Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/DC_RppNtV-3dwSCnDE2OQ5EJrMw.roa
File: DC_RppNtV-3dwSCnDE2OQ5EJrMw.roa (raw, json)
Hash identifier: yjxFwpNn6LVWVn40Jl2u6qOtnU4j7/e2rRG55jkkT5I=
Subject key identifier: 0C:2F:D1:A6:93:6D:57:ED:DD:C1:20:A7:0C:4D:8E:43:91:09:AC:CC
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1270
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/DC_RppNtV-3dwSCnDE2OQ5EJrMw.roa
Signing time: Fri 01 Sep 2023 08:04:27 +0000
ROA not before: Fri 01 Sep 2023 08:04:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24154
IP address blocks: 203.79.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4720 (0x1270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0C2FD1A6936D57EDDDC120A70C4D8E439109ACCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:8d:83:37:37:2b:39:51:88:8a:0b:28:2a:
2e:81:de:33:72:83:9c:74:9a:37:8a:33:95:29:f9:
73:33:f8:23:52:a1:cf:23:21:35:fa:95:e5:68:74:
e3:c5:23:6d:ab:67:6d:39:26:99:f1:7d:8f:16:9e:
c1:3e:ef:a6:9c:e5:36:43:c9:80:e9:31:82:63:e7:
61:54:2f:d5:54:a5:25:e5:7f:88:d0:be:16:e4:e6:
c0:49:12:45:e1:f0:06:3c:a8:e8:92:21:80:a6:38:
3f:bb:2c:a2:25:50:9b:41:ba:fa:b1:28:5e:ca:bd:
f1:8e:58:41:a3:14:1d:c8:d1:1f:e0:bf:86:42:a5:
3d:4a:5c:17:79:33:51:ff:c4:df:b5:e8:6e:2d:48:
a2:5b:3d:9c:a1:cd:69:99:52:d1:23:91:92:70:4b:
41:d9:cf:26:7c:6d:06:2f:88:4b:50:73:7b:a9:54:
ba:0f:2d:3c:57:87:bf:59:f0:04:d4:a2:86:de:19:
78:a1:07:9a:a3:04:61:82:96:1b:c6:34:91:94:04:
9a:23:00:01:39:93:9c:b3:fd:c1:a7:ad:78:9f:15:
1d:56:4d:ef:f2:77:94:b7:9f:74:b8:67:97:21:b0:
4e:f6:b2:c8:ce:e5:7b:f9:cd:84:5d:b1:a0:3f:22:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2F:D1:A6:93:6D:57:ED:DD:C1:20:A7:0C:4D:8E:43:91:09:AC:CC
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/DC_RppNtV-3dwSCnDE2OQ5EJrMw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.200.0/22
Signature Algorithm: sha256WithRSAEncryption
63:a4:8a:6a:25:3e:3c:1c:f9:b4:cf:d6:bc:f5:ab:4e:98:3d:
b9:f1:10:bd:e7:25:00:cf:cb:2c:af:f8:ee:06:df:80:0a:7d:
3e:9d:a8:59:e8:af:fc:9e:50:38:33:9c:0b:74:c0:0f:ba:87:
f2:b1:d3:4c:8f:b2:4e:d2:ba:f3:0b:55:62:15:31:3f:d1:56:
40:03:06:55:e4:d0:5f:8e:21:e9:9b:83:5c:14:0f:27:7f:8b:
c6:84:a6:8f:53:ff:a8:ff:3c:51:7d:f6:d0:7d:39:d4:e1:2d:
a2:ba:85:5b:0a:d9:53:0c:57:36:c3:2e:90:ed:bb:55:95:16:
25:5b:91:96:3d:09:ad:37:3f:fe:82:19:e0:fa:54:6d:cb:30:
53:d3:82:34:33:71:05:9e:10:fc:a9:6a:c6:23:06:f1:87:dc:
0a:52:56:2f:7b:31:4a:44:d9:f0:0a:9e:af:2a:2b:b1:ca:4f:
b3:bb:9c:11:cc:b8:ec:5f:58:e4:5c:89:95:4c:c2:2b:37:d6:
dd:27:e6:c8:73:67:18:7a:2f:6f:67:d1:b0:97:76:86:f4:63:
ed:ca:1a:1e:67:51:0b:8d:a6:50:8f:68:c2:bf:66:76:a1:2a:
36:45:7e:ab:0d:a4:46:c8:9b:57:44:20:1b:ee:9a:52:c8:c4:
ce:bc:da:d9
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEnAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA0MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBDMkZEMUE2OTM2RDU3
RUREREMxMjBBNzBDNEQ4RTQzOTEwOUFDQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPVo2DNzcrOVGIigsoKi6B3jNyg5x0mjeKM5Up+XMz+CNSoc8j
ITX6leVodOPFI22rZ205JpnxfY8WnsE+76ac5TZDyYDpMYJj52FUL9VUpSXlf4jQ
vhbk5sBJEkXh8AY8qOiSIYCmOD+7LKIlUJtBuvqxKF7KvfGOWEGjFB3I0R/gv4ZC
pT1KXBd5M1H/xN+16G4tSKJbPZyhzWmZUtEjkZJwS0HZzyZ8bQYviEtQc3upVLoP
LTxXh79Z8ATUoobeGXihB5qjBGGClhvGNJGUBJojAAE5k5yz/cGnrXifFR1WTe/y
d5S3n3S4Z5chsE72ssjO5Xv5zYRdsaA/IpYFAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUDC/RppNtV+3dwSCnDE2OQ5EJrMwwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvRENfUnBwTnRWLTNkd1NDbkRFMk9R
NUVKck13LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAstPyDAN
BgkqhkiG9w0BAQsFAAOCAQEAY6SKaiU+PBz5tM/WvPWrTpg9ufEQveclAM/LLK/4
7gbfgAp9Pp2oWeiv/J5QODOcC3TAD7qH8rHTTI+yTtK68wtVYhUxP9FWQAMGVeTQ
X44h6ZuDXBQPJ3+LxoSmj1P/qP88UX320H051OEtorqFWwrZUwxXNsMukO27VZUW
JVuRlj0JrTc//oIZ4PpUbcswU9OCNDNxBZ4Q/KlqxiMG8YfcClJWL3sxSkTZ8Aqe
ryorscpPs7ucEcy47F9Y5FyJlUzCKzfW3SfmyHNnGHovb2fRsJd2hvRj7coaHmdR
C42mUI9owr9mdqEqNkV+qw2kRsibV0QgG+6aUsjEzrza2Q==
-----END CERTIFICATE-----
Generated at Mon Jan 15 22:50:43 2024 by rpki-client on console-fra.rpki-client.org