Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/IGEOkP3w98nGnPVVBGLbBCHC1Lw.roa
File: IGEOkP3w98nGnPVVBGLbBCHC1Lw.roa (raw, json)
Hash identifier: BU7slQQ9pGBzBS0BpSZzInpqdmkxk7/SmJwWluRRmFU=
Subject key identifier: 20:61:0E:90:FD:F0:F7:C9:C6:9C:F5:55:04:62:DB:04:21:C2:D4:BC
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/IGEOkP3w98nGnPVVBGLbBCHC1Lw.roa
Signing time: Thu 15 Sep 2022 02:40:03 +0000
ROA not before: Thu 15 Sep 2022 02:40:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 124.218.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=20610E90FDF0F7C9C69CF5550462DB0421C2D4BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:8a:6d:2b:6e:42:82:7c:6e:35:2a:b1:87:
d9:0c:d9:0f:10:69:2f:0d:e1:94:83:ce:86:d6:03:
3d:d4:4a:31:45:43:f4:4e:e9:26:7a:7b:c7:ae:d1:
55:10:6f:c6:4b:cf:39:7c:a6:70:b7:dc:a5:bc:09:
ef:e8:27:f0:9e:17:45:92:22:ef:bd:64:6c:c0:5d:
19:c4:5f:26:8d:b8:05:be:11:0d:c6:4f:f3:10:04:
71:e8:5b:e5:58:12:c5:f3:92:aa:0d:ef:91:11:7c:
28:ce:9b:81:43:ca:43:b3:ff:52:ad:1d:29:8e:a8:
10:a3:38:07:27:96:17:a2:ee:41:ed:06:9e:e3:2b:
6f:42:0d:7c:e7:96:7d:9c:23:d3:37:96:a5:41:d2:
32:2f:6b:7f:ed:f4:ff:60:16:cb:f6:0c:2d:42:ec:
dc:8a:7b:9e:2b:e7:55:54:17:25:a3:39:de:80:bc:
b2:c5:13:f3:e3:99:1c:51:4f:44:3d:76:99:de:05:
e4:e1:91:a0:46:cb:fc:ed:88:3e:8f:11:81:eb:b2:
19:b4:29:9d:60:85:7e:1e:3a:5c:7c:5e:5a:ef:fc:
59:e4:83:f7:8c:5d:ed:b5:f0:6e:60:79:03:b0:25:
2c:cf:6a:81:a0:3f:c5:a4:0c:8d:2a:9a:1e:d9:33:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:61:0E:90:FD:F0:F7:C9:C6:9C:F5:55:04:62:DB:04:21:C2:D4:BC
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/IGEOkP3w98nGnPVVBGLbBCHC1Lw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.192.0/19
Signature Algorithm: sha256WithRSAEncryption
bf:03:a1:f9:3e:54:c7:62:e6:5c:82:8a:ee:d4:f9:c9:ef:57:
e7:af:e6:e0:b2:e0:03:36:76:81:ec:8d:9c:0a:65:fe:c0:9b:
c8:44:88:56:48:e6:64:f8:47:a7:2b:43:17:e3:a3:cf:35:00:
ed:9f:ad:73:23:3b:ba:af:92:48:b3:11:a2:27:41:46:c7:73:
f4:da:4e:3b:e5:28:eb:c2:b6:69:11:0a:88:3c:a5:29:c2:a0:
b2:73:4c:12:6f:0b:98:7f:01:e3:b4:64:cf:47:92:db:c0:fc:
72:69:5a:20:a6:c4:a4:a0:99:e2:d4:a9:17:29:98:02:0a:a5:
fd:47:97:83:2f:d1:df:44:42:79:da:54:06:4e:0c:d5:6c:e3:
ea:7a:29:0f:8a:fc:b9:ff:d9:da:3d:0f:96:18:40:bd:34:3f:
8b:90:9b:e9:12:ec:eb:fe:a7:13:a6:18:ab:99:bf:f4:2f:e5:
da:af:a9:8e:13:26:59:3f:1a:7c:b7:34:e2:64:ed:2e:2d:4f:
6d:26:4c:c2:33:d3:88:38:3d:44:41:e6:45:2b:0f:9b:41:32:
59:ce:82:26:8c:7f:76:56:d4:d1:62:df:cb:1a:d2:31:a4:d5:
0b:9c:6c:b7:f1:bc:e3:2b:b2:10:3f:f8:6f:5c:10:e9:2b:b0:
f3:43:c5:29
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMjA5MTUw
MjQwMDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDIwNjEwRTkwRkRGMEY3
QzlDNjlDRjU1NTA0NjJEQjA0MjFDMkQ0QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9+optK25CgnxuNSqxh9kM2Q8QaS8N4ZSDzobWAz3USjFFQ/RO
6SZ6e8eu0VUQb8ZLzzl8pnC33KW8Ce/oJ/CeF0WSIu+9ZGzAXRnEXyaNuAW+EQ3G
T/MQBHHoW+VYEsXzkqoN75ERfCjOm4FDykOz/1KtHSmOqBCjOAcnlhei7kHtBp7j
K29CDXznln2cI9M3lqVB0jIva3/t9P9gFsv2DC1C7NyKe54r51VUFyWjOd6AvLLF
E/PjmRxRT0Q9dpneBeThkaBGy/ztiD6PEYHrshm0KZ1ghX4eOlx8Xlrv/Fnkg/eM
Xe218G5geQOwJSzPaoGgP8WkDI0qmh7ZM5nZAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUIGEOkP3w98nGnPVVBGLbBCHC1LwwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvSUdFT2tQM3c5OG5HblBWVkJHTGJC
Q0hDMUx3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXzawDAN
BgkqhkiG9w0BAQsFAAOCAQEAvwOh+T5Ux2LmXIKK7tT5ye9X56/m4LLgAzZ2geyN
nApl/sCbyESIVkjmZPhHpytDF+OjzzUA7Z+tcyM7uq+SSLMRoidBRsdz9NpOO+Uo
68K2aREKiDylKcKgsnNMEm8LmH8B47Rkz0eS28D8cmlaIKbEpKCZ4tSpFymYAgql
/UeXgy/R30RCedpUBk4M1Wzj6nopD4r8uf/Z2j0PlhhAvTQ/i5Cb6RLs6/6nE6YY
q5m/9C/l2q+pjhMmWT8afLc04mTtLi1PbSZMwjPTiDg9REHmRSsPm0EyWc6CJox/
dlbU0WLfyxrSMaTVC5xst/G84yuyED/4b1wQ6Suw80PFKQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org