Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/zYSawzfCq976Kk1qy4k3t8uEESY.roa
File: zYSawzfCq976Kk1qy4k3t8uEESY.roa (raw, json)
Hash identifier: v0pthkNq9j3DSTf6X92OcPdccWVxNzFFVMeJc4QyamY=
Subject key identifier: CD:84:9A:C3:37:C2:AB:DE:FA:2A:4D:6A:CB:89:37:B7:CB:84:11:26
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12F8
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/zYSawzfCq976Kk1qy4k3t8uEESY.roa
Signing time: Fri 01 Sep 2023 08:05:14 +0000
ROA not before: Fri 01 Sep 2023 08:05:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9311
IP address blocks: 210.200.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4856 (0x12f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CD849AC337C2ABDEFA2A4D6ACB8937B7CB841126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:e3:15:e6:6e:22:2a:40:38:0b:d8:54:a2:
dc:d5:c1:60:a5:94:6e:67:ef:cf:c2:0d:c4:49:ce:
77:4b:3d:8e:b5:0b:81:0e:5f:6a:22:69:e5:1f:c8:
2a:30:b2:10:f9:c5:c4:41:c9:38:eb:2a:86:d3:b4:
28:4b:eb:23:b0:a2:71:e7:da:f3:cd:06:24:99:8d:
0b:e4:bc:7a:c8:63:db:4f:8d:33:ca:68:ff:76:bd:
37:81:19:3c:f2:07:23:46:27:32:b6:38:b7:1d:70:
da:a4:3d:aa:f5:1e:d6:f6:19:43:6e:63:2d:c1:f4:
b7:16:e6:d9:94:6e:16:8e:e8:54:9e:8c:ae:d3:dd:
73:96:b1:a9:50:f4:1d:7f:24:0d:85:a0:75:0d:d3:
50:cd:a9:aa:e0:58:e1:0c:5f:02:d1:6d:49:9d:d2:
64:cd:b7:c6:7c:ad:3a:e6:91:fb:04:23:37:4f:c4:
20:34:b2:f8:c9:a3:46:d4:44:e0:d5:98:f8:c6:e6:
44:ec:79:2a:c9:2a:54:7a:1d:68:9c:29:91:7a:3a:
b1:3f:06:f2:00:ae:b8:a1:5f:9c:b8:a4:da:18:41:
05:eb:ae:cf:e3:c9:00:61:05:53:fd:08:7b:a6:c1:
dd:39:ee:2b:32:a8:00:59:2d:49:8c:e6:7a:52:a0:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:84:9A:C3:37:C2:AB:DE:FA:2A:4D:6A:CB:89:37:B7:CB:84:11:26
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/zYSawzfCq976Kk1qy4k3t8uEESY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.128.0/18
Signature Algorithm: sha256WithRSAEncryption
af:b8:ae:0b:e6:81:26:9d:94:e6:ec:19:bc:9e:b9:6e:8a:ce:
8e:c1:d7:89:ff:04:0b:60:a4:d8:64:bb:64:95:40:9a:6a:9f:
16:17:8e:e8:9c:37:95:33:ee:38:42:94:b5:43:75:33:71:a7:
7a:cd:a8:30:67:9d:eb:58:d8:26:c4:ac:7d:f4:76:a0:e1:d8:
ed:e4:81:22:42:8c:59:d8:e1:4c:53:85:0b:38:e6:47:dd:05:
85:f8:72:26:fc:e6:b7:a2:0d:b7:66:79:d9:97:d2:8e:3f:28:
ff:9f:b8:5f:5f:9e:32:22:d9:93:e4:0c:9d:c3:04:88:3e:ce:
07:d0:5c:08:1c:26:10:c0:1d:f8:96:44:37:0a:1b:a6:7c:97:
2e:c1:b3:91:98:0f:05:49:5b:79:fc:fe:59:5c:bb:18:84:ca:
21:e0:eb:45:30:cb:3d:5a:2a:25:3b:92:e9:93:96:70:26:66:
42:32:1c:85:d7:98:07:67:b1:77:1a:ca:0e:f5:da:0f:57:f2:
6d:d7:94:c7:54:42:88:36:b0:bc:78:07:b1:38:ed:27:24:52:
41:96:fe:94:60:be:b7:16:21:89:e5:2a:6d:5b:9d:63:28:11:
4d:83:61:1e:06:fe:b1:42:85:c8:38:c3:52:19:7e:11:6e:b8:
27:a2:62:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org