Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/AWKPsLMqxPAYaVcLZnkjcLOv5VM.roa
File: AWKPsLMqxPAYaVcLZnkjcLOv5VM.roa (raw, json)
Hash identifier: q25DR6Wmd0doS9u77V2AQ/6kHQsIBLw2/Fg/KTOrT1E=
Subject key identifier: 01:62:8F:B0:B3:2A:C4:F0:18:69:57:0B:66:79:23:70:B3:AF:E5:53
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0B9D
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/AWKPsLMqxPAYaVcLZnkjcLOv5VM.roa
Signing time: Sun 07 Feb 2021 11:33:22 +0000
ROA not before: Sun 07 Feb 2021 11:33:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 101.136.0.0/14 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2973 (0xb9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:33:22 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=01628FB0B32AC4F01869570B66792370B3AFE553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:11:7d:ed:54:e8:8d:2a:2f:c3:f2:2f:7a:
cd:d5:4a:0a:3e:1c:3e:7f:b0:8b:8e:b3:e7:28:b0:
47:2f:1a:2c:4b:18:b1:cb:aa:63:87:a5:7e:da:7d:
59:e5:33:98:0a:13:ad:49:7b:ef:3d:4a:6a:45:a7:
46:c4:49:b1:c2:37:e8:ed:53:84:3e:cb:c5:5a:20:
4b:3a:49:c2:ac:d2:82:23:c8:b7:bf:b0:1d:63:f1:
05:3b:fd:73:61:ee:0a:d6:83:4e:39:e3:cf:6b:39:
87:4c:ce:e9:0c:62:2b:64:ce:d6:0c:02:12:61:d9:
b1:09:f9:05:a3:7c:94:51:be:7c:e2:d4:f9:a5:6d:
58:df:df:30:dc:2a:35:30:28:9b:46:98:4d:0e:4f:
cc:36:61:4b:a2:cc:52:43:4a:74:22:93:cc:ca:c1:
37:85:66:82:bb:d7:54:7b:c6:ed:14:b4:77:41:79:
e7:a1:ff:e1:cc:95:40:33:46:f6:a7:e6:ea:f1:c1:
3c:be:12:18:78:17:e7:37:ac:b1:6f:83:78:c4:8d:
66:44:6f:7b:4d:0a:51:f4:2a:65:c2:8d:ba:fb:94:
80:ba:63:99:37:45:42:11:de:3f:d5:3c:0e:dd:aa:
93:a4:5c:ff:e1:82:77:f8:c1:c0:be:0b:8c:a9:b7:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:62:8F:B0:B3:2A:C4:F0:18:69:57:0B:66:79:23:70:B3:AF:E5:53
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/AWKPsLMqxPAYaVcLZnkjcLOv5VM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.136.0.0/14
Signature Algorithm: sha256WithRSAEncryption
b4:7a:11:46:90:03:e1:bb:e5:6d:9e:f1:f6:0d:6f:f5:4a:3a:
42:fe:48:ed:fd:4e:19:95:b5:7d:68:a7:11:ac:a2:88:dd:d9:
e7:b6:61:86:dd:de:39:ae:81:40:d8:72:bc:c1:89:2c:7e:26:
e5:78:58:2b:98:cc:7e:ad:03:da:b5:8c:d3:f2:29:07:0c:80:
6b:b1:fa:cf:14:8f:ed:48:8c:04:d2:6d:0b:ad:b1:50:0f:fc:
7b:27:c9:11:e0:25:aa:3c:73:49:57:2e:e6:c4:54:a9:1e:03:
2b:fe:2d:da:18:1e:1f:2c:0d:bd:6b:a7:2c:dd:56:8d:52:02:
5c:f2:46:cd:0f:56:8c:e7:ca:f4:0b:70:8b:13:43:d1:97:8b:
9c:eb:4e:55:fc:4c:2d:50:bb:12:19:5b:83:91:f4:c0:6d:85:
6f:e0:8d:d2:71:17:bd:bd:fa:2e:a3:b7:6f:0b:57:40:d9:78:
a4:81:4a:ba:f1:07:43:62:5e:bc:0a:c5:d2:fa:2e:4a:a6:89:
62:9c:88:ca:14:01:88:7c:6b:7a:fa:26:f4:5f:27:e4:0a:da:
51:32:5b:4d:41:38:88:c0:8c:4a:14:eb:5f:d5:d8:a3:aa:83:
3c:50:48:0b:57:ee:50:cc:bf:82:30:dd:18:0c:75:82:35:18:
f1:81:14:23
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICC50wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTAyMDcx
MTMzMjJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDAxNjI4RkIwQjMyQUM0
RjAxODY5NTcwQjY2NzkyMzcwQjNBRkU1NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2uBF97VTojSovw/Ives3VSgo+HD5/sIuOs+cosEcvGixLGLHL
qmOHpX7afVnlM5gKE61Je+89SmpFp0bESbHCN+jtU4Q+y8VaIEs6ScKs0oIjyLe/
sB1j8QU7/XNh7grWg045489rOYdMzukMYitkztYMAhJh2bEJ+QWjfJRRvnzi1Pml
bVjf3zDcKjUwKJtGmE0OT8w2YUuizFJDSnQik8zKwTeFZoK711R7xu0UtHdBeeeh
/+HMlUAzRvan5urxwTy+Ehh4F+c3rLFvg3jEjWZEb3tNClH0KmXCjbr7lIC6Y5k3
RUIR3j/VPA7dqpOkXP/hgnf4wcC+C4ypt+p5AgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUAWKPsLMqxPAYaVcLZnkjcLOv5VMwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvQVdLUHNMTXF4UEFZYVZjTFpua2pj
TE92NVZNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAmWIMA0G
CSqGSIb3DQEBCwUAA4IBAQC0ehFGkAPhu+VtnvH2DW/1SjpC/kjt/U4ZlbV9aKcR
rKKI3dnntmGG3d45roFA2HK8wYksfibleFgrmMx+rQPatYzT8ikHDIBrsfrPFI/t
SIwE0m0LrbFQD/x7J8kR4CWqPHNJVy7mxFSpHgMr/i3aGB4fLA29a6cs3VaNUgJc
8kbND1aM58r0C3CLE0PRl4uc605V/EwtULsSGVuDkfTAbYVv4I3ScRe9vfouo7dv
C1dA2XikgUq68QdDYl68CsXS+i5KpolinIjKFAGIfGt6+ib0XyfkCtpRMltNQTiI
wIxKFOtf1dijqoM8UEgLV+5QzL+CMN0YDHWCNRjxgRQj
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org