Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ykeopUbGPlxBTvfii3B0sa6lAc4.roa
File: ykeopUbGPlxBTvfii3B0sa6lAc4.roa (raw, json)
Hash identifier: OcGIg14OE17c+cNLoFlT13oMiFnRKl/nEJFKXaaHfww=
Subject key identifier: CA:47:A8:A5:46:C6:3E:5C:41:4E:F7:E2:8B:70:74:B1:AE:A5:01:CE
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 091A
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ykeopUbGPlxBTvfii3B0sa6lAc4.roa
Signing time: Tue 29 Sep 2020 10:01:28 +0000
ROA not before: Tue 29 Sep 2020 10:01:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.202.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2330 (0x91a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CA47A8A546C63E5C414EF7E28B7074B1AEA501CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:37:2a:2c:2b:fc:a7:ea:e2:53:4a:42:05:
5f:e7:24:ff:d9:98:c4:42:46:fa:87:75:44:87:66:
e2:b8:9f:f4:9c:cd:6d:df:02:94:41:82:08:df:2f:
fd:d5:98:61:c9:30:18:f9:fc:21:bd:29:dd:79:34:
6d:7b:43:bf:87:e2:62:e2:47:8f:b2:74:e6:f0:d9:
64:ba:2a:f7:08:ec:7e:7a:bb:91:db:bc:55:4e:13:
76:5b:1f:43:f4:d1:13:64:44:2b:c6:46:d1:b7:f4:
93:a9:fc:11:11:95:2e:46:d7:bf:e5:b8:1a:9f:e5:
65:c4:33:72:75:b7:09:d6:17:8d:f5:14:0b:4e:bf:
10:f6:8d:91:72:ac:fc:ab:88:43:27:72:5f:c9:85:
a9:f9:b4:3f:76:5a:c9:87:76:9e:3d:91:cf:9d:58:
1e:35:18:29:f0:83:a2:ea:0f:80:66:27:18:7b:ad:
f1:57:db:76:d7:cb:cf:23:53:d6:9a:e8:c1:4c:45:
55:21:07:df:46:c3:7d:1e:39:6d:5f:51:5a:8b:07:
48:68:3d:9c:3a:c6:f9:07:08:8a:4c:c0:54:e1:ca:
2c:34:8f:1a:e8:80:2b:00:32:54:f7:8b:47:9f:2f:
93:3b:38:22:ea:c9:2f:aa:f5:4d:48:b1:82:7f:c0:
a6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:47:A8:A5:46:C6:3E:5C:41:4E:F7:E2:8B:70:74:B1:AE:A5:01:CE
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ykeopUbGPlxBTvfii3B0sa6lAc4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.128.0/18
Signature Algorithm: sha256WithRSAEncryption
64:77:5f:ff:ab:07:12:b0:57:b9:9f:48:fc:9e:af:e0:82:a6:
cd:2a:9c:b6:41:8c:fe:e5:84:7d:78:da:77:d0:98:25:28:25:
44:52:ca:df:08:bc:0e:e7:9d:01:0f:5c:43:01:f2:37:26:03:
18:5a:a7:82:53:23:4f:d4:90:fb:5b:84:bc:74:12:41:31:4d:
07:a3:1e:cc:ec:f1:dd:c1:26:0a:bb:ae:14:e8:7f:25:39:3f:
e7:33:7c:6c:97:b8:df:95:b3:ee:09:b0:74:5c:8c:a2:b4:03:
8c:c6:3c:b4:73:6e:38:c2:77:ea:2a:1c:57:69:1c:89:dc:db:
cc:52:a8:12:d2:d7:a5:e9:b3:f9:5a:1e:a0:d1:74:63:a0:a4:
2d:ea:de:d9:68:46:b8:4b:be:6f:97:e0:08:22:1d:39:df:64:
a0:14:37:c7:5e:a7:bb:cd:c5:9d:ea:bb:f8:11:ff:eb:de:3e:
ba:1c:f7:c1:b5:f6:a6:21:af:08:5b:28:32:06:44:9a:05:37:
46:00:f4:35:d7:3b:f9:c9:d2:61:9b:89:f0:ae:01:3d:10:04:
b9:6a:1e:f4:34:ec:85:1f:19:48:32:1a:3c:4e:ce:ac:80:9b:
0c:b5:10:d3:ee:f6:d8:15:4f:eb:85:31:dc:0c:aa:58:ca:84:
ee:af:2e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org