Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/zbmmuQIPYid7v7cBT0p-PyYZMkE.roa
File: zbmmuQIPYid7v7cBT0p-PyYZMkE.roa (raw, json)
Hash identifier: Rak+x/YeX9SuNCj2scaG9tN91rQGjXClKooP7AK16tc=
Subject key identifier: CD:B9:A6:B9:02:0F:62:27:7B:BF:B7:01:4F:4A:7E:3F:26:19:32:41
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12D8
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/zbmmuQIPYid7v7cBT0p-PyYZMkE.roa
Signing time: Fri 01 Sep 2023 08:05:04 +0000
ROA not before: Fri 01 Sep 2023 08:05:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4824 (0x12d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CDB9A6B9020F62277BBFB7014F4A7E3F26193241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bd:56:e7:3d:3b:92:6e:e7:63:a1:8a:0c:e5:
84:52:51:36:83:f2:c3:42:c1:a9:f3:d7:06:fb:78:
24:89:d1:8e:c8:f6:d5:1b:4d:ef:b5:e9:60:16:87:
d5:84:5a:51:36:da:b2:ab:a8:68:74:c1:2b:79:8d:
5f:e3:5c:e5:79:af:9d:56:58:9d:a7:b3:c4:4e:c4:
f3:b0:d5:8e:3f:87:81:c8:f3:17:5c:dc:50:40:9e:
e5:a7:90:26:e2:6b:cf:5c:36:e1:91:66:88:2b:c7:
6b:64:bc:0b:03:8b:99:da:b8:f6:cc:a5:17:7f:3f:
f6:2b:ae:8f:3b:51:b2:f7:17:79:51:9e:42:1b:45:
d1:9a:ee:a4:1f:c0:27:1f:c5:c9:5c:7e:c5:c3:17:
f6:93:20:65:92:f1:47:28:97:f1:26:a5:85:43:3d:
ec:46:7c:35:a2:55:87:0c:46:63:5a:77:01:86:22:
43:11:2b:33:5c:21:42:45:77:a2:61:72:ad:68:cb:
ec:b6:99:e6:8a:57:d2:a9:b4:c0:ea:61:b7:01:fb:
d3:58:24:56:c2:a7:9a:14:c9:51:e7:12:c5:38:e9:
7e:86:ff:6a:ca:c9:e2:e0:62:b7:ef:8f:45:0b:95:
e0:70:4d:d6:bc:30:89:89:99:22:9d:88:f4:b2:17:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B9:A6:B9:02:0F:62:27:7B:BF:B7:01:4F:4A:7E:3F:26:19:32:41
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/zbmmuQIPYid7v7cBT0p-PyYZMkE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:88:03:a3:93:d6:9f:3a:11:c5:0b:3c:db:d9:ae:82:2f:8a:
33:ce:b9:d8:54:7d:c6:3c:e7:7a:f9:bb:3e:75:39:c5:6a:cc:
63:ff:9c:04:6f:da:bf:59:2a:f8:70:a5:d7:96:bf:8d:e9:aa:
cb:62:c4:02:66:dc:da:ac:3d:46:2a:24:1d:55:49:d8:49:93:
30:3f:56:54:56:6e:1b:ff:ea:c3:46:61:61:d3:67:63:1e:5a:
ff:e4:a6:16:1f:a6:f9:3f:4b:b5:9f:cb:07:48:bf:33:e2:9d:
02:2b:32:4e:8b:0b:8a:ba:87:fc:69:fb:28:29:dd:7c:74:e4:
f8:db:ce:00:02:4a:05:ab:d2:92:f0:0e:ee:22:12:a1:32:1d:
64:43:2b:d8:f7:ed:46:98:18:c4:e0:5b:92:4e:8b:e2:c7:cd:
b6:cc:21:10:84:e4:72:a3:15:44:8f:9d:a3:9d:78:cc:ab:69:
c1:b3:03:2a:a1:50:d8:93:7a:8c:b5:27:d5:0d:6a:06:5b:3d:
e2:c1:32:58:e8:0e:4b:7f:80:41:df:cc:bf:ff:a5:71:3e:29:
71:ee:e8:83:73:fb:61:c4:7a:8b:b9:d7:08:ad:15:27:0a:db:
ae:97:8c:83:b1:a2:ee:5e:a9:86:69:04:93:e9:02:9d:e9:9e:
3a:2f:8d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:54:33 2024 by rpki-client on console-ams.rpki-client.org