Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/yfQWCDG4IEvsTSNWFzOcaIhxmIE.roa
File: yfQWCDG4IEvsTSNWFzOcaIhxmIE.roa (raw, json)
Hash identifier: ZMA5KnIyRgw1YA4NoyAZCdPOaEvaFxbGwHLEN4YYIFg=
Subject key identifier: C9:F4:16:08:31:B8:20:4B:EC:4D:23:56:17:33:9C:68:88:71:98:81
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12C2
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/yfQWCDG4IEvsTSNWFzOcaIhxmIE.roa
Signing time: Fri 01 Sep 2023 08:04:57 +0000
ROA not before: Fri 01 Sep 2023 08:04:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9311
IP address blocks: 210.201.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4802 (0x12c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C9F4160831B8204BEC4D235617339C6888719881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:a8:88:36:cc:a4:7e:f5:ff:69:9a:24:e9:
10:7a:fa:0f:15:bc:1b:75:cf:70:9d:23:aa:9d:12:
30:76:a5:68:4d:be:ad:25:72:78:3c:ba:ee:83:3e:
e2:90:9e:9d:a4:3f:9d:5c:01:d4:b9:0f:55:cb:19:
a6:57:3c:8d:16:d1:9f:d7:28:bc:e3:19:2b:c1:74:
ba:c4:f8:ed:55:fb:a4:60:3c:39:f6:47:bc:7d:7d:
60:44:a6:84:c9:0a:63:eb:23:ce:93:57:a0:05:71:
04:54:93:e3:4d:63:34:ab:02:13:5a:5f:13:88:06:
a9:29:a3:97:8d:63:5b:93:bf:8d:73:f4:66:a3:7e:
e0:c8:24:b2:e7:f4:e7:8e:cb:3f:87:eb:3a:4d:0f:
79:11:93:df:17:47:68:43:26:1c:40:ca:5e:83:65:
7e:8a:ed:0f:12:8f:84:01:f5:39:ae:8c:8e:4d:a9:
59:de:3d:40:8a:25:d5:51:50:48:6b:f2:07:cf:39:
90:98:46:13:c0:2c:23:b7:4f:35:81:57:1c:42:5f:
1e:e4:04:0b:68:55:1c:7c:1b:1e:3d:3b:0b:76:82:
c7:79:6b:70:66:20:e0:21:e4:72:09:72:90:9d:b7:
5a:ff:23:a7:aa:28:e2:9c:b4:cb:2a:66:87:4b:3a:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F4:16:08:31:B8:20:4B:EC:4D:23:56:17:33:9C:68:88:71:98:81
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/yfQWCDG4IEvsTSNWFzOcaIhxmIE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.80.0/22
Signature Algorithm: sha256WithRSAEncryption
98:15:6b:43:6c:06:d3:f8:82:ff:69:5a:14:b5:46:3a:59:ae:
67:bd:5a:6c:29:61:a5:4c:45:bd:99:4c:3c:39:5d:a8:fa:e2:
64:28:cb:38:40:bb:ba:24:43:43:22:36:72:80:be:aa:97:1f:
9a:94:38:20:7e:d6:c7:96:c1:8d:3d:b6:5f:9b:43:60:72:4b:
c1:de:4e:fd:92:b6:9c:42:7e:00:5b:51:42:3c:1c:ac:5c:af:
db:7c:4a:ee:92:64:bf:12:b8:57:0e:85:83:c7:f7:fd:1d:80:
6b:3a:c6:00:d1:6c:eb:69:45:7c:88:31:0e:b8:c4:a5:44:3f:
86:bd:5c:91:44:9a:59:86:bf:fe:30:aa:cb:88:51:c1:c5:a6:
a1:8a:86:03:33:63:69:91:6a:21:f7:eb:9a:b8:82:16:0d:eb:
14:28:8f:f4:f6:10:a3:0a:56:e5:c0:c4:db:a7:87:90:e3:b7:
e4:91:fc:48:6c:ac:0d:2b:66:fc:3e:45:95:74:2e:8c:db:5d:
76:19:96:42:7d:23:d6:e4:7a:22:a1:0e:08:fa:a7:6b:f6:4e:
4a:83:be:17:b8:cc:8d:56:2c:7d:48:94:26:f4:2d:2e:07:3d:
29:9f:a3:5b:aa:8a:42:44:f8:4d:a7:88:3c:ff:47:d5:27:5a:
fe:da:ae:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org