Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/5_-qO2PV_TccBkz3yZdAQhJ-G60.roa
File: 5_-qO2PV_TccBkz3yZdAQhJ-G60.roa (raw, json)
Hash identifier: 1a6XEIw+6ZjHPQjugWbz5qJD5+4tusCwRx+voGKFv1M=
Subject key identifier: E7:FF:AA:3B:63:D5:FD:37:1C:06:4C:F7:C9:97:40:42:12:7E:1B:AD
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C23
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/5_-qO2PV_TccBkz3yZdAQhJ-G60.roa
Signing time: Sun 07 Feb 2021 11:35:01 +0000
ROA not before: Sun 07 Feb 2021 11:35:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.203.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3107 (0xc23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:35:01 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E7FFAA3B63D5FD371C064CF7C9974042127E1BAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:b4:1d:17:c0:fb:44:24:70:2f:3f:1c:a6:
c9:18:f3:92:d5:60:7b:95:7b:15:78:e6:bc:c8:5a:
e9:a3:53:b3:e1:ad:f4:76:0f:6e:24:18:53:d1:89:
f0:fa:25:84:da:e4:09:55:39:45:70:08:63:2e:21:
7f:34:00:20:87:43:af:6f:1e:17:1b:25:06:02:c7:
e0:70:bf:d3:9a:41:c7:98:89:69:76:2d:3c:7e:ce:
e4:93:d2:8e:86:4b:78:43:64:0a:d9:46:d5:09:68:
90:9c:44:25:2a:cd:ee:60:d0:de:a6:97:f1:56:fc:
86:37:1a:6d:41:1f:84:b7:ca:7a:ae:1d:82:40:8c:
5e:d3:58:32:c6:2f:c3:55:9d:9e:06:3d:f8:48:39:
a6:72:5c:c6:72:ab:b4:65:6c:2c:e9:8d:7c:aa:a4:
cd:6a:81:0e:31:e9:e3:4e:b2:3e:a0:dd:97:bc:83:
46:40:cc:b4:ab:b7:97:18:27:fb:13:48:e1:ed:d0:
c0:c5:01:e6:5e:54:07:ac:56:5c:5f:1a:a1:f8:01:
af:9d:46:2d:ec:1d:2e:dd:4a:83:3d:e2:e6:e9:54:
24:5d:55:90:ea:b6:c7:06:39:e3:77:62:e7:2c:1f:
43:5f:ac:05:43:dc:10:f2:54:7c:bc:81:3d:8b:91:
98:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FF:AA:3B:63:D5:FD:37:1C:06:4C:F7:C9:97:40:42:12:7E:1B:AD
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/5_-qO2PV_TccBkz3yZdAQhJ-G60.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a7:e3:e9:a4:59:b7:d6:1a:3a:3f:4c:7f:3c:4a:19:44:07:c7:
7c:d8:a6:83:44:6d:9f:0d:62:77:50:81:89:d8:1b:3a:8d:84:
b4:f8:e2:4f:32:8f:2a:93:eb:21:d0:a7:62:98:37:24:2a:fe:
c4:26:a0:4c:f1:d2:b7:ee:1f:85:42:71:74:0f:ea:93:44:68:
60:1f:1b:8a:b9:47:5b:e5:e4:73:ca:02:63:4d:af:0c:97:a7:
36:eb:dd:60:df:09:48:4c:53:08:b8:57:0e:5e:75:dc:10:87:
ac:64:72:49:80:58:04:07:52:b7:77:28:47:ff:62:9d:51:57:
d8:bb:bf:38:a2:05:35:b3:d2:d5:dc:7c:96:7f:14:f3:4b:8f:
80:d0:cb:32:5a:c9:15:61:d7:15:74:0f:33:ac:dc:6f:57:8d:
48:6e:6e:6c:a7:3c:5f:26:85:67:e9:35:9f:4a:c6:29:39:fb:
a3:dc:e2:a7:94:d1:1a:29:80:a9:92:4f:eb:09:bf:ea:cf:3f:
14:cd:a5:fa:75:6b:35:b1:ac:10:17:9e:61:1e:89:fc:19:71:
84:e6:b2:f1:11:ff:52:2e:34:c9:2f:3b:a2:97:d1:52:b8:7b:
09:63:a9:3e:11:b5:84:f6:3b:74:66:1d:9a:08:2b:38:cd:35:
63:9a:d8:4f
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDCMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTAyMDcx
MTM1MDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEU3RkZBQTNCNjNENUZE
MzcxQzA2NENGN0M5OTc0MDQyMTI3RTFCQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPo7QdF8D7RCRwLz8cpskY85LVYHuVexV45rzIWumjU7PhrfR2
D24kGFPRifD6JYTa5AlVOUVwCGMuIX80ACCHQ69vHhcbJQYCx+Bwv9OaQceYiWl2
LTx+zuST0o6GS3hDZArZRtUJaJCcRCUqze5g0N6ml/FW/IY3Gm1BH4S3ynquHYJA
jF7TWDLGL8NVnZ4GPfhIOaZyXMZyq7RlbCzpjXyqpM1qgQ4x6eNOsj6g3Ze8g0ZA
zLSrt5cYJ/sTSOHt0MDFAeZeVAesVlxfGqH4Aa+dRi3sHS7dSoM94ubpVCRdVZDq
tscGOeN3YucsH0NfrAVD3BDyVHy8gT2LkZiJAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU5/+qO2PV/TccBkz3yZdAQhJ+G60wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvNV8tcU8yUFZfVGNjQmt6M3laZEFR
aEotRzYwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9LLADAN
BgkqhkiG9w0BAQsFAAOCAQEAp+PppFm31ho6P0x/PEoZRAfHfNimg0Rtnw1id1CB
idgbOo2EtPjiTzKPKpPrIdCnYpg3JCr+xCagTPHSt+4fhUJxdA/qk0RoYB8birlH
W+Xkc8oCY02vDJenNuvdYN8JSExTCLhXDl513BCHrGRySYBYBAdSt3coR/9inVFX
2Lu/OKIFNbPS1dx8ln8U80uPgNDLMlrJFWHXFXQPM6zcb1eNSG5ubKc8XyaFZ+k1
n0rGKTn7o9zip5TRGimAqZJP6wm/6s8/FM2l+nVrNbGsEBeeYR6J/BlxhOay8RH/
Ui40yS87opfRUrh7CWOpPhG1hPY7dGYdmggrOM01Y5rYTw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org