Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/x_IHJVNY7nfEBieGdAB3BYuXIsQ.roa
File: x_IHJVNY7nfEBieGdAB3BYuXIsQ.roa (raw, json)
Hash identifier: X0u/C694mV2tbKXHUNdYTtwKnYw9cbKc5kr7KWB40fM=
Subject key identifier: C7:F2:07:25:53:58:EE:77:C4:06:27:86:74:00:77:05:8B:97:22:C4
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0BF9
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/x_IHJVNY7nfEBieGdAB3BYuXIsQ.roa
Signing time: Sun 07 Feb 2021 11:34:27 +0000
ROA not before: Sun 07 Feb 2021 11:34:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.201.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3065 (0xbf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:34:27 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C7F207255358EE77C4062786740077058B9722C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:f4:a7:fb:36:0b:83:40:7a:20:9b:43:9d:
2b:20:4f:bd:d5:b0:aa:9b:53:d3:56:73:c9:67:34:
6b:fd:8e:77:b9:b6:e0:52:49:6a:05:0e:70:59:5f:
e8:ba:bb:17:79:c8:77:f8:bd:af:e8:a4:5a:01:28:
02:02:fa:79:9c:2c:cc:14:c7:70:66:75:22:a4:0a:
d8:04:59:0e:08:d2:79:36:62:4c:f1:dc:28:af:3c:
67:71:bc:9e:94:a2:c6:75:0f:bf:ac:13:9c:c3:23:
41:7e:71:ab:57:a3:91:0a:58:51:8c:16:23:47:3d:
d9:a8:0f:1f:f1:59:4b:0f:d0:ae:30:2c:b6:6d:8d:
53:16:a1:5c:96:46:ac:58:9e:b6:1c:21:7c:4b:0c:
fd:4f:6e:c4:35:5c:2c:33:e7:f4:79:59:05:29:8e:
d2:31:4e:79:2d:72:d0:4f:4e:ad:0b:eb:54:d4:d5:
8e:61:8a:30:af:8c:cb:cd:8c:83:4d:80:31:55:92:
df:8b:4c:a3:82:c9:ad:38:33:27:ad:c4:67:4d:68:
95:12:d2:98:82:68:61:2c:48:95:7f:a5:cd:0f:95:
8f:57:6d:6c:f3:81:6b:dd:3b:fd:07:67:8e:ca:22:
4d:84:d9:d6:b1:eb:ae:c0:c7:aa:59:0c:5c:f9:7e:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F2:07:25:53:58:EE:77:C4:06:27:86:74:00:77:05:8B:97:22:C4
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/x_IHJVNY7nfEBieGdAB3BYuXIsQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.72.0/23
Signature Algorithm: sha256WithRSAEncryption
79:81:84:57:95:88:dd:a0:22:e9:e5:bd:56:78:a5:1c:37:ff:
d1:73:68:71:bd:7f:25:5d:20:fb:40:b4:e9:8f:d3:51:1a:0f:
de:43:1b:ac:0e:3c:cb:ce:90:55:f9:a9:c7:b8:6e:16:cf:c1:
40:fa:da:00:ca:35:48:3a:00:d8:96:3d:fc:c5:0e:85:d7:51:
fe:a4:19:68:aa:07:50:1f:ba:3f:d1:be:c8:d5:6e:2e:63:ca:
36:05:7c:f0:13:a7:f0:65:49:49:6c:e6:9f:d8:49:27:53:a8:
0d:12:4c:ca:da:9c:80:69:8a:85:b6:26:3e:34:e5:a1:bb:8f:
c4:f8:61:1c:a4:dd:a4:51:2d:62:0a:33:7b:7f:58:31:22:5d:
ee:41:63:b8:8b:61:b4:a0:2c:c5:4d:bc:08:57:35:9e:70:88:
53:27:0f:e9:70:bb:11:f9:90:ab:3e:bc:2d:db:92:24:71:af:
50:46:43:6e:87:13:0a:c3:b0:1c:16:69:66:e0:84:46:05:54:
e9:f0:fe:a8:ab:77:37:a5:76:ef:1e:7f:5a:34:3b:ef:0f:7d:
cb:6e:99:ad:fb:79:30:f3:6a:f3:49:10:54:f3:dd:22:5f:2b:
bb:e9:30:bc:a0:d1:ff:d0:91:b4:8a:30:6c:13:51:5b:59:ef:
3c:0c:4c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org