Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/CmU0WeZuJ9rkXiH26MjQnNWDlwo.roa
File: CmU0WeZuJ9rkXiH26MjQnNWDlwo.roa (raw, json)
Hash identifier: A4JKYC3cFlruFhJzxxaRPPV0XQsxmzuFH/WZszrhuAs=
Subject key identifier: 0A:65:34:59:E6:6E:27:DA:E4:5E:21:F6:E8:C8:D0:9C:D5:83:97:0A
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DD5
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/CmU0WeZuJ9rkXiH26MjQnNWDlwo.roa
Signing time: Wed 29 Sep 2021 02:39:37 +0000
ROA not before: Wed 29 Sep 2021 02:39:37 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9311
IP address blocks: 210.200.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3541 (0xdd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:37 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0A653459E66E27DAE45E21F6E8C8D09CD583970A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:c7:12:dd:56:0a:23:bc:a7:88:d8:ab:b9:
a9:22:34:9f:b8:40:32:42:3c:7e:c2:f2:6c:99:2c:
b4:f3:56:8f:a7:e2:1d:f1:8b:67:91:f6:fb:bf:ba:
aa:aa:9d:9b:48:9e:59:89:98:a6:ee:5b:3b:62:b9:
52:92:6d:2b:76:44:74:24:53:30:09:5f:e5:d5:5c:
2f:8f:17:49:e2:bf:b3:2b:eb:1b:99:8d:b5:82:c8:
75:0d:30:98:12:d4:8c:42:b4:8f:53:64:8d:33:05:
36:54:30:6c:b8:4f:d2:fa:b4:8e:5f:69:c7:1e:d1:
6d:78:e3:02:9f:26:7d:4b:3d:32:1c:55:b6:a2:b7:
58:ba:35:c8:3a:2e:bc:31:18:e0:84:1b:58:f1:3d:
51:6e:91:e9:d8:b7:88:59:61:2a:09:5d:66:79:ca:
24:3d:bf:0e:18:94:65:ee:a5:ff:23:3c:80:ea:8c:
b8:e3:f7:d1:65:d1:6e:f4:82:f0:57:dd:04:d1:52:
80:77:04:47:37:f2:66:be:1a:ef:2e:c1:93:2f:fe:
2a:1a:61:69:1a:cd:60:bd:ae:ec:57:bf:77:58:15:
b0:d1:37:77:3c:6d:cc:f1:ed:48:b8:b4:68:e7:c7:
09:c0:1a:da:82:a6:9f:a3:55:5a:67:d5:59:e7:85:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:65:34:59:E6:6E:27:DA:E4:5E:21:F6:E8:C8:D0:9C:D5:83:97:0A
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/CmU0WeZuJ9rkXiH26MjQnNWDlwo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.128.0/18
Signature Algorithm: sha256WithRSAEncryption
aa:c5:0b:b9:59:2c:6f:32:f1:0e:2e:50:7c:84:8c:37:bf:4e:
2b:d8:50:a7:c7:ef:4f:46:3d:f2:eb:22:8c:53:3b:a1:1b:72:
35:84:74:8e:22:68:c8:91:a1:64:fe:3a:38:ec:ad:f2:59:43:
13:18:e8:54:9b:56:df:46:c2:b0:10:55:0b:f0:c1:65:7c:89:
b5:96:e5:52:72:12:93:38:e3:ce:da:dc:5a:d9:cf:40:b1:0e:
52:9e:9c:d9:5e:60:ce:1f:6f:fb:ff:c2:11:3c:be:ff:ae:63:
e1:a9:73:a5:02:d7:9d:20:69:a3:98:83:04:b1:c5:d3:64:26:
18:3a:61:c9:d4:ab:44:f6:5a:f7:43:d7:7e:cb:1c:6d:fd:e5:
fb:ed:32:2b:f2:a1:49:51:c5:e5:33:99:28:5b:67:2d:8b:93:
5b:51:9f:2d:4a:13:cd:9c:b2:e9:0f:e9:db:9b:d0:56:60:15:
54:7e:c1:f0:91:c0:4b:d6:52:8a:aa:cb:7d:22:c8:e1:00:51:
7f:0f:99:70:fd:7c:18:03:e5:b2:37:f8:f7:ff:5d:ad:d4:01:
49:04:41:2a:91:51:39:15:4c:a5:6b:ea:ec:57:78:73:44:34:
eb:cb:09:85:6e:f7:1f:87:76:51:1f:03:6b:ec:f5:a0:02:66:
43:11:d3:ed
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDdUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTA5Mjkw
MjM5MzdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDBBNjUzNDU5RTY2RTI3
REFFNDVFMjFGNkU4QzhEMDlDRDU4Mzk3MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHPscS3VYKI7yniNiruakiNJ+4QDJCPH7C8myZLLTzVo+n4h3x
i2eR9vu/uqqqnZtInlmJmKbuWztiuVKSbSt2RHQkUzAJX+XVXC+PF0niv7Mr6xuZ
jbWCyHUNMJgS1IxCtI9TZI0zBTZUMGy4T9L6tI5facce0W144wKfJn1LPTIcVbai
t1i6Ncg6LrwxGOCEG1jxPVFukenYt4hZYSoJXWZ5yiQ9vw4YlGXupf8jPIDqjLjj
99Fl0W70gvBX3QTRUoB3BEc38ma+Gu8uwZMv/ioaYWkazWC9ruxXv3dYFbDRN3c8
bczx7Ui4tGjnxwnAGtqCpp+jVVpn1VnnhVMVAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUCmU0WeZuJ9rkXiH26MjQnNWDlwowHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvQ21VMFdlWnVKOXJrWGlIMjZNalFu
TldEbHdvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtLIgDAN
BgkqhkiG9w0BAQsFAAOCAQEAqsULuVksbzLxDi5QfISMN79OK9hQp8fvT0Y98usi
jFM7oRtyNYR0jiJoyJGhZP46OOyt8llDExjoVJtW30bCsBBVC/DBZXyJtZblUnIS
kzjjztrcWtnPQLEOUp6c2V5gzh9v+//CETy+/65j4alzpQLXnSBpo5iDBLHF02Qm
GDphydSrRPZa90PXfsscbf3l++0yK/KhSVHF5TOZKFtnLYuTW1GfLUoTzZyy6Q/p
25vQVmAVVH7B8JHAS9ZSiqrLfSLI4QBRfw+ZcP18GAPlsjf49/9drdQBSQRBKpFR
ORVMpWvq7Fd4c0Q068sJhW73H4d2UR8Da+z1oAJmQxHT7Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org