Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/wJ12anjJXBRSmKTKmTQAZFNbOic.roa
File: wJ12anjJXBRSmKTKmTQAZFNbOic.roa (raw, json)
Hash identifier: qWzbXt2iPU1aQV1SxBIZTnJAlno1xe0Wz3CCQgOseQU=
Subject key identifier: C0:9D:76:6A:78:C9:5C:14:52:98:A4:CA:99:34:00:64:53:5B:3A:27
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wJ12anjJXBRSmKTKmTQAZFNbOic.roa
Signing time: Thu 15 Sep 2022 02:40:31 +0000
ROA not before: Thu 15 Sep 2022 02:40:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24155
IP address blocks: 210.63.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C09D766A78C95C145298A4CA99340064535B3A27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8b:c0:71:c4:9b:93:a3:41:36:a0:fe:78:35:
51:23:7c:3c:2a:30:22:0e:f2:b9:28:b9:bc:c9:e2:
0b:76:1f:39:7e:1d:e6:f6:19:71:99:f8:a8:5c:ff:
a3:fb:94:74:7a:e6:a4:ba:28:88:dd:cf:a6:89:0d:
f5:43:66:78:34:56:a7:99:9c:43:78:62:bc:47:d7:
09:a5:96:b7:e3:dc:d5:c0:ab:a4:3d:fa:f3:02:9d:
63:2e:cb:f5:9b:9b:9b:79:09:81:14:26:28:dd:a8:
27:c6:6f:64:93:eb:79:57:b5:7c:26:5e:5d:97:2c:
2f:83:2d:50:14:dc:3e:4d:54:33:06:50:d1:2f:95:
26:63:6b:f5:09:a4:79:16:d7:0b:71:84:d5:f7:18:
02:af:af:56:9c:3f:bb:bd:ec:67:8c:7e:d0:d8:59:
48:c4:29:96:fd:f1:6b:8e:83:61:0b:94:69:59:2a:
04:7b:e1:65:5e:ca:24:63:96:00:61:07:51:34:ad:
4d:af:b3:83:f9:c8:e6:48:b4:33:3b:a9:70:3b:8d:
dc:30:9d:35:5a:a0:c0:39:87:60:df:95:3c:db:cc:
13:b8:fd:94:84:5d:2f:c4:09:43:1c:db:da:f4:76:
db:7e:74:b9:e8:ba:48:23:cf:ae:1a:08:0a:1b:20:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9D:76:6A:78:C9:5C:14:52:98:A4:CA:99:34:00:64:53:5B:3A:27
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wJ12anjJXBRSmKTKmTQAZFNbOic.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.224.0/21
Signature Algorithm: sha256WithRSAEncryption
95:56:ee:d2:8e:15:45:fe:b0:39:80:82:e9:c3:55:b4:63:b3:
bf:a7:d9:76:70:bf:d2:63:5b:c6:fd:da:5e:21:db:33:4c:7d:
f5:77:eb:d9:b4:f0:51:7a:ee:0a:ca:68:d2:0d:0a:00:16:a6:
97:91:34:fb:73:c8:6f:99:a9:ab:87:49:f8:f4:4c:47:fc:48:
5c:07:73:eb:72:56:55:a4:01:50:c2:9a:f2:3e:f1:98:2b:fd:
ab:3c:0c:4e:3e:ea:0c:52:54:13:be:88:c7:f0:9b:e9:9d:3f:
ae:2c:c0:09:d3:a2:f9:ba:27:54:da:d5:93:19:14:cd:e4:92:
b5:ae:83:d7:16:15:1c:40:56:6c:8f:39:62:ce:67:38:1b:e5:
78:65:b5:09:c2:60:07:09:d8:ad:bc:86:33:b5:83:f2:9f:36:
60:88:ad:70:61:84:75:91:ac:83:f1:8b:8c:02:12:c3:0f:b4:
0d:b7:01:6a:a2:dd:89:2d:ab:ed:df:ce:ce:cf:ef:43:a6:29:
4d:40:71:9d:2a:20:38:ac:97:a2:02:e9:d7:fd:11:d6:89:8d:
08:20:ab:6f:96:34:4b:82:61:a5:13:c8:e1:42:b6:1f:aa:9e:
1e:6d:17:1c:bb:41:35:1f:8f:93:36:90:73:93:2b:dc:d4:32:
3d:85:19:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org