc:2d:ec:26:77:
e8:06:41:61:ee:16:04:fb:6e:07:47:74:2b:e8:8c:
09:24:d2:14:23:05:71:ec:55:5f:58:bc:62:03:07:
80:33:53:30:7e:04:1c:9a:40:3a:5f:12:8e:6a:fb:
75:cd:02:2d:c3:f8:ab:7e:b5:8f:6f:74:db:33:34:
06:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9F:FB:62:47:4B:1C:71:86:6F:DC:7D:94:A8:6E:D2:0E:3A:22:B2
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/w5_7YkdLHHGGb9x9lKhu0g46IrI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.235.0/24
Signature Algorithm: sha256WithRSAEncryption
22:be:96:15:45:ef:b5:63:39:ed:f4:9b:fd:0a:c7:49:8f:26:
d1:e5:82:54:e9:2b:7d:b6:8c:b4:85:1e:9a:90:b2:91:8d:37:
86:38:60:1b:79:85:44:84:f6:30:a5:52:86:8d:6b:27:05:a2:
15:32:be:35:7b:bc:90:10:04:5a:5e:12:0f:b2:64:c6:1c:a6:
ee:cd:f6:ff:1c:f2:8b:0a:e1:80:ed:0b:44:4e:f0:a3:8d:ba:
78:67:a9:a1:28:97:15:7b:ca:47:95:21:c4:c9:fc:e9:de:ee:
d0:a1:f9:ab:25:cf:69:b5:c5:29:86:84:99:08:3b:a7:30:72:
5e:38:ce:55:fa:41:c8:f8:0e:b7:55:83:cd:8c:71:72:34:b5:
99:89:40:34:36:57:e3:fe:6a:0a:f1:c9:ed:c6:c0:6a:03:38:
b0:a7:71:15:91:2d:f5:59:bd:22:27:b4:6c:b5:3b:c9:68:0d:
c6:b1:d2:51:da:d7:37:e0:4a:3c:67:e8:8f:fb:47:f2:f3:b9:
29:aa:7b:1c:52:c7:e1:ed:26:ee:56:6b:42:41:79:70:31:af:
ff:03:a7:5b:09:a3:f9:b4:64:1f:c3:38:53:54:d6:95:fa:1a:
3c:81:44:81:35:4d:79:67:7b:57:5c:04:d4:d6:6f:d3:d5:47:
76:87:fc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:25 2025 by rpki-client