Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/wQXvbm7fwCjSfSlho44aZ-up19U.roa
File: wQXvbm7fwCjSfSlho44aZ-up19U.roa (raw, json)
Hash identifier: UO8pCr4kFDgOdDyiB9y4L4DqwE4d9Upnl6LKXN11csg=
Subject key identifier: C1:05:EF:6E:6E:DF:C0:28:D2:7D:29:61:A3:8E:1A:67:EB:A9:D7:D5
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12D9
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wQXvbm7fwCjSfSlho44aZ-up19U.roa
Signing time: Fri 01 Sep 2023 08:05:04 +0000
ROA not before: Fri 01 Sep 2023 08:05:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 124.218.0.0/16 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4825 (0x12d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C105EF6E6EDFC028D27D2961A38E1A67EBA9D7D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:8c:3c:60:3b:ce:2f:39:3f:af:82:81:9d:
e9:87:b1:a9:3a:d3:87:6c:80:60:03:00:10:17:3b:
72:91:cd:22:1b:dc:92:a1:d4:cf:1b:26:15:07:09:
63:07:25:87:e8:03:5d:df:26:fc:bd:83:c6:b4:3a:
21:98:fd:5b:3d:33:d9:a4:11:98:c2:bc:5f:40:be:
b6:d6:a2:3c:dd:d0:71:be:b0:f7:51:69:9b:b6:6b:
de:27:fc:b9:cf:98:08:02:f6:68:50:9e:c3:4d:16:
ec:e9:ef:6a:ea:21:e4:d6:77:48:69:3a:3f:12:73:
5f:0a:5a:59:21:2f:8a:30:81:3b:89:03:fc:ab:d9:
7e:5b:8d:cd:1d:9b:b4:1c:73:5d:04:15:fe:f9:11:
5c:60:31:1b:6f:b4:c7:40:53:f2:2f:80:8a:ae:b3:
c8:bc:49:a3:1e:2f:fd:bd:89:c5:d0:d3:64:11:02:
92:c9:2c:a6:dd:53:54:7d:66:66:10:af:79:67:17:
96:56:7d:61:cb:e7:df:76:a5:58:17:03:ef:9e:09:
38:ab:9b:00:cb:49:d6:b6:fe:e0:fc:25:d3:9b:00:
5a:44:87:ae:d3:ca:4a:a6:de:9a:1a:72:43:97:a8:
73:76:9a:59:5c:11:59:89:31:cf:64:6c:38:65:17:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:05:EF:6E:6E:DF:C0:28:D2:7D:29:61:A3:8E:1A:67:EB:A9:D7:D5
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wQXvbm7fwCjSfSlho44aZ-up19U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:fc:24:5d:bc:75:77:db:da:a9:22:e1:40:92:e4:72:47:a5:
88:69:7a:c5:e3:2e:93:4c:bb:af:e9:92:86:95:dd:57:d5:1a:
21:e0:03:12:de:d9:02:ed:b1:16:79:a7:a8:a4:7d:14:d9:9a:
32:81:41:7e:51:fc:ec:ec:f4:ed:b5:62:3f:51:61:08:b2:11:
81:da:63:77:ef:cf:dc:d4:e1:26:51:22:fb:53:7c:83:fc:52:
b2:ec:d2:56:9a:47:65:a6:82:63:d3:7c:fd:e8:b6:a6:a2:e5:
05:ae:dd:87:27:6e:be:e6:da:5b:4d:5a:6b:e6:56:31:1a:41:
49:e0:45:99:e8:e7:16:c8:22:c9:12:f6:38:12:c5:08:e2:36:
3c:12:d3:59:bb:7e:99:e1:33:d3:35:66:89:d1:04:81:90:0a:
f9:ac:f3:86:73:f3:49:45:fa:ac:ec:cc:76:0d:0c:d3:7b:a4:
fc:4b:0a:4b:42:69:23:90:89:a8:84:96:5d:f9:aa:2c:8a:ee:
9f:06:b3:78:a5:2e:5a:3e:7f:11:b0:a3:d6:0a:cf:26:a2:e2:
6c:aa:64:43:c1:dd:9b:72:e7:fb:7d:7c:80:5b:d6:78:c0:73:
8b:90:cb:c4:f9:68:43:03:f5:89:81:24:f7:17:d8:f5:38:a3:
81:9b:46:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:50:43 2024 by rpki-client on console-fra.rpki-client.org