Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/2U5kWEzS8aEXz0k_1g1XolBBthE.roa
File: 2U5kWEzS8aEXz0k_1g1XolBBthE.roa (raw, json)
Hash identifier: GtzSo+5/JByN1RsjUdCKE8puogrjnE639dbxLgVsS/k=
Subject key identifier: D9:4E:64:58:4C:D2:F1:A1:17:CF:49:3F:D6:0D:57:A2:50:41:B6:11
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/2U5kWEzS8aEXz0k_1g1XolBBthE.roa
Signing time: Thu 15 Sep 2022 02:40:27 +0000
ROA not before: Thu 15 Sep 2022 02:40:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.202.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D94E64584CD2F1A117CF493FD60D57A25041B611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6f:1c:c5:17:fa:4b:b6:80:59:67:53:e2:b7:
90:3e:64:c2:07:bc:9f:18:c4:c9:13:d9:d3:75:0b:
a1:6d:d3:25:d9:64:73:81:a5:50:c9:15:75:29:fd:
4a:59:25:aa:48:93:35:f9:44:93:a2:ab:3b:06:ac:
6c:7a:f1:10:90:2f:28:d0:eb:88:70:76:99:a5:93:
2d:8b:c4:61:eb:eb:2b:73:8d:09:62:53:60:d9:f5:
c6:17:c8:28:74:af:72:fe:29:de:17:c7:5c:0d:85:
64:c0:a5:27:90:90:04:78:59:e3:b6:85:fa:c1:e4:
e2:91:78:c3:70:e2:37:db:e3:16:f8:2a:79:8b:38:
61:9c:8a:14:9a:19:57:d3:bc:80:64:fe:ac:b6:6d:
88:e2:02:75:d5:7b:c5:48:12:e5:48:90:a8:d1:70:
e7:e1:f3:50:6a:6b:68:f8:87:5a:ae:6f:85:a8:15:
f5:2c:c4:01:7c:3d:2a:a5:a5:29:45:fb:93:38:e6:
cc:8e:5c:79:c7:69:07:04:9e:65:42:82:8f:e2:ce:
02:4b:e1:38:7c:27:11:79:68:b4:16:83:1d:9e:f2:
be:97:9e:9d:68:52:de:a5:ca:32:90:e5:8f:8b:44:
a0:27:bb:67:0e:d4:2f:b7:30:41:ef:31:58:25:22:
15:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4E:64:58:4C:D2:F1:A1:17:CF:49:3F:D6:0D:57:A2:50:41:B6:11
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/2U5kWEzS8aEXz0k_1g1XolBBthE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.192.0/18
Signature Algorithm: sha256WithRSAEncryption
21:d2:42:25:43:fa:34:c2:1e:f2:62:9c:69:59:b0:be:47:34:
67:84:0a:39:6b:d3:c7:28:52:54:a9:cb:ba:96:84:6f:37:84:
26:8f:97:11:34:fe:c9:6d:65:93:02:62:e5:82:94:82:ae:41:
6a:df:a0:33:50:dd:db:ac:74:5a:80:ee:30:39:f0:22:5c:bc:
27:4f:54:f3:27:68:b4:be:29:be:f8:c4:e6:25:8f:a6:7e:b7:
cb:1e:76:81:32:45:bd:61:6d:ca:28:4c:23:7c:6f:f1:0d:3f:
42:8f:fa:03:d7:47:48:4a:50:de:ac:bc:6b:61:21:dc:a6:e1:
09:85:2d:f2:e3:d7:8e:64:8b:8e:41:f6:1c:5e:be:b9:c8:14:
57:de:3b:53:7a:01:dc:ba:5e:47:4d:3c:42:1d:dc:73:42:25:
29:5a:9b:37:04:45:d2:87:ae:8e:09:5a:d8:3f:3e:f2:72:70:
f5:7e:50:b0:c4:74:41:47:57:09:c4:ec:e0:55:88:ff:e0:57:
fc:ac:9b:ef:6f:16:6b:1d:2f:a6:bf:6f:c3:47:ed:25:54:92:
3e:91:9c:ee:33:70:32:3e:cc:e9:f3:69:b3:73:ab:a2:77:80:
c0:72:b1:8d:bc:5c:a1:bc:f7:50:80:e6:77:3a:29:8e:38:05:
51:51:44:38
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMjA5MTUw
MjQwMjdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQ5NEU2NDU4NENEMkYx
QTExN0NGNDkzRkQ2MEQ1N0EyNTA0MUI2MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXbxzFF/pLtoBZZ1Pit5A+ZMIHvJ8YxMkT2dN1C6Ft0yXZZHOB
pVDJFXUp/UpZJapIkzX5RJOiqzsGrGx68RCQLyjQ64hwdpmlky2LxGHr6ytzjQli
U2DZ9cYXyCh0r3L+Kd4Xx1wNhWTApSeQkAR4WeO2hfrB5OKReMNw4jfb4xb4KnmL
OGGcihSaGVfTvIBk/qy2bYjiAnXVe8VIEuVIkKjRcOfh81Bqa2j4h1qub4WoFfUs
xAF8PSqlpSlF+5M45syOXHnHaQcEnmVCgo/izgJL4Th8JxF5aLQWgx2e8r6Xnp1o
Ut6lyjKQ5Y+LRKAnu2cO1C+3MEHvMVglIhXlAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU2U5kWEzS8aEXz0k/1g1XolBBthEwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvMlU1a1dFelM4YUVYejBrXzFnMVhv
bEJCdGhFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtLKwDAN
BgkqhkiG9w0BAQsFAAOCAQEAIdJCJUP6NMIe8mKcaVmwvkc0Z4QKOWvTxyhSVKnL
upaEbzeEJo+XETT+yW1lkwJi5YKUgq5Bat+gM1Dd26x0WoDuMDnwIly8J09U8ydo
tL4pvvjE5iWPpn63yx52gTJFvWFtyihMI3xv8Q0/Qo/6A9dHSEpQ3qy8a2Eh3Kbh
CYUt8uPXjmSLjkH2HF6+ucgUV947U3oB3LpeR008Qh3cc0IlKVqbNwRF0oeujgla
2D8+8nJw9X5QsMR0QUdXCcTs4FWI/+BX/Kyb728Wax0vpr9vw0ftJVSSPpGc7jNw
Mj7M6fNps3OroneAwHKxjbxcobz3UIDmdzopjjgFUVFEOA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org