Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/zLZVJn8uwRjf6ZoPjlwl4c1j_XI.roa
File: zLZVJn8uwRjf6ZoPjlwl4c1j_XI.roa (raw, json)
Hash identifier: U2gaY9TpgOR5NWhUkMTcwQhw/haoh4jzCvrPHvfYguc=
Subject key identifier: CC:B6:55:26:7F:2E:C1:18:DF:E9:9A:0F:8E:5C:25:E1:CD:63:FD:72
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0CDD
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/zLZVJn8uwRjf6ZoPjlwl4c1j_XI.roa
Signing time: Sun 07 Feb 2021 13:04:58 +0000
ROA not before: Sun 07 Feb 2021 13:04:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24154
IP address blocks: 210.63.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3293 (0xcdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 13:04:58 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CCB655267F2EC118DFE99A0F8E5C25E1CD63FD72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:3a:a2:01:af:47:09:a9:60:39:89:1e:db:
67:ed:56:61:02:46:e0:56:0f:88:83:25:d1:8b:f7:
97:53:b1:93:a0:6b:01:3d:aa:a8:8c:b8:ad:33:e0:
e1:79:c8:50:24:ee:57:dc:47:39:4d:ca:3b:71:cc:
95:26:33:ea:9a:e1:b9:88:7e:50:b2:65:ff:1a:15:
fe:7d:b4:c3:05:35:ff:d3:ef:3b:38:1b:59:72:ec:
19:c3:81:bb:95:1e:5f:7a:46:eb:92:09:75:52:93:
7d:dc:6e:95:87:30:1b:a7:16:b9:b0:f5:e1:69:81:
b1:be:a5:69:35:9a:76:fb:b0:57:ad:31:67:bd:e0:
56:32:67:b4:11:65:0c:da:13:64:53:b8:d1:dd:2e:
ee:00:39:75:9c:5e:4f:ce:e9:ba:40:b6:dc:39:3c:
51:50:90:36:49:9c:e5:0e:15:83:8f:ff:ec:b0:12:
7e:a1:dd:0e:00:12:19:04:05:e0:e5:80:a8:94:b0:
d7:d5:e0:f9:eb:a8:23:c6:89:fc:9e:ff:c9:a3:b5:
49:72:4e:c1:a4:69:c5:b6:43:33:a3:c3:0c:bd:89:
26:53:40:30:ac:c5:8b:fb:df:b3:98:14:b3:ed:e4:
0a:96:4f:d4:2e:39:21:4f:96:8e:25:10:69:c0:91:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B6:55:26:7F:2E:C1:18:DF:E9:9A:0F:8E:5C:25:E1:CD:63:FD:72
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/zLZVJn8uwRjf6ZoPjlwl4c1j_XI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.236.0/24
Signature Algorithm: sha256WithRSAEncryption
06:62:df:fd:56:95:ce:31:29:ee:69:96:52:4f:b1:c4:0e:67:
5c:3f:86:40:b7:09:d7:e6:9f:5c:8f:b6:0b:38:9e:0a:fe:d7:
91:a7:98:ce:47:5d:09:1b:19:d9:91:45:91:42:3b:e4:e8:39:
82:5b:4b:41:09:0e:00:b1:a1:eb:f9:7b:b4:8e:0f:0d:25:b7:
07:ce:43:e4:59:dd:70:af:d6:cc:08:69:69:2a:d4:17:d6:e2:
18:65:fc:58:79:7e:f6:ff:e8:a5:89:49:3c:3e:a2:02:89:1f:
50:7b:b8:62:75:b4:d0:e8:c1:25:7b:28:37:91:58:1c:80:24:
e6:c6:1f:af:f0:6e:96:d6:26:e2:d4:e4:00:41:ec:9f:39:55:
8b:e1:7d:fc:fc:39:10:89:56:97:c2:e0:72:51:b8:65:23:aa:
6d:58:35:f4:dc:c0:ee:0b:39:2c:5d:9e:01:64:c0:e8:72:d6:
d5:dd:37:65:83:fe:bb:14:62:85:b5:f9:13:1e:18:75:a4:cb:
04:a9:58:b7:db:8b:6b:89:df:29:7f:0b:6b:a9:4e:66:29:8e:
e8:b9:59:16:34:90:5d:a0:7f:59:e8:ab:0b:e5:90:c3:fd:03:
39:de:c1:1b:d9:3f:b8:c0:34:2e:ea:8b:08:e7:df:08:bd:b0:
0c:15:bb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org