Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/z0c6nWV8PFDRwLTAWWwKXrcTpuk.roa
File: z0c6nWV8PFDRwLTAWWwKXrcTpuk.roa (raw, json)
Hash identifier: 0Gz42IFm7WVpNBOjYVQNc4J81KI/Y4Wp19wPVHnEFP4=
Subject key identifier: CF:47:3A:9D:65:7C:3C:50:D1:C0:B4:C0:59:6C:0A:5E:B7:13:A6:E9
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/z0c6nWV8PFDRwLTAWWwKXrcTpuk.roa
Signing time: Thu 15 Sep 2022 02:40:23 +0000
ROA not before: Thu 15 Sep 2022 02:40:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 210.200.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CF473A9D657C3C50D1C0B4C0596C0A5EB713A6E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:26:b6:f3:95:91:d2:a3:b3:8f:b2:2d:9b:
73:5f:8f:0b:9e:93:79:79:65:dd:10:9c:69:2d:68:
d8:e7:c1:ad:43:fb:3a:5d:1e:3a:42:98:6a:1d:63:
f8:ef:89:23:7f:62:62:8f:c7:38:c3:0a:40:d7:a5:
fb:de:b6:44:90:22:c4:6f:b4:ee:b9:63:4d:e5:5a:
de:59:cc:12:ff:4d:b8:f7:d9:e1:15:cb:3e:7a:53:
a6:47:58:c1:98:ba:79:c7:18:a7:ea:9a:be:f2:f7:
c9:e6:a8:e1:c1:82:78:e5:56:a9:27:2b:d3:92:bd:
7c:3b:dc:ce:de:01:11:a8:14:f3:c5:06:b6:43:56:
b1:17:25:2d:62:5c:56:e3:66:95:5c:5b:0b:eb:02:
bb:8a:76:ff:7d:d5:99:22:4d:1e:44:88:81:c2:89:
ed:db:98:6c:df:13:54:ce:1a:74:67:7d:71:8c:cb:
46:fe:a6:69:94:93:70:8e:21:4d:6e:ef:d2:90:61:
41:73:e6:fa:26:89:54:9e:86:34:91:cc:58:71:89:
de:21:04:bd:8c:6b:d7:b0:b8:5d:b5:05:cc:75:f6:
ec:73:83:05:fd:26:ff:66:95:9f:a5:b0:c5:3f:8f:
4e:27:67:f6:9e:65:3f:92:3c:34:21:0a:82:c6:9d:
9c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:47:3A:9D:65:7C:3C:50:D1:C0:B4:C0:59:6C:0A:5E:B7:13:A6:E9
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/z0c6nWV8PFDRwLTAWWwKXrcTpuk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.106.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:cc:f6:a5:01:f7:44:e1:15:a6:4f:a3:d2:d6:67:02:38:3b:
59:6f:35:c4:b9:16:ca:37:97:3e:de:94:c2:a8:29:40:b8:2e:
17:3b:1b:34:d6:d9:a3:c9:89:cb:7d:87:2f:fc:46:53:4d:a9:
23:17:a8:a3:33:87:22:ca:96:31:9f:1f:53:4e:ee:9e:59:94:
ac:e5:54:f8:64:3d:b4:7f:97:80:80:98:65:ed:53:b9:bb:8c:
2b:40:44:17:e7:0b:9a:4f:06:04:cc:f7:fb:79:e8:eb:54:b4:
c3:66:62:53:b6:72:9b:5a:e4:3e:de:73:84:0c:69:45:ed:44:
92:08:d5:47:6e:c3:b6:ce:d5:e0:47:20:f8:05:df:32:24:46:
60:35:20:5a:b8:b6:db:5c:01:07:25:f5:ea:84:df:1b:8e:0b:
59:99:1a:14:59:73:b0:83:e0:f7:24:cd:4e:6e:27:25:a5:b9:
21:cb:70:9d:38:ff:40:31:81:e4:55:0f:a4:8e:c2:77:7f:40:
86:ee:09:f2:76:31:6b:7e:82:1d:18:0c:7c:17:50:92:47:64:
44:1a:81:31:7d:ab:13:7a:c6:61:96:b7:b9:86:1f:d7:c7:ad:
07:45:19:31:bf:6b:b7:7a:bb:f2:38:5c:41:7e:fd:32:04:0d:
5b:72:ca:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org