Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/0-15cU3qzBKzO4v0F_Un6aPWZa8.roa
File: 0-15cU3qzBKzO4v0F_Un6aPWZa8.roa (raw, json)
Hash identifier: k88WhZm2GFbpnbGPhSG+PKK1wTUc5ghTugAOlfuBY9Y=
Subject key identifier: D3:ED:79:71:4D:EA:CC:12:B3:3B:8B:F4:17:F5:27:E9:A3:D6:65:AF
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1045
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/0-15cU3qzBKzO4v0F_Un6aPWZa8.roa
Signing time: Tue 16 May 2023 08:35:58 +0000
ROA not before: Tue 16 May 2023 08:35:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24154
IP address blocks: 203.79.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4165 (0x1045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:35:58 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D3ED79714DEACC12B33B8BF417F527E9A3D665AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:47:54:92:6f:ef:a2:93:a6:0c:71:29:9b:cd:
66:6c:86:ca:7c:04:a9:87:e4:85:d6:0f:22:67:98:
35:46:d2:ac:7c:a8:a6:bd:6d:0c:c9:13:a5:d6:e6:
74:f5:0f:ec:c8:94:66:7e:17:22:5d:2e:c0:06:a1:
c6:b8:e7:f9:d9:10:10:84:51:6c:b1:0c:4b:fa:7d:
c3:23:19:0c:3c:c4:a9:67:c0:1f:09:2d:99:09:d9:
e5:31:9b:35:df:53:da:ad:60:6d:e5:37:2a:28:9b:
9b:01:78:9c:89:93:4b:28:a9:60:12:3b:29:62:23:
13:f4:61:a5:29:f9:eb:85:08:75:d5:27:a7:11:28:
d5:28:df:53:c8:31:e5:d7:01:a3:1c:59:1e:15:49:
a8:92:62:dc:3c:95:cf:44:90:bb:ed:79:05:78:8e:
70:a3:a4:1c:41:1e:69:48:f4:84:9e:a9:a0:43:b2:
b3:9a:7a:99:92:03:a3:73:bc:69:2a:93:b6:c6:ce:
7f:8c:a5:e9:06:d4:4c:01:40:d2:de:b3:15:28:27:
78:ca:4e:a1:e0:f5:77:9d:55:0f:07:f5:d6:4d:d0:
56:e4:e0:3a:b6:80:c2:07:a7:16:9e:bf:16:27:2e:
67:cb:0c:4d:14:99:79:54:34:ba:6f:b6:a4:f4:f9:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:ED:79:71:4D:EA:CC:12:B3:3B:8B:F4:17:F5:27:E9:A3:D6:65:AF
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/0-15cU3qzBKzO4v0F_Un6aPWZa8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.200.0/22
Signature Algorithm: sha256WithRSAEncryption
24:c2:c8:6d:27:25:6c:50:e0:b1:b8:a2:df:53:b5:f2:b1:ce:
23:a0:f7:b2:15:8d:18:1b:46:34:21:16:58:54:ce:9d:f5:67:
e8:c4:37:0c:e8:02:1b:4a:6a:bb:bb:be:c8:50:9c:f3:19:23:
72:25:c5:a2:59:a1:6e:0c:8d:67:6f:57:78:5c:af:8a:75:fa:
15:5d:84:65:db:93:81:c4:b0:f6:77:0d:d8:41:63:e9:fc:d0:
e4:c9:1f:f8:7f:24:19:83:39:35:ac:e3:7e:d1:87:fc:a1:7a:
8b:11:6a:41:5a:5e:af:de:f8:9c:99:3d:bc:4e:06:e2:3e:82:
81:c2:86:0e:37:7e:c9:6c:ba:f7:de:49:c6:8e:3c:ca:3b:7c:
86:b1:f2:bb:69:ba:f1:f6:7a:ef:e2:cc:ff:19:8f:53:dc:b0:
91:71:0d:fb:77:90:f1:80:ec:b6:a3:06:8f:a7:a4:87:e8:55:
c0:ff:cf:cb:ce:a1:65:1f:02:f0:e6:54:d6:de:eb:1a:1d:77:
7f:4d:9d:70:46:93:f6:e2:1f:9a:94:ae:e7:ba:9c:1c:5b:da:
00:d1:8e:72:b2:6d:63:bc:82:cc:f2:9a:5b:a7:9b:13:b5:94:
5b:5d:1a:06:f4:72:8c:8b:7b:5c:b8:99:b9:1b:65:9a:08:56:
cb:93:14:ff
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEEUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA1MTYw
ODM1NThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQzRUQ3OTcxNERFQUND
MTJCMzNCOEJGNDE3RjUyN0U5QTNENjY1QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD8R1SSb++ik6YMcSmbzWZshsp8BKmH5IXWDyJnmDVG0qx8qKa9
bQzJE6XW5nT1D+zIlGZ+FyJdLsAGoca45/nZEBCEUWyxDEv6fcMjGQw8xKlnwB8J
LZkJ2eUxmzXfU9qtYG3lNyoom5sBeJyJk0soqWASOyliIxP0YaUp+euFCHXVJ6cR
KNUo31PIMeXXAaMcWR4VSaiSYtw8lc9EkLvteQV4jnCjpBxBHmlI9ISeqaBDsrOa
epmSA6NzvGkqk7bGzn+MpekG1EwBQNLesxUoJ3jKTqHg9XedVQ8H9dZN0Fbk4Dq2
gMIHpxaevxYnLmfLDE0UmXlUNLpvtqT0+buxAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU0+15cU3qzBKzO4v0F/Un6aPWZa8wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvMC0xNWNVM3F6Qkt6TzR2MEZfVW42
YVBXWmE4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAstPyDAN
BgkqhkiG9w0BAQsFAAOCAQEAJMLIbSclbFDgsbii31O18rHOI6D3shWNGBtGNCEW
WFTOnfVn6MQ3DOgCG0pqu7u+yFCc8xkjciXFolmhbgyNZ29XeFyvinX6FV2EZduT
gcSw9ncN2EFj6fzQ5Mkf+H8kGYM5NazjftGH/KF6ixFqQVper974nJk9vE4G4j6C
gcKGDjd+yWy6995Jxo48yjt8hrHyu2m68fZ67+LM/xmPU9ywkXEN+3eQ8YDstqMG
j6ekh+hVwP/Py86hZR8C8OZU1t7rGh13f02dcEaT9uIfmpSu57qcHFvaANGOcrJt
Y7yCzPKaW6ebE7WUW10aBvRyjIt7XLiZuRtlmghWy5MU/w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org