Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/0WcjbbTD8sEkxvP3OHbxQzyp474.roa
File: 0WcjbbTD8sEkxvP3OHbxQzyp474.roa (raw, json)
Hash identifier: L7WetqTTWyjP96e27SpfGAI9eHjfsT7TCmVepGqQKfg=
Subject key identifier: D1:67:23:6D:B4:C3:F2:C1:24:C6:F3:F7:38:76:F1:43:3C:A9:E3:BE
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C11
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/0WcjbbTD8sEkxvP3OHbxQzyp474.roa
Signing time: Sun 07 Feb 2021 11:34:46 +0000
ROA not before: Sun 07 Feb 2021 11:34:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.202.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3089 (0xc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:34:46 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D167236DB4C3F2C124C6F3F73876F1433CA9E3BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:9f:2e:87:49:dc:f0:85:ea:e3:68:9b:88:
57:e5:d1:78:75:ab:08:5e:d4:94:52:75:5f:09:93:
48:0b:b0:35:c7:df:ca:96:3c:b1:27:ea:00:05:f7:
9c:48:75:ad:77:73:f8:91:8d:b8:c9:02:7a:c1:ff:
df:07:f2:5e:a3:71:fc:37:ae:db:ee:fe:80:45:bc:
e7:1f:df:cd:54:53:ba:16:75:52:a9:a4:18:d3:33:
1d:7c:ec:35:34:ea:3a:56:d9:87:91:9c:55:88:9b:
df:1d:10:21:a6:c8:3b:46:8d:8d:e1:06:5a:d3:f6:
10:fc:99:ce:99:fc:5b:de:aa:37:40:90:c2:16:6a:
a9:da:98:b2:bf:f7:5b:fe:7b:2c:2e:d2:72:3c:db:
ab:5a:72:c0:a8:59:f5:cb:c1:bd:39:d6:80:8b:88:
30:1f:9c:73:6e:db:ee:42:1c:db:8a:41:3c:e2:85:
2f:81:cc:18:fd:40:dd:76:f3:07:13:42:81:6f:4b:
eb:23:4c:59:45:2a:f3:a2:38:41:ba:9e:11:e2:d7:
0e:55:a7:a2:39:48:40:65:c0:39:13:66:3e:ca:7a:
cb:27:c5:6e:01:9f:8e:0c:71:2f:34:23:9b:70:91:
a1:7d:8f:8d:81:7d:92:f5:20:cb:ea:a6:a6:0c:96:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:67:23:6D:B4:C3:F2:C1:24:C6:F3:F7:38:76:F1:43:3C:A9:E3:BE
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/0WcjbbTD8sEkxvP3OHbxQzyp474.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.64.0/18
Signature Algorithm: sha256WithRSAEncryption
32:71:0b:d8:75:38:b2:03:36:53:2d:b6:ba:a3:d0:b0:2f:51:
07:2b:c9:63:0d:33:d2:60:14:57:a8:82:b5:60:4e:a5:3d:41:
78:38:2e:27:91:9d:44:8b:ed:0f:79:b5:0e:2b:7e:4d:62:d4:
35:df:af:08:2d:82:12:a2:11:3f:8a:4f:fc:f4:37:cc:3b:19:
41:b0:00:4e:4d:ff:f4:a6:18:1e:6e:b7:3f:72:e4:87:7b:a0:
f5:46:73:43:13:00:3e:1c:0f:00:e1:66:cd:aa:98:e4:35:c5:
3f:b5:ad:32:6c:9e:cf:29:c0:25:c3:a4:ef:fa:53:38:d6:f4:
a5:c3:f7:ad:28:00:96:55:32:a3:3f:91:38:b9:ee:ba:d4:0f:
1b:4f:52:ee:eb:d8:2b:9c:74:8c:31:10:5f:4f:cd:ca:07:32:
c8:0e:21:ea:57:9d:8f:5e:c0:a5:74:41:47:92:87:ec:16:68:
a1:d1:38:da:5c:bf:46:3c:7b:82:1d:ba:41:d7:c3:52:75:93:
8f:3d:cd:90:ed:98:0a:15:a0:65:e1:64:2b:bc:fb:5c:7c:15:
b7:08:89:59:4f:3d:17:96:67:a4:50:fd:8c:fb:67:b6:e1:67:
0d:f3:d0:60:cc:bc:de:d3:4a:21:45:2d:cd:45:13:71:75:1b:
aa:fd:bf:d9
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTAyMDcx
MTM0NDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQxNjcyMzZEQjRDM0Yy
QzEyNEM2RjNGNzM4NzZGMTQzM0NBOUUzQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMGp8uh0nc8IXq42ibiFfl0Xh1qwhe1JRSdV8Jk0gLsDXH38qW
PLEn6gAF95xIda13c/iRjbjJAnrB/98H8l6jcfw3rtvu/oBFvOcf381UU7oWdVKp
pBjTMx187DU06jpW2YeRnFWIm98dECGmyDtGjY3hBlrT9hD8mc6Z/FveqjdAkMIW
aqnamLK/91v+eywu0nI826tacsCoWfXLwb051oCLiDAfnHNu2+5CHNuKQTzihS+B
zBj9QN128wcTQoFvS+sjTFlFKvOiOEG6nhHi1w5Vp6I5SEBlwDkTZj7KessnxW4B
n44McS80I5twkaF9j42BfZL1IMvqpqYMlia1AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU0WcjbbTD8sEkxvP3OHbxQzyp474wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvMFdjamJiVEQ4c0VreHZQM09IYnhR
enlwNDc0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtLKQDAN
BgkqhkiG9w0BAQsFAAOCAQEAMnEL2HU4sgM2Uy22uqPQsC9RByvJYw0z0mAUV6iC
tWBOpT1BeDguJ5GdRIvtD3m1Dit+TWLUNd+vCC2CEqIRP4pP/PQ3zDsZQbAATk3/
9KYYHm63P3Lkh3ug9UZzQxMAPhwPAOFmzaqY5DXFP7WtMmyezynAJcOk7/pTONb0
pcP3rSgAllUyoz+ROLnuutQPG09S7uvYK5x0jDEQX0/NygcyyA4h6ledj17ApXRB
R5KH7BZoodE42ly/Rjx7gh26QdfDUnWTjz3NkO2YChWgZeFkK7z7XHwVtwiJWU89
F5ZnpFD9jPtntuFnDfPQYMy83tNKIUUtzUUTcXUbqv2/2Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org