Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/6RJw2oAtOp8tbg4LIv1F6j-R3ho.roa
File: 6RJw2oAtOp8tbg4LIv1F6j-R3ho.roa (raw, json)
Hash identifier: a4pBaxNISybcthYXbg94CFDGrkxZd0p+5DIw9oiWkTc=
Subject key identifier: E9:12:70:DA:80:2D:3A:9F:2D:6E:0E:0B:22:FD:45:EA:3F:91:DE:1A
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12E2
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/6RJw2oAtOp8tbg4LIv1F6j-R3ho.roa
Signing time: Fri 01 Sep 2023 08:05:07 +0000
ROA not before: Fri 01 Sep 2023 08:05:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 203.79.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4834 (0x12e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E91270DA802D3A9F2D6E0E0B22FD45EA3F91DE1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:98:a9:d9:d9:1e:a0:1d:3d:db:9f:4c:1f:58:
f9:95:23:29:14:bd:c6:cc:5c:13:aa:d7:e0:0c:f7:
f7:1d:96:23:6c:b2:ff:b3:2f:81:a6:c1:86:08:0f:
a7:bf:74:1e:c5:9c:ff:6b:a8:0c:d5:5a:b4:e2:7b:
4c:63:e8:da:da:7a:69:e0:62:a2:48:0b:a2:ac:6e:
f5:85:18:b2:2c:b0:6f:d0:9a:7f:ad:05:e9:15:3f:
4f:d9:34:c1:1b:7e:5b:20:e0:41:d5:9c:8f:3e:30:
61:fa:c6:88:80:f9:f8:33:bc:f7:69:f1:49:3a:51:
41:30:f3:96:29:67:a9:9f:71:04:2e:7c:20:7a:c1:
23:9b:e7:e8:46:06:37:1d:e5:d9:41:b1:b3:54:78:
f5:1f:71:da:ba:7c:81:f6:42:63:42:59:88:ec:3b:
6c:a5:59:59:1a:7d:d4:f9:fd:67:a1:1e:d1:22:32:
f7:d5:54:02:c5:93:ef:55:9e:c6:b5:80:2c:4d:ba:
74:40:8d:de:55:4b:c2:ac:65:ea:82:18:cd:05:5a:
0a:65:db:e6:f4:82:06:6c:bc:ed:27:78:b2:44:7d:
d6:99:dc:f3:59:f2:fb:7f:4c:6a:bd:26:2d:bc:6d:
6f:d1:5a:f4:5a:50:88:86:7f:19:76:4c:78:af:66:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:12:70:DA:80:2D:3A:9F:2D:6E:0E:0B:22:FD:45:EA:3F:91:DE:1A
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/6RJw2oAtOp8tbg4LIv1F6j-R3ho.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4a:22:57:78:f7:82:30:a9:5b:b4:21:70:cc:2f:57:95:42:c0:
9e:83:92:73:ab:2c:42:fc:43:91:e7:70:99:38:f4:c5:36:23:
de:56:13:54:c2:b8:b8:60:8c:f5:02:4d:42:dc:84:26:c5:bd:
c2:65:a6:cb:6e:84:96:a2:60:94:41:2d:2f:8e:5c:e4:f3:91:
96:da:77:a5:72:aa:84:b1:c1:65:78:07:3c:f2:37:76:fc:bd:
2c:44:25:f8:fb:c8:c9:68:91:43:e4:80:d0:f2:40:0b:a7:6b:
c8:03:9e:e3:26:d9:30:8e:17:05:d7:62:1c:be:c9:2a:d7:57:
83:21:c3:02:96:d6:57:9b:c1:b1:2f:03:03:38:4b:d9:b8:cc:
ef:86:01:72:84:bf:1d:98:5c:2b:c8:f1:2d:eb:d2:cc:3d:8e:
c7:e3:e4:c3:48:59:98:70:f0:28:32:27:1f:12:16:e5:2a:20:
75:7a:de:1c:1c:70:e6:49:ca:57:94:18:74:d6:1c:cb:3d:06:
1d:fa:60:1f:91:bf:4b:a8:8e:06:20:a0:9f:42:3a:34:7c:c5:
95:09:8b:27:48:7b:b1:45:a5:03:29:21:7d:df:2c:7f:77:b6:
63:11:47:59:17:af:e7:83:b6:db:4d:4b:d3:99:c1:da:cc:f7:
6f:67:10:af
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEuIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA1MDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU5MTI3MERBODAyRDNB
OUYyRDZFMEUwQjIyRkQ0NUVBM0Y5MURFMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpmKnZ2R6gHT3bn0wfWPmVIykUvcbMXBOq1+AM9/cdliNssv+z
L4GmwYYID6e/dB7FnP9rqAzVWrTie0xj6NraemngYqJIC6KsbvWFGLIssG/Qmn+t
BekVP0/ZNMEbflsg4EHVnI8+MGH6xoiA+fgzvPdp8Uk6UUEw85YpZ6mfcQQufCB6
wSOb5+hGBjcd5dlBsbNUePUfcdq6fIH2QmNCWYjsO2ylWVkafdT5/WehHtEiMvfV
VALFk+9Vnsa1gCxNunRAjd5VS8KsZeqCGM0FWgpl2+b0ggZsvO0neLJEfdaZ3PNZ
8vt/TGq9Ji28bW/RWvRaUIiGfxl2THivZnV7AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU6RJw2oAtOp8tbg4LIv1F6j+R3howHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvNlJKdzJvQXRPcDh0Ymc0TEl2MUY2
ai1SM2hvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB8tPgDAN
BgkqhkiG9w0BAQsFAAOCAQEASiJXePeCMKlbtCFwzC9XlULAnoOSc6ssQvxDkedw
mTj0xTYj3lYTVMK4uGCM9QJNQtyEJsW9wmWmy26ElqJglEEtL45c5PORltp3pXKq
hLHBZXgHPPI3dvy9LEQl+PvIyWiRQ+SA0PJAC6dryAOe4ybZMI4XBddiHL7JKtdX
gyHDApbWV5vBsS8DAzhL2bjM74YBcoS/HZhcK8jxLevSzD2Ox+Pkw0hZmHDwKDIn
HxIW5SogdXreHBxw5knKV5QYdNYcyz0GHfpgH5G/S6iOBiCgn0I6NHzFlQmLJ0h7
sUWlAykhfd8sf3e2YxFHWRev54O2201L05nB2sz3b2cQrw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org