Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/x_ISM_Eu5vdv5pYrGmbl7YZbupo.roa
File: x_ISM_Eu5vdv5pYrGmbl7YZbupo.roa (raw, json)
Hash identifier: M9OhWuvrqpYirGLlJGR/jZEqPmQ3WRM2rZvR7l9xSu4=
Subject key identifier: C7:F2:12:33:F1:2E:E6:F7:6F:E6:96:2B:1A:66:E5:ED:86:5B:BA:9A
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/x_ISM_Eu5vdv5pYrGmbl7YZbupo.roa
Signing time: Thu 15 Sep 2022 02:39:56 +0000
ROA not before: Thu 15 Sep 2022 02:39:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131142
IP address blocks: 223.22.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C7F21233F12EE6F76FE6962B1A66E5ED865BBA9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f8:56:e1:22:c7:85:e6:c5:82:5b:31:8a:a7:
14:e2:0c:e2:87:ec:a6:89:90:2e:76:9d:ef:6e:1d:
fe:e9:17:a5:ca:59:64:ea:61:4d:79:fa:02:fa:ca:
0c:f4:72:29:62:29:4a:a0:c2:36:26:bc:0d:b1:e3:
e6:47:61:8a:23:c5:37:23:bf:72:a9:57:9f:38:24:
cb:17:21:ad:1d:2f:ca:13:b2:38:be:7a:fe:ad:23:
52:4f:7c:5d:c5:39:d2:b9:20:fb:fd:51:9a:de:73:
86:b0:df:b8:43:15:9a:37:bf:19:9e:aa:7d:c3:44:
a7:bf:4c:97:ff:f2:5c:40:b3:9a:d8:b6:e8:cf:52:
67:3a:e3:67:de:35:27:89:85:4e:c9:ef:9c:dc:f9:
18:39:a8:c8:85:36:ec:4a:5f:7d:fd:fd:42:57:cd:
2b:14:13:a4:56:62:08:61:41:1e:3c:8a:9e:0e:7b:
44:3d:c1:7a:a7:03:ee:7b:c6:62:e5:c0:ea:1a:14:
3c:85:ff:86:82:50:4f:3d:e8:71:8a:13:39:0d:b2:
44:84:9a:cc:79:3c:28:62:a2:90:ca:79:b5:9a:91:
b5:d5:9f:75:a4:fb:ae:dd:70:d0:04:03:a6:b5:d4:
88:c0:27:36:cc:5d:e8:12:e6:9e:fc:f8:1e:16:67:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F2:12:33:F1:2E:E6:F7:6F:E6:96:2B:1A:66:E5:ED:86:5B:BA:9A
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/x_ISM_Eu5vdv5pYrGmbl7YZbupo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.22.252.0/22
Signature Algorithm: sha256WithRSAEncryption
65:5e:05:14:77:c3:b6:12:de:8e:f5:ce:b8:9f:29:cb:ad:f4:
63:18:0d:5a:29:e2:bc:a5:df:c5:d2:83:8f:7a:96:23:be:d4:
77:1d:5b:2c:f2:28:9d:28:02:94:80:f0:53:6f:58:78:b4:b3:
bd:78:e2:c4:ce:bd:38:99:9d:90:77:93:61:0b:27:1d:dd:28:
11:cb:dd:b8:ef:05:6d:d1:6e:82:ae:48:b8:96:4c:32:ee:56:
59:a0:ad:aa:0a:33:1e:c5:5c:56:d5:a9:53:3d:2e:cb:25:26:
c8:35:e0:90:ee:48:6a:3d:f4:cc:e6:97:e3:77:5b:0b:ce:b7:
9a:73:78:21:9a:22:51:33:ea:7d:a5:00:22:e2:23:66:e1:b5:
91:98:bb:47:b8:26:a1:ef:45:60:27:b6:2f:a1:7c:03:bd:fb:
7e:8a:02:fb:c2:8d:3f:7f:30:de:d6:fa:5e:39:f2:7c:06:b2:
ee:43:e1:b4:91:79:3a:1c:d5:aa:31:75:e5:fe:6f:bc:8f:07:
96:49:88:35:83:30:a4:ea:af:a1:35:17:9f:b7:7a:11:98:dc:
21:6e:00:40:9e:fa:ed:91:54:e8:c9:31:4f:4a:96:9d:7e:78:
d3:46:42:14:8c:5d:af:df:90:c1:34:20:2b:60:81:5e:d9:9c:
f1:76:3a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org