Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/7aaQPbLMw2sXBgJDakrUrSHTBZA.roa
File: 7aaQPbLMw2sXBgJDakrUrSHTBZA.roa (raw, json)
Hash identifier: b8mCB/4MCvQeOwODQQKdqSDYvyxhIymgvO+x7JOU+Ak=
Subject key identifier: ED:A6:90:3D:B2:CC:C3:6B:17:06:02:43:6A:4A:D4:AD:21:D3:05:90
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DCA
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7aaQPbLMw2sXBgJDakrUrSHTBZA.roa
Signing time: Wed 29 Sep 2021 02:39:34 +0000
ROA not before: Wed 29 Sep 2021 02:39:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24154
IP address blocks: 210.200.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3530 (0xdca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:34 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=EDA6903DB2CCC36B170602436A4AD4AD21D30590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:c4:da:fb:75:f0:cc:a1:14:6d:d7:63:11:
29:d7:76:6e:9a:48:0d:09:3a:eb:f9:34:1c:d0:6f:
90:85:f6:67:b3:0a:f5:b6:9f:6d:29:bc:b5:8e:56:
c1:fe:3d:fc:54:33:86:a0:1c:cb:92:40:ae:72:8f:
7b:5c:0b:c0:14:4e:30:34:8b:84:22:78:74:75:fb:
8e:36:4d:e4:fe:4b:07:e4:e1:1c:27:7d:f0:c0:6e:
7a:ac:5e:20:f9:db:f3:ec:ce:de:95:50:b1:76:a1:
1b:c9:a3:cc:a6:de:f6:fa:bc:3c:03:c7:2b:36:40:
9a:45:e7:af:9f:d3:12:ec:a6:21:7f:e6:00:10:92:
fa:37:48:02:89:73:03:d1:65:21:12:b9:8d:ec:44:
2a:3b:7b:f5:70:29:f5:7f:1d:b4:2e:19:aa:80:d6:
e2:c3:ac:b2:a9:43:4c:e9:ee:92:74:ee:fc:0d:65:
2a:dc:f8:59:91:2b:52:27:c6:31:14:ad:33:65:6c:
99:f0:b6:3b:36:7b:13:41:e9:bf:fc:48:0d:7f:d9:
03:f9:14:e5:8a:d3:7e:5b:38:8a:be:20:15:d7:49:
56:b5:b4:5d:80:d5:62:e4:24:4f:a8:d8:70:2d:dc:
b0:cd:6e:94:31:dc:6c:d7:48:84:b0:ed:5b:22:36:
17:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A6:90:3D:B2:CC:C3:6B:17:06:02:43:6A:4A:D4:AD:21:D3:05:90
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7aaQPbLMw2sXBgJDakrUrSHTBZA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.8.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:60:56:e5:18:48:4f:21:4b:40:4b:f8:6d:f4:d1:96:dd:89:
cb:c4:54:fd:56:a2:29:29:f6:7a:d9:3a:14:15:17:b6:8f:f6:
54:85:16:7e:7b:08:89:dc:7d:a8:d1:65:cc:e8:d8:f2:b9:79:
39:1c:43:be:41:0f:28:67:ec:89:09:35:de:71:25:f6:ba:16:
0c:f2:ba:a6:4c:f8:63:3c:4f:b5:b8:c7:51:79:8d:8c:63:e2:
39:7b:a9:4d:e1:09:65:2e:f0:75:03:9d:cf:e1:10:20:b9:ea:
71:49:6c:71:3d:b0:16:10:0a:cd:64:f8:49:dd:c7:b8:39:6d:
c3:b1:14:04:b7:2d:30:9d:88:81:e9:df:b1:64:5e:1b:59:18:
ac:74:52:6c:8e:3c:89:8f:94:54:63:e7:57:d1:50:43:b8:10:
df:62:9a:15:e4:f2:fd:4f:85:90:66:ea:85:fb:84:38:05:c4:
23:c3:38:c6:3b:d7:3d:d2:46:14:4e:88:ba:19:15:03:fa:ff:
4d:73:cd:b0:72:85:af:8e:2d:98:14:ad:1c:5f:d1:fa:51:36:
45:67:c4:3d:04:c5:ff:b7:1f:8f:04:0d:ca:f2:b0:b8:3a:69:
9a:09:c4:90:6a:cf:ec:10:5f:ff:69:4d:0a:02:3f:ce:8b:99:
17:e7:a7:be
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDcowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTA5Mjkw
MjM5MzRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEVEQTY5MDNEQjJDQ0Mz
NkIxNzA2MDI0MzZBNEFENEFEMjFEMzA1OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzqsTa+3XwzKEUbddjESnXdm6aSA0JOuv5NBzQb5CF9mezCvW2
n20pvLWOVsH+PfxUM4agHMuSQK5yj3tcC8AUTjA0i4QieHR1+442TeT+Swfk4Rwn
ffDAbnqsXiD52/Pszt6VULF2oRvJo8ym3vb6vDwDxys2QJpF56+f0xLspiF/5gAQ
kvo3SAKJcwPRZSESuY3sRCo7e/VwKfV/HbQuGaqA1uLDrLKpQ0zp7pJ07vwNZSrc
+FmRK1InxjEUrTNlbJnwtjs2exNB6b/8SA1/2QP5FOWK035bOIq+IBXXSVa1tF2A
1WLkJE+o2HAt3LDNbpQx3GzXSISw7VsiNheHAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU7aaQPbLMw2sXBgJDakrUrSHTBZAwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvN2FhUVBiTE13MnNYQmdKRGFrclVy
U0hUQlpBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9LICDAN
BgkqhkiG9w0BAQsFAAOCAQEAH2BW5RhITyFLQEv4bfTRlt2Jy8RU/VaiKSn2etk6
FBUXto/2VIUWfnsIidx9qNFlzOjY8rl5ORxDvkEPKGfsiQk13nEl9roWDPK6pkz4
YzxPtbjHUXmNjGPiOXupTeEJZS7wdQOdz+EQILnqcUlscT2wFhAKzWT4Sd3HuDlt
w7EUBLctMJ2IgenfsWReG1kYrHRSbI48iY+UVGPnV9FQQ7gQ32KaFeTy/U+FkGbq
hfuEOAXEI8M4xjvXPdJGFE6IuhkVA/r/TXPNsHKFr44tmBStHF/R+lE2RWfEPQTF
/7cfjwQNyvKwuDppmgnEkGrP7BBf/2lNCgI/zouZF+envg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org