Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ByEXSAJGvYYhq41B6xQjzJzvWGQ.roa
File: ByEXSAJGvYYhq41B6xQjzJzvWGQ.roa (raw, json)
Hash identifier: K1XwxKOK9trNMLQ8WBQ3rQgsXhFoxGuVUDmoFOAVCes=
Subject key identifier: 07:21:17:48:02:46:BD:86:21:AB:8D:41:EB:14:23:CC:9C:EF:58:64
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E43
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ByEXSAJGvYYhq41B6xQjzJzvWGQ.roa
Signing time: Wed 29 Sep 2021 02:40:09 +0000
ROA not before: Wed 29 Sep 2021 02:40:09 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131584
IP address blocks: 210.203.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3651 (0xe43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:40:09 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=072117480246BD8621AB8D41EB1423CC9CEF5864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9c:b8:63:c4:a4:e5:09:14:39:e6:46:d5:23:
57:cc:08:97:26:77:ac:35:f0:9c:9c:fa:38:70:92:
3a:02:aa:fe:58:eb:ed:05:85:c1:e8:54:8b:5e:5a:
43:d4:77:2f:a1:ef:56:f8:83:a1:1e:59:66:3e:a5:
8f:75:c8:81:98:a5:11:96:9e:31:b1:25:80:07:77:
77:7c:70:a3:66:a6:f5:e0:4c:e3:1e:72:9c:36:e1:
df:7b:1b:a1:33:fa:d0:ad:8e:57:38:26:43:ae:c5:
5a:5f:b8:61:87:ed:ce:54:7f:b7:b7:74:b0:86:8d:
25:33:aa:88:be:68:2b:87:8c:bf:66:34:16:d4:25:
58:e9:e2:59:7d:34:71:91:e2:1e:d3:c4:6d:6c:a6:
5e:67:eb:79:a4:e2:36:73:86:dc:d7:1c:d4:6a:be:
8f:33:53:b6:fe:d1:36:23:da:5c:9f:af:06:34:09:
9c:41:92:80:73:00:6d:0d:cc:f6:9f:16:e2:8d:98:
3f:99:5e:34:14:6e:02:e8:ff:ba:0c:8d:ec:63:07:
13:6b:d9:61:d2:a6:ed:06:bf:9e:39:79:af:e4:a0:
22:9a:ce:39:c0:dc:76:ac:e5:80:5d:52:55:fc:0c:
19:b3:70:90:e1:5a:56:a1:0a:25:0a:ad:d5:51:b4:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:21:17:48:02:46:BD:86:21:AB:8D:41:EB:14:23:CC:9C:EF:58:64
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ByEXSAJGvYYhq41B6xQjzJzvWGQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.48.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:f5:e4:45:4d:bb:4e:28:ff:d1:9a:fc:29:ff:c0:2d:21:bb:
15:11:54:c0:30:2b:4f:a9:94:f1:d0:c2:0a:92:7f:e2:d0:6c:
18:09:55:8f:5e:4f:56:28:19:65:d9:33:b0:78:36:e8:8b:ab:
ea:da:a2:5d:f5:d6:a7:5f:81:23:13:7e:7b:eb:64:f6:fa:ec:
14:9a:42:eb:bf:ee:be:de:77:e1:95:8f:ad:b4:b6:03:93:ac:
d6:7a:f7:d3:26:01:cd:57:e7:66:f4:69:b8:ff:e4:e1:a4:ac:
14:f7:29:d2:fe:87:9c:16:01:b2:8b:66:f6:fb:eb:2e:14:f1:
d7:28:6b:81:70:c0:66:68:f2:ad:37:00:67:60:b3:20:92:79:
25:e0:99:2b:8e:0c:d4:09:c2:a9:81:d0:d2:a9:5c:25:98:41:
06:5b:00:ac:cd:ae:9c:7d:41:23:59:27:00:b3:91:16:9e:21:
09:a1:d1:c6:bf:0f:ba:91:82:d5:d2:c1:d3:42:77:ac:69:84:
99:da:22:9a:7a:92:96:fd:7a:ff:b0:e8:40:aa:43:a1:c2:64:
00:e3:ec:c0:65:3f:1f:ba:2c:a5:29:d5:32:df:1a:42:f0:3c:
72:04:aa:f4:34:9d:6b:04:8f:e3:e2:7b:a8:5e:32:cd:94:de:
9b:21:58:6e
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDkMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTA5Mjkw
MjQwMDlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDA3MjExNzQ4MDI0NkJE
ODYyMUFCOEQ0MUVCMTQyM0NDOUNFRjU4NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQnLhjxKTlCRQ55kbVI1fMCJcmd6w18Jyc+jhwkjoCqv5Y6+0F
hcHoVIteWkPUdy+h71b4g6EeWWY+pY91yIGYpRGWnjGxJYAHd3d8cKNmpvXgTOMe
cpw24d97G6Ez+tCtjlc4JkOuxVpfuGGH7c5Uf7e3dLCGjSUzqoi+aCuHjL9mNBbU
JVjp4ll9NHGR4h7TxG1spl5n63mk4jZzhtzXHNRqvo8zU7b+0TYj2lyfrwY0CZxB
koBzAG0NzPafFuKNmD+ZXjQUbgLo/7oMjexjBxNr2WHSpu0Gv545ea/koCKazjnA
3Has5YBdUlX8DBmzcJDhWlahCiUKrdVRtOtHAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUByEXSAJGvYYhq41B6xQjzJzvWGQwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvQnlFWFNBSkd2WVlocTQxQjZ4UWp6
Snp2V0dRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNLLMDAN
BgkqhkiG9w0BAQsFAAOCAQEAPvXkRU27Tij/0Zr8Kf/ALSG7FRFUwDArT6mU8dDC
CpJ/4tBsGAlVj15PVigZZdkzsHg26Iur6tqiXfXWp1+BIxN+e+tk9vrsFJpC67/u
vt534ZWPrbS2A5Os1nr30yYBzVfnZvRpuP/k4aSsFPcp0v6HnBYBsotm9vvrLhTx
1yhrgXDAZmjyrTcAZ2CzIJJ5JeCZK44M1AnCqYHQ0qlcJZhBBlsArM2unH1BI1kn
ALORFp4hCaHRxr8PupGC1dLB00J3rGmEmdoimnqSlv16/7DoQKpDocJkAOPswGU/
H7ospSnVMt8aQvA8cgSq9DSdawSP4+J7qF4yzZTemyFYbg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org