Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/zZ0r7hB4miAcLqNzwdrVIBPtorM.roa
File: zZ0r7hB4miAcLqNzwdrVIBPtorM.roa (raw, json)
Hash identifier: wbGl0dAgahmWy40XsilZwCxh45LtzwWJCCDpo1dsOQw=
Subject key identifier: CD:9D:2B:EE:10:78:9A:20:1C:2E:A3:73:C1:DA:D5:20:13:ED:A2:B3
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 127F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/zZ0r7hB4miAcLqNzwdrVIBPtorM.roa
Signing time: Fri 01 Sep 2023 08:04:33 +0000
ROA not before: Fri 01 Sep 2023 08:04:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 219.91.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4735 (0x127f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CD9D2BEE10789A201C2EA373C1DAD52013EDA2B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:01:54:85:88:ae:4c:0f:80:92:3f:07:50:
f8:5c:5b:51:e3:96:45:c6:ef:e6:f4:cb:50:3e:af:
44:27:17:5b:ee:e8:07:31:fe:5e:90:34:c5:1d:24:
1a:b5:8f:ab:ec:91:a1:d6:14:f3:c6:f5:02:1a:8e:
f2:61:51:b0:6b:8d:f2:73:4f:e5:c2:7a:ad:d5:9c:
4d:e4:50:4e:4c:d1:70:e4:aa:45:f0:d5:b9:f7:1d:
c9:31:01:f3:92:e7:03:15:a0:83:e4:92:77:22:3e:
c7:48:a9:f0:3b:1e:ca:52:99:c7:39:f3:cb:e6:cf:
e9:ab:9a:a5:84:b3:6c:98:25:b6:71:e0:6e:8a:31:
1b:28:cc:00:3d:a8:ea:d0:d1:ef:74:83:a8:8b:1f:
76:fa:d3:e8:58:44:da:2d:31:49:55:59:5e:4b:ba:
bb:32:db:b9:48:53:a9:ee:5c:88:75:4c:be:f8:8d:
72:f7:a4:3c:49:c0:03:69:99:9d:0c:47:51:c9:b4:
61:d8:86:6b:ee:5a:b2:ca:8d:24:ad:3a:ed:95:1f:
8d:1c:fe:ff:2a:92:dd:e6:d1:69:d0:16:b7:1a:6d:
1e:ef:e9:77:f1:c7:d8:ce:3a:9a:5f:7c:47:f7:9d:
98:ea:32:33:28:40:13:96:6d:51:a9:05:5e:56:17:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9D:2B:EE:10:78:9A:20:1C:2E:A3:73:C1:DA:D5:20:13:ED:A2:B3
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/zZ0r7hB4miAcLqNzwdrVIBPtorM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.91.0.0/17
Signature Algorithm: sha256WithRSAEncryption
1c:d6:72:4f:e4:3c:38:0b:09:f6:f7:c6:8a:b4:bc:81:e9:8c:
ab:6d:98:f3:6a:d4:d5:22:35:c1:0d:d9:dc:ca:45:5b:9f:6b:
70:9f:a4:5d:b5:43:09:7b:f1:ee:8b:26:66:3d:bd:86:76:0d:
17:f4:ca:9b:97:8a:02:32:30:6b:c6:df:97:19:34:f0:75:1a:
bc:14:d5:b5:c7:c8:11:35:e5:33:af:33:0d:2f:59:6b:88:22:
01:4b:49:dc:f0:99:38:df:1b:ac:4e:0e:90:35:e0:b8:b2:22:
17:a4:74:b1:5b:76:47:36:59:06:dd:d2:15:75:e2:f7:2f:1d:
5a:14:ff:14:f9:f1:8e:56:0e:a9:c3:23:a5:e9:40:06:c9:e2:
ce:8c:11:2a:82:1c:3a:e1:de:df:ac:2f:cd:61:3d:44:34:7c:
07:a8:28:2e:5a:04:98:3a:22:30:49:dd:28:34:89:77:9e:c1:
49:f6:e8:20:9f:13:4b:72:af:3e:6f:28:00:99:e6:69:d0:84:
73:85:2b:7d:ac:e3:a5:fe:ba:5c:08:45:f8:70:aa:4a:75:8a:
7c:a5:5e:e0:95:db:ad:23:df:25:11:bc:4c:ab:4c:ed:42:c1:
28:e6:8d:d0:8a:40:1b:84:57:54:e6:36:00:5c:70:1a:e2:68:
91:3c:36:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:48:12 2025 by rpki-client