Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/8xkPQP7zzzYKnd3mK0CCRSO2TTM.roa
File: 8xkPQP7zzzYKnd3mK0CCRSO2TTM.roa (raw, json)
Hash identifier: gbbOKdKRaFUO1GaBtSQFWEsk0vuaB55OG389P6EpvG0=
Subject key identifier: F3:19:0F:40:FE:F3:CF:36:0A:9D:DD:E6:2B:40:82:45:23:B6:4D:33
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0B97
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/8xkPQP7zzzYKnd3mK0CCRSO2TTM.roa
Signing time: Sun 07 Feb 2021 11:33:18 +0000
ROA not before: Sun 07 Feb 2021 11:33:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 124.219.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2967 (0xb97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:33:18 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F3190F40FEF3CF360A9DDDE62B40824523B64D33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:eb:f7:1b:ff:c7:ed:b1:c1:50:f2:0e:ba:
f5:44:30:89:93:bf:19:99:be:37:fe:2e:56:29:b3:
38:26:85:cc:3f:79:48:d8:a4:31:4f:fc:4c:8f:8e:
21:71:2b:21:b1:7c:d4:98:81:30:99:5a:81:a4:96:
72:23:3f:41:26:d0:44:5e:99:93:b6:96:77:5a:e5:
6f:88:ef:1a:6d:2f:98:e1:74:d2:0d:76:65:f4:d7:
5f:82:22:37:33:2d:a9:d0:9c:a9:d6:fe:df:2c:92:
ec:ff:fe:91:34:52:07:f9:f0:f9:22:6a:ad:68:b7:
a3:76:b6:cb:78:87:55:31:fb:16:42:40:9e:a6:d9:
35:98:5a:64:6c:a9:aa:2e:1e:75:17:a0:94:3e:3e:
21:c5:7e:6e:9b:95:de:31:32:b3:f1:f5:d9:3f:14:
13:da:3e:fc:e0:69:a6:d7:d4:80:10:f9:a0:2f:2f:
17:e3:3b:87:f5:63:ab:26:96:da:64:d8:84:6e:11:
9a:c0:94:6c:62:cd:00:f6:aa:c0:43:67:44:78:52:
35:7e:25:d1:46:8d:f9:15:63:17:bf:3e:78:ba:f4:
2b:d2:bf:30:82:3a:45:83:20:b4:07:9a:1f:8a:5f:
a9:67:48:4d:42:08:39:ef:48:7d:a5:e9:30:85:33:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:19:0F:40:FE:F3:CF:36:0A:9D:DD:E6:2B:40:82:45:23:B6:4D:33
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/8xkPQP7zzzYKnd3mK0CCRSO2TTM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.219.0.0/17
Signature Algorithm: sha256WithRSAEncryption
b4:cc:33:e3:a4:d7:40:67:bd:72:05:a5:1d:10:03:0b:44:9d:
24:ad:85:1f:3f:16:24:bd:a6:5f:68:fa:4a:60:99:22:d4:5a:
b9:c7:0d:7c:19:17:51:26:80:4c:af:b4:7c:6a:2d:7d:75:91:
2c:c4:79:0a:1b:ac:13:4a:db:51:e9:42:27:8a:29:53:71:fb:
33:14:85:5f:49:db:e1:38:ae:b3:f4:a5:3b:cb:9f:73:31:91:
25:62:ec:56:0a:cb:ec:94:5f:08:81:c8:c7:af:59:49:06:df:
8b:d6:67:2d:19:b8:e5:d7:c9:c8:9a:9d:64:af:93:b4:ab:b9:
88:d1:c7:99:69:97:77:05:14:21:ca:64:cc:d2:0d:68:2f:bd:
11:64:82:c8:72:93:7a:86:5a:94:97:9d:4d:65:e5:7c:36:2e:
c9:7e:f2:4b:3f:13:44:38:3d:e7:82:ca:ee:e6:2e:4b:75:b9:
f0:ee:3a:01:77:48:6a:a3:c3:ab:70:5b:c0:c5:ca:b4:7a:74:
33:42:60:06:24:c5:bd:cb:1c:96:09:86:60:9b:32:5f:65:fe:
54:3f:28:96:fe:8c:af:12:c0:67:4d:f6:36:37:d7:86:da:3d:
8d:c2:fc:24:48:b2:a4:c0:27:75:6f:b9:e6:ca:8b:92:55:02:
a4:a2:06:6f
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICC5cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTAyMDcx
MTMzMThaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEYzMTkwRjQwRkVGM0NG
MzYwQTlERERFNjJCNDA4MjQ1MjNCNjREMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0AOv3G//H7bHBUPIOuvVEMImTvxmZvjf+LlYpszgmhcw/eUjY
pDFP/EyPjiFxKyGxfNSYgTCZWoGklnIjP0Em0ERemZO2lnda5W+I7xptL5jhdNIN
dmX011+CIjczLanQnKnW/t8skuz//pE0Ugf58Pkiaq1ot6N2tst4h1Ux+xZCQJ6m
2TWYWmRsqaouHnUXoJQ+PiHFfm6bld4xMrPx9dk/FBPaPvzgaabX1IAQ+aAvLxfj
O4f1Y6smltpk2IRuEZrAlGxizQD2qsBDZ0R4UjV+JdFGjfkVYxe/Pni69CvSvzCC
OkWDILQHmh+KX6lnSE1CCDnvSH2l6TCFM3+DAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU8xkPQP7zzzYKnd3mK0CCRSO2TTMwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvOHhrUFFQN3p6ellLbmQzbUswQ0NS
U08yVFRNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3zbADAN
BgkqhkiG9w0BAQsFAAOCAQEAtMwz46TXQGe9cgWlHRADC0SdJK2FHz8WJL2mX2j6
SmCZItRauccNfBkXUSaATK+0fGotfXWRLMR5ChusE0rbUelCJ4opU3H7MxSFX0nb
4Tius/SlO8ufczGRJWLsVgrL7JRfCIHIx69ZSQbfi9ZnLRm45dfJyJqdZK+TtKu5
iNHHmWmXdwUUIcpkzNINaC+9EWSCyHKTeoZalJedTWXlfDYuyX7ySz8TRDg954LK
7uYuS3W58O46AXdIaqPDq3BbwMXKtHp0M0JgBiTFvcsclgmGYJsyX2X+VD8olv6M
rxLAZ032NjfXhto9jcL8JEiypMAndW+55sqLklUCpKIGbw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org