Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/x73e_XeQ5dp7jFwGQxiWDFYzQGI.roa
File: x73e_XeQ5dp7jFwGQxiWDFYzQGI.roa (raw, json)
Hash identifier: hDIoFaLSl7FlM+is1lE7uZpR8LnrAVxMa55QV1o2iRI=
Subject key identifier: C7:BD:DE:FD:77:90:E5:DA:7B:8C:5C:06:43:18:96:0C:56:33:40:62
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DE4
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/x73e_XeQ5dp7jFwGQxiWDFYzQGI.roa
Signing time: Wed 29 Sep 2021 02:39:42 +0000
ROA not before: Wed 29 Sep 2021 02:39:42 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9311
IP address blocks: 210.201.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3556 (0xde4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:42 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C7BDDEFD7790E5DA7B8C5C064318960C56334062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:6b:11:d0:cb:98:c8:f0:12:8b:b1:ff:fc:
9f:61:e5:57:ee:99:f3:74:5a:41:89:0b:09:a5:cf:
ac:56:e5:fb:79:9a:d3:d1:ce:02:79:a5:d6:70:18:
fe:1b:28:2e:a6:6f:a2:02:5a:cf:c4:26:8a:10:6f:
c0:41:f8:9e:34:af:64:a2:af:e1:7a:52:bb:6d:3b:
72:0c:d7:b8:4d:95:bf:0f:a5:a7:21:30:fa:bc:a4:
a0:2a:4b:27:4b:00:f1:15:30:90:52:7b:87:28:a3:
d2:c9:70:53:a4:f8:c9:8e:f5:6c:ea:2e:0b:2d:1b:
77:53:4a:4f:d1:fb:14:29:49:1d:55:12:d5:d4:4c:
86:b4:22:0d:53:42:b7:4d:e3:6c:1d:81:96:9d:f1:
53:fa:f4:81:4d:a2:57:36:00:57:16:b2:76:84:86:
1c:de:37:63:5d:cf:4a:15:ac:d9:68:79:6c:32:fb:
f7:79:99:8b:04:69:49:84:68:0a:13:13:f4:db:47:
58:53:e0:8d:37:70:ce:97:97:b4:0a:69:99:a5:e2:
29:91:c4:be:bf:7f:cf:c5:da:f9:04:0e:8a:ed:f0:
c6:1c:7c:a8:26:be:c5:f7:e0:17:d0:27:df:37:15:
5c:c6:21:ee:f2:b1:b1:d4:4c:2a:09:17:f2:c7:64:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BD:DE:FD:77:90:E5:DA:7B:8C:5C:06:43:18:96:0C:56:33:40:62
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/x73e_XeQ5dp7jFwGQxiWDFYzQGI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.136.0/22
Signature Algorithm: sha256WithRSAEncryption
58:38:c3:24:53:a6:29:a1:ad:5b:c5:f6:33:26:a4:d3:f1:16:
83:24:bf:e5:88:b6:be:29:4d:9a:8f:f5:89:04:45:b9:43:a0:
eb:f8:70:26:ed:56:79:6f:55:6c:94:e7:44:1d:e4:24:bf:fe:
7a:a1:c0:2b:da:45:49:37:02:ff:f4:ab:8f:4a:28:7e:0c:d2:
22:c5:d1:24:01:17:4d:6b:fe:c4:bd:93:18:7a:c0:46:00:2e:
a0:d8:76:93:bc:fe:0e:d6:c5:e2:3e:3e:7a:fc:ea:d2:36:24:
b2:d7:57:d8:d5:50:e8:41:b6:50:47:28:26:fd:ee:b3:59:a7:
05:fa:6d:56:87:71:14:40:47:a8:53:1d:66:f3:06:7c:0d:aa:
78:c3:d7:72:ac:f6:9d:73:d2:ca:de:6b:a5:99:b3:92:b8:50:
53:7f:1a:31:4c:79:41:f7:bf:63:ba:d7:44:35:92:49:5f:1c:
14:8b:e4:b5:8a:56:4a:b0:e6:d1:2c:c9:c7:3e:2a:7f:1f:7b:
85:6b:61:d1:db:89:7d:4d:f3:bc:07:b0:62:41:a8:21:7f:ac:
2f:a9:25:8a:ba:29:11:fc:b2:57:16:92:b6:40:44:23:7c:5d:
55:5b:7a:d3:03:3a:e9:70:03:32:7a:4d:cf:2a:df:4d:4a:fc:
e0:f4:25:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org