Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/7H46hS1xCL7aU7Ow4Ca7BhmhCi8.roa
File: 7H46hS1xCL7aU7Ow4Ca7BhmhCi8.roa (raw, json)
Hash identifier: Fhv//dzHRk1B2PcpHkmca3XtxvXPJUkA1iiLUVnntyY=
Subject key identifier: EC:7E:3A:85:2D:71:08:BE:DA:53:B3:B0:E0:26:BB:06:19:A1:0A:2F
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1320
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7H46hS1xCL7aU7Ow4Ca7BhmhCi8.roa
Signing time: Fri 01 Sep 2023 08:05:24 +0000
ROA not before: Fri 01 Sep 2023 08:05:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.202.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4896 (0x1320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EC7E3A852D7108BEDA53B3B0E026BB0619A10A2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:a2:eb:10:0f:7a:45:a4:47:e3:1a:71:cd:
99:26:22:29:01:9d:1b:fc:9b:dd:06:ea:7e:b5:1b:
7c:e2:2a:15:ef:d2:13:5b:94:f8:07:2d:62:a5:c5:
35:30:7d:52:23:54:c8:53:9c:69:7f:11:2b:fd:37:
b0:17:ec:ba:d8:d8:2c:5a:b1:d4:ed:11:18:bc:ef:
d6:b4:d6:0e:85:c4:1f:e5:ca:26:7a:81:01:2e:52:
0e:c6:40:43:55:52:29:fc:6b:e2:23:ba:71:98:e4:
fe:b7:e4:83:d0:7c:0b:ad:00:8f:78:28:2f:26:f2:
86:d8:36:92:54:c0:c1:09:ae:d9:d6:a9:b2:68:ee:
5d:00:16:40:c8:e4:6d:fa:0d:13:9c:e1:d3:87:ba:
ad:ff:a1:1c:85:2a:03:cb:d0:1c:78:f1:b7:75:1e:
f6:3b:1f:94:3c:f4:92:e9:f4:07:40:90:af:61:f8:
4f:99:87:44:61:00:89:5f:fd:9d:ee:6c:0c:94:35:
f0:30:9b:51:06:e0:93:56:a6:3f:90:13:ad:33:fb:
49:cc:8b:f5:b2:f9:77:22:35:18:0c:51:a3:3b:f5:
7e:2b:e1:1e:55:8e:3f:06:15:09:cc:17:46:70:52:
2e:b2:7c:af:ba:b1:eb:ec:5f:fa:4f:34:d6:ba:0f:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7E:3A:85:2D:71:08:BE:DA:53:B3:B0:E0:26:BB:06:19:A1:0A:2F
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7H46hS1xCL7aU7Ow4Ca7BhmhCi8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:74:93:40:7e:1b:02:cf:f8:83:e1:a9:a1:10:37:23:69:8d:
86:69:81:68:0b:89:81:12:fc:1a:04:2a:b8:dd:26:42:8a:97:
18:99:45:0b:59:30:4a:0d:46:04:2e:d1:86:cd:69:5d:5b:ed:
a5:fc:8b:0e:ed:52:b3:3e:89:c4:f9:ea:82:7a:54:9b:a6:b3:
21:40:cb:5c:68:28:92:8b:01:77:03:c0:f9:8e:dd:b8:d8:77:
41:3b:6a:58:16:13:90:52:ec:5b:89:35:20:96:6d:0b:f9:15:
60:53:1e:bf:bb:0f:e3:a1:c0:f8:2f:ad:3f:3d:6d:a1:51:00:
27:60:56:7b:86:15:94:27:2b:eb:c6:7e:a2:a6:89:b8:b9:7f:
c9:e7:62:51:d2:1e:cd:89:b9:39:8e:6e:fe:e0:84:7b:d1:21:
9a:19:0a:fa:bf:38:85:ff:26:90:93:83:db:04:db:49:a3:d1:
02:c0:1a:68:e3:f1:ae:0d:75:be:af:67:84:c9:e6:ce:5e:5c:
d1:db:92:5b:19:ff:73:3c:09:d9:ed:1f:76:de:ab:89:40:0b:
13:ff:d3:34:11:62:33:73:3e:3f:69:c4:17:33:94:ef:1a:d8:
cc:9a:b7:8c:ff:df:cc:c5:69:07:95:86:80:d6:04:7a:bf:d2:
22:26:5c:12
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEyAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA1MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVDN0UzQTg1MkQ3MTA4
QkVEQTUzQjNCMEUwMjZCQjA2MTlBMTBBMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCq6qLrEA96RaRH4xpxzZkmIikBnRv8m90G6n61G3ziKhXv0hNb
lPgHLWKlxTUwfVIjVMhTnGl/ESv9N7AX7LrY2CxasdTtERi879a01g6FxB/lyiZ6
gQEuUg7GQENVUin8a+IjunGY5P635IPQfAutAI94KC8m8obYNpJUwMEJrtnWqbJo
7l0AFkDI5G36DROc4dOHuq3/oRyFKgPL0Bx48bd1HvY7H5Q89JLp9AdAkK9h+E+Z
h0RhAIlf/Z3ubAyUNfAwm1EG4JNWpj+QE60z+0nMi/Wy+XciNRgMUaM79X4r4R5V
jj8GFQnMF0ZwUi6yfK+6sevsX/pPNNa6D3kXAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU7H46hS1xCL7aU7Ow4Ca7BhmhCi8wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvN0g0NmhTMXhDTDdhVTdPdzRDYTdC
aG1oQ2k4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdLKADAN
BgkqhkiG9w0BAQsFAAOCAQEAXHSTQH4bAs/4g+GpoRA3I2mNhmmBaAuJgRL8GgQq
uN0mQoqXGJlFC1kwSg1GBC7Rhs1pXVvtpfyLDu1Ssz6JxPnqgnpUm6azIUDLXGgo
kosBdwPA+Y7duNh3QTtqWBYTkFLsW4k1IJZtC/kVYFMev7sP46HA+C+tPz1toVEA
J2BWe4YVlCcr68Z+oqaJuLl/yediUdIezYm5OY5u/uCEe9EhmhkK+r84hf8mkJOD
2wTbSaPRAsAaaOPxrg11vq9nhMnmzl5c0duSWxn/czwJ2e0fdt6riUALE//TNBFi
M3M+P2nEFzOU7xrYzJq3jP/fzMVpB5WGgNYEer/SIiZcEg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org