Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/GsYo-bVk9_kqixFZX2aOlI2thXA.roa
File: GsYo-bVk9_kqixFZX2aOlI2thXA.roa (raw, json)
Hash identifier: FmXdaMqP7jpxolnEDcVVCP+oP1gqZtqLKrYl3fYMmTE=
Subject key identifier: 1A:C6:28:F9:B5:64:F7:F9:2A:8B:11:59:5F:66:8E:94:8D:AD:85:70
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10BD
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/GsYo-bVk9_kqixFZX2aOlI2thXA.roa
Signing time: Tue 16 May 2023 08:36:34 +0000
ROA not before: Tue 16 May 2023 08:36:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24155
IP address blocks: 2404:0:6000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4285 (0x10bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:34 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1AC628F9B564F7F92A8B11595F668E948DAD8570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:97:00:a2:a5:8b:78:a2:78:9f:6f:ff:e8:
07:25:f1:7f:54:6c:c3:06:70:a5:51:6e:ea:a4:8c:
af:d0:e7:ee:fd:f9:5a:12:6c:0b:3c:c5:b2:c0:fd:
6f:24:f0:80:9c:e3:a2:da:45:e2:14:02:a9:a2:34:
a4:e7:55:91:ac:05:98:93:c4:86:d4:c6:59:0c:8d:
e1:4f:d0:e9:d3:e7:bd:5b:bf:52:ec:8e:fd:2d:27:
3c:b9:31:fa:fc:c3:09:10:df:1a:6b:e9:00:b6:9d:
35:64:28:19:1c:27:c5:63:14:67:59:4e:7b:80:28:
64:d7:c4:8d:6e:d0:5e:e7:8b:85:1d:06:ea:db:6f:
0e:2a:f1:b3:5c:5e:3b:92:47:db:a0:a5:26:a1:00:
5c:3f:f5:dc:cd:59:94:a8:1c:ba:92:ea:ae:3c:bb:
32:53:32:6a:40:6c:20:0b:58:cf:99:a8:ff:40:4c:
6b:d3:50:ed:a0:d1:5c:7d:01:9a:30:8d:a8:38:f3:
2f:41:6b:73:3f:be:b0:b3:75:87:d7:21:e9:98:f2:
de:ca:c9:fd:83:17:68:8d:35:04:ed:4b:7e:c9:04:
5b:4c:15:ac:10:e8:0d:b3:6f:94:a1:c1:49:3d:07:
46:27:8e:cd:80:68:94:f3:d1:0a:16:26:27:4d:cd:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C6:28:F9:B5:64:F7:F9:2A:8B:11:59:5F:66:8E:94:8D:AD:85:70
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/GsYo-bVk9_kqixFZX2aOlI2thXA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:6000::/36
Signature Algorithm: sha256WithRSAEncryption
4b:07:0f:ee:66:48:5d:82:ba:ed:ed:1c:ef:87:c0:c8:db:30:
7a:14:be:e6:71:76:66:8e:f8:b0:66:45:94:71:b3:54:af:38:
2f:6a:d3:1f:17:6c:32:ef:05:84:56:98:21:cf:b5:42:ea:c0:
de:1e:87:50:53:42:fc:e9:b9:89:7c:25:74:18:5d:2b:36:dc:
b4:ba:a6:cf:aa:d2:2a:43:71:c6:89:b6:13:ca:9e:1f:a1:5f:
6c:4d:c9:9c:8f:89:52:62:00:85:9a:62:22:82:8d:13:43:c0:
98:4f:83:dc:3f:49:8c:2c:ef:31:43:b6:6f:f4:06:38:8f:b9:
8e:88:43:20:53:73:0e:57:79:11:16:01:12:e6:40:13:45:38:
d0:9a:e5:b7:f1:4e:e1:97:22:0b:67:f1:f9:63:1f:af:e3:03:
fd:b1:f2:eb:ab:e3:d7:77:12:2f:04:2c:18:97:46:7d:ef:e0:
96:a3:d6:62:cc:e5:48:cb:3f:af:a9:65:52:55:71:ff:42:62:
2e:26:74:9e:d4:3a:9b:45:8b:ae:14:12:b7:2e:56:5f:26:4d:
1f:9b:45:13:e7:76:73:36:c5:af:2a:d6:0b:b9:ec:9b:06:bd:
d3:44:ba:1f:b9:40:ea:be:3d:4c:ca:8c:8e:2c:29:95:68:e0:
ed:89:11:fe
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA1MTYw
ODM2MzRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDFBQzYyOEY5QjU2NEY3
RjkyQThCMTE1OTVGNjY4RTk0OERBRDg1NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5h5cAoqWLeKJ4n2//6Acl8X9UbMMGcKVRbuqkjK/Q5+79+VoS
bAs8xbLA/W8k8ICc46LaReIUAqmiNKTnVZGsBZiTxIbUxlkMjeFP0OnT571bv1Ls
jv0tJzy5Mfr8wwkQ3xpr6QC2nTVkKBkcJ8VjFGdZTnuAKGTXxI1u0F7ni4UdBurb
bw4q8bNcXjuSR9ugpSahAFw/9dzNWZSoHLqS6q48uzJTMmpAbCALWM+ZqP9ATGvT
UO2g0Vx9AZowjag48y9Ba3M/vrCzdYfXIemY8t7Kyf2DF2iNNQTtS37JBFtMFawQ
6A2zb5ShwUk9B0Ynjs2AaJTz0QoWJidNzQGJAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUGsYo+bVk9/kqixFZX2aOlI2thXAwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvR3NZby1iVms5X2txaXhGWlgyYU9s
STJ0aFhBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCQEAABg
MA0GCSqGSIb3DQEBCwUAA4IBAQBLBw/uZkhdgrrt7Rzvh8DI2zB6FL7mcXZmjviw
ZkWUcbNUrzgvatMfF2wy7wWEVpghz7VC6sDeHodQU0L86bmJfCV0GF0rNty0uqbP
qtIqQ3HGibYTyp4foV9sTcmcj4lSYgCFmmIigo0TQ8CYT4PcP0mMLO8xQ7Zv9AY4
j7mOiEMgU3MOV3kRFgES5kATRTjQmuW38U7hlyILZ/H5Yx+v4wP9sfLrq+PXdxIv
BCwYl0Z97+CWo9ZizOVIyz+vqWVSVXH/QmIuJnSe1DqbRYuuFBK3LlZfJk0fm0UT
53ZzNsWvKtYLueybBr3TRLofuUDqvj1MyoyOLCmVaODtiRH+
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org