Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/yRUJ1khOuiOdR-vapKa_9tCVUTU.roa
File: yRUJ1khOuiOdR-vapKa_9tCVUTU.roa (raw, json)
Hash identifier: 0lHKr5UfWNZaVfbqvaOS71xX1/LylfdFANMoVH9KOMA=
Subject key identifier: C9:15:09:D6:48:4E:BA:23:9D:47:EB:DA:A4:A6:BF:F6:D0:95:51:35
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 103B
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/yRUJ1khOuiOdR-vapKa_9tCVUTU.roa
Signing time: Tue 16 May 2023 08:35:55 +0000
ROA not before: Tue 16 May 2023 08:35:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 124.218.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4155 (0x103b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:35:55 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C91509D6484EBA239D47EBDAA4A6BFF6D0955135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:50:85:2a:78:36:52:51:56:fe:07:0c:e7:
36:0b:5a:13:a0:aa:33:07:36:1c:5f:31:8c:04:e2:
11:18:de:64:41:0a:b5:ad:2d:fd:b4:bc:07:74:ab:
91:26:28:11:3d:0f:8f:90:04:b3:e8:9e:98:e2:fd:
12:23:50:dc:0e:21:5a:a6:42:cb:3d:7d:cb:89:40:
45:8d:c6:79:7b:29:b1:7c:3b:1c:32:79:fb:2a:a3:
2a:88:d0:df:87:9d:ed:58:67:ef:8d:87:da:73:7a:
46:11:c9:b2:00:36:d5:20:a9:a7:d3:f7:55:fd:81:
af:1e:f5:c3:bd:cf:b8:d9:59:05:5f:7a:76:8a:48:
e9:45:3a:15:fc:5c:50:36:e2:83:e1:e3:d3:1c:f4:
7a:6a:23:dc:e4:9d:9c:fe:ad:6b:a4:4e:f8:71:01:
3f:eb:86:a1:35:29:36:80:a7:e6:3d:de:d3:c4:d2:
cd:1e:3c:a0:c9:94:7b:65:74:df:30:9d:b3:a8:f1:
8a:84:58:8d:75:c9:1e:39:5b:9d:4d:e3:a6:6f:f7:
a0:17:85:09:95:64:a6:b7:8a:73:d6:6f:ab:77:d4:
8d:e3:e9:ce:fa:da:c4:f1:bc:1e:fc:66:e6:c1:43:
fd:57:a3:c9:02:27:03:f5:0a:e1:d4:13:f4:ad:db:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:15:09:D6:48:4E:BA:23:9D:47:EB:DA:A4:A6:BF:F6:D0:95:51:35
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/yRUJ1khOuiOdR-vapKa_9tCVUTU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.96.0/21
Signature Algorithm: sha256WithRSAEncryption
32:3d:39:5d:14:1c:23:c6:7c:16:02:99:05:f3:69:65:9c:68:
ff:9c:5e:f3:97:d3:4f:68:07:7b:bf:fd:dc:5f:07:58:7c:22:
44:95:a7:6f:47:7e:7e:81:13:01:49:90:af:93:16:94:b3:11:
db:d4:d1:56:24:04:44:ed:d9:54:a6:70:0b:bb:25:cc:95:1f:
c1:56:9a:a1:6b:fa:87:87:94:18:ab:92:eb:93:70:bc:36:6e:
b0:f7:7f:a0:21:72:01:2a:e9:e7:63:06:d4:8f:6a:1c:c6:39:
9c:bd:f6:5b:aa:7d:67:4c:03:41:b4:1d:5b:dd:5f:45:1b:b8:
0b:80:37:72:f3:c1:c8:3e:36:7d:f4:e0:b8:90:97:3e:29:22:
d3:84:49:ba:ab:22:1a:a4:b1:ce:47:7b:86:b7:3a:9f:7e:e2:
0e:14:4f:04:9c:9b:d9:8c:58:6b:58:6a:55:d5:52:ba:b2:67:
16:38:a0:93:e3:60:e7:70:c8:47:c2:93:b4:1e:a4:5e:9a:3d:
80:e1:a2:d6:72:3f:d1:43:d6:71:37:19:a0:2b:6f:a7:48:57:
7d:fc:6f:20:89:dc:32:06:38:22:7f:e8:8f:41:f9:99:06:4e:
f7:cc:89:47:3d:e4:38:28:f8:0a:9f:d7:46:62:5a:b9:ed:bf:
1f:e5:77:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org