Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/yjl5BYgYJRJgxCHTon9QMfhzu5k.roa
File: yjl5BYgYJRJgxCHTon9QMfhzu5k.roa (raw, json)
Hash identifier: mjmN4yEyNicinO01lb3MnSuUgIdXs8wLNBW+EbXR6Yc=
Subject key identifier: CA:39:79:05:88:18:25:12:60:C4:21:D3:A2:7F:50:31:F8:73:BB:99
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0BE3
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/yjl5BYgYJRJgxCHTon9QMfhzu5k.roa
Signing time: Sun 07 Feb 2021 11:34:11 +0000
ROA not before: Sun 07 Feb 2021 11:34:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 210.200.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3043 (0xbe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:34:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CA3979058818251260C421D3A27F5031F873BB99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:ed:22:c4:0c:33:36:8a:06:08:44:65:23:
a6:5a:b3:9c:35:07:3b:16:ab:45:1f:b5:c7:b8:78:
42:f3:bd:c5:21:9d:44:32:33:13:80:16:75:1f:3d:
68:33:f9:ca:43:bb:69:ef:00:d7:f6:b6:eb:73:29:
24:d4:a6:65:59:0b:09:aa:52:1f:18:ab:c3:62:49:
99:10:91:0b:fa:a5:69:4c:c0:06:6d:e8:80:21:8f:
9a:c8:97:f3:1c:94:dc:52:26:18:48:b0:a6:4e:33:
45:9b:14:66:95:2a:86:8c:c9:d2:79:45:ff:1a:a4:
77:bc:2c:80:f2:5c:f5:03:c9:e8:67:55:35:df:8c:
2f:b5:44:0b:49:85:33:11:bd:13:ea:de:40:90:52:
43:f3:c3:2c:b9:0b:33:b1:70:1f:36:c8:10:69:de:
3a:47:09:53:76:95:5f:8b:49:4b:2e:4e:ba:ee:66:
93:c4:d5:9a:4f:70:02:13:ed:cc:3d:dd:7d:05:f3:
30:a4:03:13:99:99:41:90:54:2b:34:e7:76:85:18:
5f:7d:85:d3:3f:6b:6c:fe:25:45:16:bf:b8:46:31:
08:88:f5:ec:5c:04:81:e3:8a:64:f1:e8:40:c6:e1:
59:02:54:20:dc:71:43:b2:b6:5a:13:d9:8e:b2:84:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:39:79:05:88:18:25:12:60:C4:21:D3:A2:7F:50:31:F8:73:BB:99
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/yjl5BYgYJRJgxCHTon9QMfhzu5k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.106.0/24
Signature Algorithm: sha256WithRSAEncryption
91:76:d3:d0:4a:14:6e:19:07:fb:8a:83:72:a8:cd:d8:73:c8:
a4:d8:d2:d9:54:4d:84:32:ea:48:31:98:81:78:4f:0f:82:79:
da:48:49:81:7b:9b:7c:cb:e1:45:22:02:72:69:90:5a:88:6c:
21:ed:17:79:e5:e4:55:e3:e3:41:3c:a1:c4:b7:b0:da:c2:82:
65:dd:20:cd:05:4f:86:8c:04:ac:61:36:0e:19:c9:01:21:4a:
62:06:da:9a:35:06:a4:2a:75:a3:15:1d:5d:7a:66:b6:44:ea:
7d:24:6a:9f:98:52:05:c0:60:fe:22:ea:31:04:98:73:a0:24:
90:94:b5:5c:61:13:18:ef:94:63:ca:cb:81:de:50:2c:5e:a4:
11:fa:9a:2d:10:b1:a0:77:21:da:9b:18:8f:e7:71:e0:2d:7f:
e4:cd:e4:31:5a:dd:0b:cd:53:5b:dc:cd:b6:31:94:a2:9c:43:
be:06:4a:2b:2a:d3:cd:58:16:68:19:71:93:6e:68:61:d9:57:
82:ac:e6:6a:06:dd:b5:18:34:5b:f8:73:00:26:ba:57:4a:cb:
5b:06:66:a1:24:3f:e6:c5:b9:3c:97:08:fc:2e:69:6c:a0:ab:
bb:03:15:61:f5:a3:4d:f2:0d:5f:f8:99:91:df:33:f4:d6:ed:
41:c7:34:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org