Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/wfz-5aGe1mKCNzw4G-ll-5goTII.roa
File: wfz-5aGe1mKCNzw4G-ll-5goTII.roa (raw, json)
Hash identifier: 64L/WnicpF6oQOwusCyAkbhlRJm/V3+CAnSp5Aatj+A=
Subject key identifier: C1:FC:FE:E5:A1:9E:D6:62:82:37:3C:38:1B:E9:65:FB:98:28:4C:82
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C89
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wfz-5aGe1mKCNzw4G-ll-5goTII.roa
Signing time: Sun 07 Feb 2021 11:39:59 +0000
ROA not before: Sun 07 Feb 2021 11:39:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 218.184.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3209 (0xc89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:39:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C1FCFEE5A19ED66282373C381BE965FB98284C82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:c1:a1:18:3b:cb:e4:73:89:08:55:8c:b5:
f1:a5:97:70:12:02:11:12:a9:ab:c8:09:24:61:18:
3c:07:02:92:bd:dd:a3:8c:ca:9c:2e:5b:92:67:04:
7a:ba:13:13:c0:76:2c:5e:42:28:a5:1a:53:e5:31:
25:a3:82:fa:96:38:d3:ed:03:96:42:d8:b8:28:5f:
9d:72:01:4f:5d:8b:d4:8f:09:75:20:38:18:ca:be:
f9:29:ef:66:6e:f4:7a:2f:bd:92:10:71:d0:50:24:
47:8c:33:30:dd:b3:8e:48:c5:dc:cf:85:ac:42:2a:
4b:15:9a:60:a0:a8:be:da:e4:bd:c5:e9:a2:ac:04:
3c:42:e6:47:77:72:f1:f0:75:ae:13:85:79:a2:fe:
c5:d8:80:f8:e9:99:e3:00:b5:d9:aa:07:0d:74:6f:
f6:d5:93:39:97:53:29:58:1e:7b:47:e8:f2:67:e6:
95:94:58:7a:3a:51:25:93:d2:ad:0f:05:00:1e:c9:
7a:33:97:56:c2:2d:06:65:3d:f6:ac:7f:1f:2f:a7:
73:a5:e1:5c:b2:6c:27:ec:13:16:c4:33:68:4d:d6:
c2:42:7d:6d:f9:20:6b:e0:7e:c9:32:e0:d2:87:c3:
4b:73:0a:e0:b3:a0:a1:9a:de:99:59:c1:f5:2d:8c:
c1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FC:FE:E5:A1:9E:D6:62:82:37:3C:38:1B:E9:65:FB:98:28:4C:82
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wfz-5aGe1mKCNzw4G-ll-5goTII.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.184.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:fa:9a:8a:c0:9a:ef:a0:83:4c:60:90:0e:0f:17:67:fe:69:
73:27:f8:bd:75:49:b0:ea:7a:99:ab:7a:69:32:cb:c7:db:e9:
40:8d:e4:28:a2:91:0f:cd:9e:82:5d:50:71:a1:da:d4:e2:a3:
f4:9f:44:51:12:68:0c:06:94:8e:04:53:c9:f8:c2:26:a9:4c:
64:9d:66:fb:78:ee:b4:66:40:07:11:c2:34:ad:55:4f:92:f8:
4b:d0:e6:95:d3:3c:84:b1:51:3a:7b:d2:8d:a2:8d:cf:8c:d2:
2c:2c:59:a5:29:65:b9:a0:38:70:6e:dd:c1:04:d2:44:92:b7:
cb:a2:c7:a7:46:92:88:45:64:7c:df:f4:b1:cb:0b:f2:2e:91:
44:4a:81:39:01:68:ca:00:b7:02:b6:24:f7:a2:11:41:dc:8c:
99:24:ad:41:a3:a0:1c:79:ed:38:f2:e0:c6:72:e9:51:3a:61:
ac:2b:ea:e1:17:c2:39:96:60:c2:2b:69:b1:9c:c1:a4:e2:bb:
09:4a:63:c7:1c:01:41:b5:51:d8:92:ba:83:a3:74:03:a7:bf:
72:7b:67:b4:b4:17:b6:d2:e2:f3:18:51:26:f9:2a:47:83:9b:
d0:de:f7:3b:14:9c:46:51:9d:94:c7:a9:d7:f6:21:42:92:b5:
f6:01:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org