Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/7GTtYBAskVpB7gOxMu1xEygl9PA.roa
File: 7GTtYBAskVpB7gOxMu1xEygl9PA.roa (raw, json)
Hash identifier: aLrkMYxLWb7gvvFo+/xR+8RJMhtR5UB2ANq8oIdhN6o=
Subject key identifier: EC:64:ED:60:10:2C:91:5A:41:EE:03:B1:32:ED:71:13:28:25:F4:F0
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DC0
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7GTtYBAskVpB7gOxMu1xEygl9PA.roa
Signing time: Wed 29 Sep 2021 02:39:31 +0000
ROA not before: Wed 29 Sep 2021 02:39:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9311
IP address blocks: 203.79.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3520 (0xdc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=EC64ED60102C915A41EE03B132ED71132825F4F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:87:ff:7c:f5:b7:6c:50:94:16:c3:c1:19:
28:45:97:03:94:5b:84:96:92:c3:c4:51:32:90:1a:
22:70:24:21:db:dc:8e:0a:df:db:59:21:8d:a7:f1:
a4:c3:70:1e:1f:2c:0d:62:98:4a:ed:35:98:48:40:
d6:e9:30:80:3b:65:e6:d6:d8:00:d1:de:2a:f1:c4:
9b:94:52:aa:fd:c0:96:ae:f4:2a:ab:b1:df:50:45:
f9:e0:c9:bb:ce:67:25:9e:72:4e:72:49:16:7a:9a:
08:84:52:4e:58:79:80:d7:88:5e:7d:bb:80:bd:b9:
9a:e4:d4:d7:78:1a:13:fa:d0:98:f1:7f:3a:2f:5b:
fb:3b:2a:3c:93:e2:33:f6:6a:a5:bd:94:b4:63:f8:
c3:dd:f7:e5:ac:92:51:9a:37:d8:c3:65:f4:03:78:
69:e9:e4:6e:74:11:67:54:69:ae:c1:bb:4d:77:63:
51:fc:03:99:31:39:80:20:8e:0b:ac:e7:54:60:41:
86:b4:06:22:da:cb:da:2b:d4:a9:f3:9a:63:ff:a9:
bb:f6:f5:ac:b9:dd:af:54:ae:4a:5e:e5:52:6c:60:
c4:91:f7:07:05:82:8a:47:fa:07:59:38:e4:ad:9d:
d3:f9:d2:33:d8:96:95:14:d8:18:7e:a6:35:b6:70:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:64:ED:60:10:2C:91:5A:41:EE:03:B1:32:ED:71:13:28:25:F4:F0
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7GTtYBAskVpB7gOxMu1xEygl9PA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:b4:35:95:a2:e8:36:c2:52:97:d2:bf:f9:9c:c9:53:a2:55:
4e:94:db:7c:e4:37:c4:11:ed:05:8b:76:6f:3c:55:42:7c:ce:
66:ff:19:71:32:3d:11:e8:50:9c:a8:2f:07:a5:9a:b0:31:bd:
c4:25:ef:6c:d9:7d:eb:00:bf:16:5b:1f:b2:c6:ba:bc:67:f5:
2d:e1:81:37:af:a3:76:ea:fb:72:67:f4:b9:44:12:50:c2:f2:
d1:a7:7c:04:26:44:c4:dd:fd:ea:52:5e:74:73:ae:36:47:86:
b1:c6:af:d6:7c:25:56:01:8e:d5:dd:48:c6:53:41:9a:03:c5:
81:e2:08:d5:f3:ce:a7:df:d0:84:e7:fc:96:df:7a:8d:f1:f7:
db:18:31:c0:d2:cc:2a:dd:df:b4:a9:11:37:25:37:e2:7c:07:
d8:60:a1:ae:f2:80:2f:a1:53:d6:ef:db:19:43:0f:8c:cd:10:
ec:59:19:e4:d8:c0:50:24:12:dc:e4:13:57:b2:67:7e:74:c1:
6d:b6:a6:ab:68:be:79:3d:9a:b2:e9:e4:98:6e:0e:5d:9a:60:
8a:a3:f6:fd:7c:4c:e8:95:1a:87:63:2e:be:40:87:bb:85:3f:
c7:2b:f3:d7:17:af:82:e8:ea:78:e8:20:3f:3f:31:79:f7:76:
bf:b4:39:ce
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDcAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTA5Mjkw
MjM5MzFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEVDNjRFRDYwMTAyQzkx
NUE0MUVFMDNCMTMyRUQ3MTEzMjgyNUY0RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3YYf/fPW3bFCUFsPBGShFlwOUW4SWksPEUTKQGiJwJCHb3I4K
39tZIY2n8aTDcB4fLA1imErtNZhIQNbpMIA7ZebW2ADR3irxxJuUUqr9wJau9Cqr
sd9QRfngybvOZyWeck5ySRZ6mgiEUk5YeYDXiF59u4C9uZrk1Nd4GhP60Jjxfzov
W/s7KjyT4jP2aqW9lLRj+MPd9+WsklGaN9jDZfQDeGnp5G50EWdUaa7Bu013Y1H8
A5kxOYAgjgus51RgQYa0BiLay9or1KnzmmP/qbv29ay53a9Urkpe5VJsYMSR9wcF
gopH+gdZOOStndP50jPYlpUU2Bh+pjW2cHn7AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU7GTtYBAskVpB7gOxMu1xEygl9PAwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvN0dUdFlCQXNrVnBCN2dPeE11MXhF
eWdsOVBBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAstP3DAN
BgkqhkiG9w0BAQsFAAOCAQEAoLQ1laLoNsJSl9K/+ZzJU6JVTpTbfOQ3xBHtBYt2
bzxVQnzOZv8ZcTI9EehQnKgvB6WasDG9xCXvbNl96wC/Flsfssa6vGf1LeGBN6+j
dur7cmf0uUQSUMLy0ad8BCZExN396lJedHOuNkeGscav1nwlVgGO1d1IxlNBmgPF
geII1fPOp9/QhOf8lt96jfH32xgxwNLMKt3ftKkRNyU34nwH2GChrvKAL6FT1u/b
GUMPjM0Q7FkZ5NjAUCQS3OQTV7JnfnTBbbamq2i+eT2asunkmG4OXZpgiqP2/XxM
6JUah2MuvkCHu4U/xyvz1xevgujqeOggPz8xefd2v7Q5zg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org