Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/64ewd5HoX6JqauTjkqwPM6ZJ7qE.roa
File: 64ewd5HoX6JqauTjkqwPM6ZJ7qE.roa (raw, json)
Hash identifier: Kn/m6GHf+j4AzuHSC6lQu9qiW3HwsdnnMAnzu3YDQ24=
Subject key identifier: EB:87:B0:77:91:E8:5F:A2:6A:6A:E4:E3:92:AC:0F:33:A6:49:EE:A1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 130F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/64ewd5HoX6JqauTjkqwPM6ZJ7qE.roa
Signing time: Fri 01 Sep 2023 08:05:19 +0000
ROA not before: Fri 01 Sep 2023 08:05:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24155
IP address blocks: 210.63.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4879 (0x130f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EB87B07791E85FA26A6AE4E392AC0F33A649EEA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:8a:ab:98:9f:af:31:6d:81:74:5b:21:f8:
a2:f7:ea:7a:74:63:13:29:01:9b:3b:b9:3f:63:4e:
2f:96:8c:90:3b:16:89:b7:1a:8d:cc:55:6c:ab:fc:
e2:c1:7e:70:78:75:95:be:ed:4f:86:00:d2:4b:c2:
4f:2e:71:aa:de:82:57:a4:ec:18:4f:a5:25:15:0d:
db:b2:2a:48:5d:48:ae:30:30:f1:81:43:7c:31:36:
28:93:dc:03:c3:61:5d:f8:d0:e6:a7:66:e6:bc:48:
cb:62:bb:73:0e:ee:39:87:4b:db:98:56:15:5e:6d:
4b:a3:ea:28:7d:20:fa:d1:bf:1c:4e:4f:8f:94:86:
b6:01:e8:a3:59:61:bc:97:b1:0c:92:08:1b:9b:66:
60:ad:31:10:c6:d2:b1:05:9e:b5:81:da:51:b9:0f:
03:79:eb:7a:8f:24:0f:fe:c4:29:68:c8:ea:5d:9a:
97:cc:84:ae:8a:83:22:c3:2f:5d:1b:81:8b:f3:da:
4f:46:72:40:34:52:89:0a:60:7f:fd:ac:9a:81:33:
aa:66:cd:b2:c5:0a:50:85:3b:ad:7f:91:1e:22:aa:
8d:7a:8a:27:78:0a:0a:bf:0d:48:3e:9d:c8:29:db:
94:dc:a3:b0:4d:bf:76:89:4d:9f:eb:b1:07:09:a4:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:87:B0:77:91:E8:5F:A2:6A:6A:E4:E3:92:AC:0F:33:A6:49:EE:A1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/64ewd5HoX6JqauTjkqwPM6ZJ7qE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.224.0/21
Signature Algorithm: sha256WithRSAEncryption
79:a3:ea:81:4b:e0:e9:c1:a3:5e:bc:9a:4e:91:f0:2b:11:eb:
86:1b:6e:3f:b9:97:83:be:f2:a8:e5:bd:e1:cb:f3:c6:ce:24:
c9:9a:13:b1:b9:8a:a6:b5:ef:1d:b9:9f:2a:b2:d4:1a:79:bf:
78:4a:7e:56:25:9d:c1:7b:99:8f:07:4f:bf:1b:11:06:7d:f8:
e5:d4:85:b0:d5:27:32:35:15:32:ad:f7:2f:db:6a:8a:a6:38:
8e:af:a2:b5:79:0b:a7:2b:9c:ba:b4:12:d0:70:62:ad:35:13:
94:ca:68:93:4f:36:e1:15:f7:7b:e2:72:8e:71:f1:75:86:da:
1d:94:7f:1d:af:91:5c:25:10:3c:35:a1:b7:fd:49:18:3f:9b:
97:58:8a:d1:53:7b:e2:53:c3:d7:ad:08:df:14:7e:c0:73:70:
53:5b:93:25:0b:76:83:f9:4d:38:7a:a6:b5:06:f2:0b:1a:0c:
aa:1c:c2:ce:3b:20:b4:53:d7:1f:aa:df:50:69:df:51:64:0c:
cf:97:64:c6:52:07:14:e7:03:fe:c0:aa:19:4a:70:bc:ca:d3:
4c:54:26:28:96:2e:17:0d:07:a4:56:e5:3a:3b:4b:89:e4:25:
e4:bc:ba:9e:d8:24:fa:7b:db:a1:0c:1a:7e:e0:51:50:2c:01:
24:ce:e3:03
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA1MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVCODdCMDc3OTFFODVG
QTI2QTZBRTRFMzkyQUMwRjMzQTY0OUVFQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5mIqrmJ+vMW2BdFsh+KL36np0YxMpAZs7uT9jTi+WjJA7Fom3
Go3MVWyr/OLBfnB4dZW+7U+GANJLwk8ucareglek7BhPpSUVDduyKkhdSK4wMPGB
Q3wxNiiT3APDYV340OanZua8SMtiu3MO7jmHS9uYVhVebUuj6ih9IPrRvxxOT4+U
hrYB6KNZYbyXsQySCBubZmCtMRDG0rEFnrWB2lG5DwN563qPJA/+xCloyOpdmpfM
hK6KgyLDL10bgYvz2k9GckA0UokKYH/9rJqBM6pmzbLFClCFO61/kR4iqo16iid4
Cgq/DUg+ncgp25Tco7BNv3aJTZ/rsQcJpB2NAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU64ewd5HoX6JqauTjkqwPM6ZJ7qEwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvNjRld2Q1SG9YNkpxYXVUamtxd1BN
NlpKN3FFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9I/4DAN
BgkqhkiG9w0BAQsFAAOCAQEAeaPqgUvg6cGjXryaTpHwKxHrhhtuP7mXg77yqOW9
4cvzxs4kyZoTsbmKprXvHbmfKrLUGnm/eEp+ViWdwXuZjwdPvxsRBn345dSFsNUn
MjUVMq33L9tqiqY4jq+itXkLpyucurQS0HBirTUTlMpok0824RX3e+JyjnHxdYba
HZR/Ha+RXCUQPDWht/1JGD+bl1iK0VN74lPD160I3xR+wHNwU1uTJQt2g/lNOHqm
tQbyCxoMqhzCzjsgtFPXH6rfUGnfUWQMz5dkxlIHFOcD/sCqGUpwvMrTTFQmKJYu
Fw0HpFblOjtLieQl5Ly6ntgk+nvboQwafuBRUCwBJM7jAw==
-----END CERTIFICATE-----
Generated at Mon Jan 15 22:50:42 2024 by rpki-client on console-fra.rpki-client.org