Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/wO7WFMHkTgbsNrZpyyeDnVcsIqs.roa
File: wO7WFMHkTgbsNrZpyyeDnVcsIqs.roa (raw, json)
Hash identifier: 56s6JHXREF+awukGTF8tvl9Bp0OdP2lOPTl/bRSWXlU=
Subject key identifier: C0:EE:D6:14:C1:E4:4E:06:EC:36:B6:69:CB:27:83:9D:57:2C:22:AB
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12FE
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wO7WFMHkTgbsNrZpyyeDnVcsIqs.roa
Signing time: Fri 01 Sep 2023 08:05:15 +0000
ROA not before: Fri 01 Sep 2023 08:05:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 210.202.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4862 (0x12fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C0EED614C1E44E06EC36B669CB27839D572C22AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:d5:75:3e:a0:1f:64:64:a8:25:6e:b3:86:
fa:72:ca:75:e5:46:f3:87:4c:2e:26:78:fb:91:40:
4d:42:2b:13:ce:f1:02:5c:9c:04:5e:c5:5c:ea:3c:
60:71:a2:d2:bd:dc:5e:b1:13:a4:cc:a8:bb:ba:3a:
bf:f2:4c:5d:45:b3:a0:ee:4c:b2:0a:9c:96:2a:67:
7c:61:6d:e9:92:b2:a6:69:d7:c0:aa:9a:98:e9:2d:
78:b7:f1:f8:13:df:73:c5:d4:60:d9:d3:2c:f7:31:
f2:26:09:bf:2a:91:55:6d:6b:05:75:86:5a:08:31:
7a:be:1c:5e:3c:c8:e8:46:32:51:b3:08:a2:86:4b:
b8:98:86:cd:3e:7e:39:9d:0b:c2:a0:31:a9:a9:e6:
da:6e:ce:df:77:67:83:42:2c:23:e3:91:4e:d0:07:
af:cc:8c:18:61:70:dc:b1:b8:f4:7c:6b:5c:58:1b:
27:cd:0e:29:8c:55:bc:11:59:5f:09:12:b5:c9:2b:
c9:96:db:4e:61:66:4e:89:70:ae:1c:fb:92:31:c5:
f1:5f:70:ea:57:fc:c6:01:a2:af:89:ed:fb:b7:f3:
7c:45:05:34:f2:10:d0:e7:fe:f0:b4:27:54:6d:74:
6a:c7:3c:f8:da:34:d7:6a:7e:cf:f7:31:56:d0:ce:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EE:D6:14:C1:E4:4E:06:EC:36:B6:69:CB:27:83:9D:57:2C:22:AB
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wO7WFMHkTgbsNrZpyyeDnVcsIqs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.192.0/18
Signature Algorithm: sha256WithRSAEncryption
6d:92:df:41:ed:e9:6f:0c:45:3a:40:13:07:6c:dc:7b:93:90:
c8:42:8e:f9:ee:99:63:04:b4:4d:64:2a:39:60:1d:53:de:8a:
b3:2d:39:7e:3a:70:f7:a4:b6:32:8c:79:55:a9:93:38:fa:68:
a1:cd:7b:e8:a1:e5:17:c6:6c:b0:e2:9f:b0:fa:7f:61:67:e8:
ac:9c:a9:a7:af:33:47:00:2f:44:79:f0:69:1a:d2:c5:ce:e1:
90:a0:9b:8d:0b:c7:3b:e9:d1:0b:a5:bf:db:70:12:07:19:c1:
98:bd:c7:fd:8c:97:37:b7:62:9f:05:df:fd:b4:fd:91:d3:ca:
82:94:a6:75:f7:63:9d:46:78:81:4a:f6:6b:de:93:a6:d7:5f:
8d:29:17:90:00:e8:36:d0:24:86:8a:65:9b:e1:ba:69:89:65:
8b:20:4d:84:83:be:98:2b:29:51:1f:69:05:44:34:c4:3d:29:
a2:ce:5f:8d:2e:b9:6f:cd:fc:9c:b3:21:9a:94:3f:ef:3a:f6:
79:fb:e0:e7:52:67:b9:79:65:90:f8:58:3d:8d:98:d7:c2:42:
e9:00:9f:01:12:d3:d5:a1:6a:97:83:2b:0d:cb:fd:9f:d5:bd:
29:86:63:ec:5d:cd:16:ab:e1:ad:2e:d2:3b:b2:4c:c4:09:2f:
2c:3e:44:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org