Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/JRn4VeiAtn2hZ0ZeYvTZLyKYYMY.roa
File: JRn4VeiAtn2hZ0ZeYvTZLyKYYMY.roa (raw, json)
Hash identifier: sJTkXU8K8QEck+xAd6jf6QYV9nW3Ed/Mq15mK5XrzcA=
Subject key identifier: 25:19:F8:55:E8:80:B6:7D:A1:67:46:5E:62:F4:D9:2F:22:98:60:C6
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C91
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/JRn4VeiAtn2hZ0ZeYvTZLyKYYMY.roa
Signing time: Sun 07 Feb 2021 11:40:07 +0000
ROA not before: Sun 07 Feb 2021 11:40:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 219.91.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3217 (0xc91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:40:07 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2519F855E880B67DA167465E62F4D92F229860C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b5:a4:bd:b6:a0:4b:10:b4:cb:c3:51:0a:0d:
b8:fa:a0:8c:dc:90:47:88:4d:89:1a:4a:6d:eb:ce:
40:d8:03:4f:d9:2a:08:03:ff:c9:25:68:5b:82:3d:
90:1d:2d:67:6e:7b:e5:60:3d:c5:42:25:4e:83:f8:
8e:1f:0c:eb:a4:10:5d:92:00:5b:e1:c5:e9:97:f2:
e7:4f:ee:1a:44:0a:70:e5:47:c8:59:06:5c:98:12:
76:6f:91:99:86:ba:19:01:49:26:83:d1:c8:a8:5e:
82:8c:76:1e:5d:f8:bf:6a:33:e8:25:21:c5:9a:4b:
ac:ed:2d:f2:c8:80:7e:67:87:38:00:4d:68:4f:31:
66:d8:04:2b:c0:54:fa:1e:be:2f:70:61:c4:9e:e6:
f1:d8:15:27:b4:19:0f:2b:44:7c:ce:d8:cc:ef:b6:
2d:c4:9d:58:03:4b:e1:cc:df:24:0f:f9:95:a0:a2:
3f:70:64:ca:ca:b6:b0:97:6b:ac:19:9f:ad:ff:f0:
ea:66:b6:d1:e3:40:e7:0d:39:10:e7:6c:15:1a:4f:
52:fd:74:ff:45:09:ee:ad:10:12:3d:1b:5c:97:5e:
90:ce:66:66:e0:dd:88:8e:34:57:c2:74:76:ed:ae:
f8:de:6f:d8:dc:f8:85:d9:da:49:e5:f5:3d:31:ec:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:19:F8:55:E8:80:B6:7D:A1:67:46:5E:62:F4:D9:2F:22:98:60:C6
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/JRn4VeiAtn2hZ0ZeYvTZLyKYYMY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.91.0.0/17
Signature Algorithm: sha256WithRSAEncryption
94:11:f7:40:bf:6b:c4:f3:e4:5f:08:9e:90:00:6c:f7:37:0f:
48:b2:be:20:85:99:77:84:45:ca:79:70:83:3a:e8:d0:ae:ec:
7c:db:09:5d:22:8f:5a:b2:d3:0a:2f:2d:e9:23:3d:52:ea:24:
88:b2:2c:f3:7b:47:55:47:5b:af:6c:bc:3a:71:1f:95:be:33:
d4:1b:b7:f4:a8:cb:e7:02:81:c0:a6:e2:a4:3b:ab:b7:b4:03:
32:93:be:d0:c6:96:16:ae:78:70:f8:3e:31:47:2e:12:34:f8:
cf:c1:f6:49:9d:d3:e7:a1:18:5b:b3:fa:fb:b7:e0:b9:45:67:
2a:ea:d0:d2:b0:9c:dc:6e:b2:6c:27:3a:b8:18:1d:e0:da:ba:
da:6b:44:2c:dd:80:a7:64:05:9f:a4:d2:0f:4e:d3:74:f5:06:
41:a5:41:fe:36:b0:22:15:5a:7e:15:6f:06:16:91:ac:0b:ea:
85:bf:de:8d:cf:45:e5:27:82:59:60:d5:c5:ab:fd:98:03:53:
7e:26:2d:ae:0b:0c:a0:71:3a:b0:2b:dc:a9:fd:8f:68:24:50:
35:c2:c0:cf:f3:16:c2:44:0b:54:ef:eb:6b:64:91:7f:99:67:
77:3c:90:c8:50:05:4e:dc:1b:10:75:03:2e:8b:18:d3:a3:44:
b6:a0:b6:0c
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTAyMDcx
MTQwMDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDI1MTlGODU1RTg4MEI2
N0RBMTY3NDY1RTYyRjREOTJGMjI5ODYwQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDttaS9tqBLELTLw1EKDbj6oIzckEeITYkaSm3rzkDYA0/ZKggD
/8klaFuCPZAdLWdue+VgPcVCJU6D+I4fDOukEF2SAFvhxemX8udP7hpECnDlR8hZ
BlyYEnZvkZmGuhkBSSaD0cioXoKMdh5d+L9qM+glIcWaS6ztLfLIgH5nhzgATWhP
MWbYBCvAVPoevi9wYcSe5vHYFSe0GQ8rRHzO2Mzvti3EnVgDS+HM3yQP+ZWgoj9w
ZMrKtrCXa6wZn63/8OpmttHjQOcNORDnbBUaT1L9dP9FCe6tEBI9G1yXXpDOZmbg
3YiONFfCdHbtrvjeb9jc+IXZ2knl9T0x7IUpAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUJRn4VeiAtn2hZ0ZeYvTZLyKYYMYwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvSlJuNFZlaUF0bjJoWjBaZVl2VFpM
eUtZWU1ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9tbADAN
BgkqhkiG9w0BAQsFAAOCAQEAlBH3QL9rxPPkXwiekABs9zcPSLK+IIWZd4RFynlw
gzro0K7sfNsJXSKPWrLTCi8t6SM9UuokiLIs83tHVUdbr2y8OnEflb4z1Bu39KjL
5wKBwKbipDurt7QDMpO+0MaWFq54cPg+MUcuEjT4z8H2SZ3T56EYW7P6+7fguUVn
KurQ0rCc3G6ybCc6uBgd4Nq62mtELN2Ap2QFn6TSD07TdPUGQaVB/jawIhVafhVv
BhaRrAvqhb/ejc9F5SeCWWDVxav9mANTfiYtrgsMoHE6sCvcqf2PaCRQNcLAz/MW
wkQLVO/ra2SRf5lndzyQyFAFTtwbEHUDLosY06NEtqC2DA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org