Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/wA9-o0WY9bt5Y8GNefedEM8EGkA.roa
File: wA9-o0WY9bt5Y8GNefedEM8EGkA.roa (raw, json)
Hash identifier: yQxMqlfpU29HrP778n8vUCPs/M7u4tkmXL3XDSw08Lc=
Subject key identifier: C0:0F:7E:A3:45:98:F5:BB:79:63:C1:8D:79:F7:9D:10:CF:04:1A:40
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C87
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wA9-o0WY9bt5Y8GNefedEM8EGkA.roa
Signing time: Sun 07 Feb 2021 11:39:57 +0000
ROA not before: Sun 07 Feb 2021 11:39:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 218.34.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3207 (0xc87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:39:57 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C00F7EA34598F5BB7963C18D79F79D10CF041A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:65:8e:83:df:4e:27:9f:53:3d:50:8e:f7:
f7:5f:a1:16:34:51:18:5c:ba:bf:8e:da:fb:af:17:
fc:12:eb:27:f9:23:40:b0:6e:76:49:ba:d0:79:c5:
fd:7f:6a:f6:fe:f4:07:2f:e7:81:03:5d:e4:be:eb:
88:c1:51:29:74:47:ff:3b:b2:3f:f3:78:99:b4:8f:
4a:0e:df:64:a5:64:18:19:ca:b4:bb:ee:85:d2:d1:
34:47:23:10:6a:2e:4f:d8:2c:66:79:1a:26:a0:a0:
40:b6:0d:10:f8:d6:3c:a7:f6:a8:7b:ab:23:bd:ef:
20:6b:62:56:63:fe:2c:e2:06:87:4d:1d:48:e1:c3:
73:18:14:e4:a3:2b:6b:9f:a6:66:6b:ca:21:c4:64:
fa:c5:f3:c9:9a:3d:ec:65:43:9e:28:8e:93:4e:75:
26:cf:aa:c3:01:42:6b:7b:f8:f6:78:e6:62:ee:bf:
4f:35:19:cb:a9:32:c2:59:52:ad:37:5b:dd:bb:ae:
09:2b:0b:40:d4:80:02:81:84:8e:d4:10:fe:8d:f4:
9a:ac:4d:51:42:51:09:da:d3:a5:86:27:df:a5:fc:
37:dc:0b:5e:69:6b:fc:7b:4c:e4:34:d7:2d:34:a1:
83:20:1e:76:93:85:4c:c6:ee:8c:b8:51:da:c3:6c:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0F:7E:A3:45:98:F5:BB:79:63:C1:8D:79:F7:9D:10:CF:04:1A:40
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wA9-o0WY9bt5Y8GNefedEM8EGkA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:80:61:87:1e:0b:c0:af:7b:e7:35:95:09:26:bf:ca:db:fc:
fe:b4:5e:75:14:94:5d:67:7f:bb:e5:4a:f3:1b:91:f4:2a:19:
0b:3b:84:c7:47:f5:dc:fc:61:15:5d:89:c5:1b:2b:84:8e:35:
81:07:fc:38:2a:c2:11:39:69:57:c3:01:bb:44:21:ba:d2:86:
8d:fe:b4:c9:5a:70:c9:29:83:65:d3:ff:99:48:2f:2e:38:1b:
28:fd:0e:6b:8b:95:fd:3a:ed:50:4f:8b:83:b7:d5:89:95:85:
cf:14:25:b2:25:ce:d5:ac:9f:0d:fb:03:7c:28:e3:69:ec:ac:
de:35:48:f7:fc:e9:ce:07:0e:3d:a5:05:eb:b3:f0:76:ee:81:
25:5d:ae:d3:f0:a4:23:f1:8f:83:e0:37:19:0f:b9:71:d1:67:
1f:32:b4:9d:08:67:56:bf:e2:e6:21:e8:cc:ae:22:a1:6f:ab:
3e:a5:a0:1c:d2:67:46:9b:a6:b7:a1:0d:0a:b6:9f:de:0e:eb:
a1:6f:8d:93:1c:54:5c:aa:3f:7c:8e:5a:bd:ca:73:57:11:aa:
b7:7a:c7:eb:94:5e:7d:ed:d9:09:6c:90:83:32:e6:81:19:58:
9e:ed:0c:0d:3e:9d:57:2e:4c:85:f3:7a:95:1f:ea:b1:93:14:
98:c5:ff:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org