Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/5_ZRWw--79Lvi2sdz1bdmZIt3GE.roa
File: 5_ZRWw--79Lvi2sdz1bdmZIt3GE.roa (raw, json)
Hash identifier: 6hjzniBl+XNNLw7pfMKIwYMxPjI9XedkgvL868bKVdc=
Subject key identifier: E7:F6:51:5B:0F:BE:EF:D2:EF:8B:6B:1D:CF:56:DD:99:92:2D:DC:61
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DF1
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/5_ZRWw--79Lvi2sdz1bdmZIt3GE.roa
Signing time: Wed 29 Sep 2021 02:39:46 +0000
ROA not before: Wed 29 Sep 2021 02:39:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7482
IP address blocks: 210.202.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3569 (0xdf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:46 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E7F6515B0FBEEFD2EF8B6B1DCF56DD99922DDC61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:ff:ae:31:ce:5c:a1:08:8d:be:2d:20:54:
06:f9:eb:96:b8:63:4c:e7:53:52:51:99:2b:ed:b8:
dd:81:f0:9b:20:9f:50:a7:da:29:0d:46:be:ae:0c:
e7:42:cf:be:c6:f7:ea:33:6b:09:5b:4d:08:47:c4:
5e:74:fe:3b:39:b1:07:69:ae:49:20:7c:5c:3e:aa:
54:45:aa:4f:fb:bb:99:61:2b:ba:ea:1a:6c:0e:61:
97:d8:d9:c7:17:a8:4c:26:9c:5e:8d:0f:87:d4:e0:
33:58:92:31:60:1d:f7:05:24:c1:51:26:c8:14:e2:
bb:72:74:ba:9a:83:36:8c:6f:3f:96:15:25:97:c4:
f5:74:1d:c3:6c:9d:ba:a3:c6:7e:fb:4b:d1:8c:07:
35:f8:55:c5:64:d6:59:52:dc:c5:89:99:a1:9d:84:
9f:34:2e:44:27:28:d6:fd:fa:43:c9:45:97:06:89:
e1:57:f0:87:2f:f8:08:70:65:7a:f7:9c:14:a6:47:
98:b1:52:dc:ef:fb:88:62:02:39:55:b8:90:17:27:
41:97:fc:33:5f:30:49:3a:6c:49:4f:92:cc:e4:bc:
d4:7c:9d:d8:e2:f0:3f:b1:ae:22:f8:db:4d:6a:e6:
65:7e:fc:86:65:32:ab:db:93:bb:95:07:f6:09:b2:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F6:51:5B:0F:BE:EF:D2:EF:8B:6B:1D:CF:56:DD:99:92:2D:DC:61
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/5_ZRWw--79Lvi2sdz1bdmZIt3GE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:3e:0a:ea:9f:0e:de:b4:51:7a:64:43:3b:cd:86:b3:2b:4e:
50:76:d8:5c:9c:ca:43:94:d2:fb:f7:f4:58:af:17:18:df:cf:
ca:0a:72:19:69:db:94:72:90:c3:dc:bd:ec:8c:63:c2:d2:04:
35:38:ce:20:f0:be:34:c7:43:4d:cf:e1:52:64:98:43:46:4b:
94:ff:48:f6:ac:ec:ca:00:c9:e0:35:6d:dd:8e:4c:13:36:a9:
2b:ca:97:6d:21:23:dd:ab:9b:52:61:56:7c:36:5d:30:76:9a:
24:be:91:46:6a:08:bf:9d:9c:8c:51:8c:12:0b:2a:7d:dc:3f:
a4:5f:2e:56:ce:e8:51:55:75:a1:d4:32:d0:cc:be:a8:b9:30:
6f:e3:2a:60:7e:46:4f:b5:23:f2:03:7e:68:91:cc:0b:b7:ad:
bc:42:56:5b:d0:ff:8c:26:94:17:bf:31:94:71:18:13:84:b8:
b5:a2:a0:84:0c:f1:70:23:b2:af:c8:58:88:b4:08:64:a9:86:
1e:96:15:73:f6:69:ff:f2:25:ff:45:37:a0:49:01:3e:4b:e0:
10:56:5a:96:01:26:a0:9a:5c:b6:3f:0f:6a:89:de:8f:7c:fc:
d4:2b:d7:d9:0c:90:0a:88:1b:15:1d:20:07:2a:75:17:28:b4:
fd:c1:da:3d
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDfEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTA5Mjkw
MjM5NDZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEU3RjY1MTVCMEZCRUVG
RDJFRjhCNkIxRENGNTZERDk5OTIyRERDNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAFv+uMc5coQiNvi0gVAb565a4Y0znU1JRmSvtuN2B8Jsgn1Cn
2ikNRr6uDOdCz77G9+ozawlbTQhHxF50/js5sQdprkkgfFw+qlRFqk/7u5lhK7rq
GmwOYZfY2ccXqEwmnF6ND4fU4DNYkjFgHfcFJMFRJsgU4rtydLqagzaMbz+WFSWX
xPV0HcNsnbqjxn77S9GMBzX4VcVk1llS3MWJmaGdhJ80LkQnKNb9+kPJRZcGieFX
8Icv+AhwZXr3nBSmR5ixUtzv+4hiAjlVuJAXJ0GX/DNfMEk6bElPkszkvNR8ndji
8D+xriL4201q5mV+/IZlMqvbk7uVB/YJsp8RAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU5/ZRWw++79Lvi2sdz1bdmZIt3GEwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvNV9aUld3LS03OUx2aTJzZHoxYmRt
Wkl0M0dFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtLKwDAN
BgkqhkiG9w0BAQsFAAOCAQEAsD4K6p8O3rRRemRDO82GsytOUHbYXJzKQ5TS+/f0
WK8XGN/PygpyGWnblHKQw9y97IxjwtIENTjOIPC+NMdDTc/hUmSYQ0ZLlP9I9qzs
ygDJ4DVt3Y5MEzapK8qXbSEj3aubUmFWfDZdMHaaJL6RRmoIv52cjFGMEgsqfdw/
pF8uVs7oUVV1odQy0My+qLkwb+MqYH5GT7Uj8gN+aJHMC7etvEJWW9D/jCaUF78x
lHEYE4S4taKghAzxcCOyr8hYiLQIZKmGHpYVc/Zp//Il/0U3oEkBPkvgEFZalgEm
oJpctj8Paonej3z81CvX2QyQCogbFR0gByp1Fyi0/cHaPQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org