Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/JqbskFKJhA7zeCow5cghPAC-Q3g.roa
File: JqbskFKJhA7zeCow5cghPAC-Q3g.roa (raw, json)
Hash identifier: lkLia1XvmgIk20oe1o2bnRFZaHD2ZeGXrWxrdVPTd9U=
Subject key identifier: 26:A6:EC:90:52:89:84:0E:F3:78:2A:30:E5:C8:21:3C:00:BE:43:78
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1258
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/JqbskFKJhA7zeCow5cghPAC-Q3g.roa
Signing time: Fri 01 Sep 2023 08:04:21 +0000
ROA not before: Fri 01 Sep 2023 08:04:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 222.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4696 (0x1258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=26A6EC905289840EF3782A30E5C8213C00BE4378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:f7:8b:3c:f8:90:f0:79:85:fc:b2:fe:fd:
78:83:13:e8:9b:cc:40:64:8c:6d:2d:c9:4b:6d:89:
66:b2:e9:d2:c8:c9:56:30:67:03:b7:4b:7f:18:f3:
fe:90:f4:0e:b7:79:8a:cc:6a:00:4f:8c:c5:81:45:
61:19:b1:eb:66:ec:0e:f1:54:52:88:d8:47:cb:ec:
0d:de:b4:d0:2d:ac:4f:11:b6:f7:9c:43:f5:c9:7b:
7b:a2:1d:26:05:dd:aa:4c:36:c3:f7:ac:3b:62:2e:
68:f4:0c:86:40:79:8a:6e:20:7e:e2:43:5a:b8:55:
72:4e:17:4b:9b:5e:8c:02:a8:0e:00:5f:c5:3e:be:
a7:de:18:5e:e3:65:3c:67:7a:dc:84:fd:71:7d:03:
d8:ac:36:37:a5:97:c7:c6:b9:dc:e5:5a:01:d1:6f:
52:70:3d:57:da:02:6b:aa:5f:81:a5:ea:30:9f:7a:
e0:dd:44:8d:ca:f6:32:d1:61:ef:72:9d:0d:88:a4:
1e:ec:fd:80:7d:f9:02:f1:40:40:cb:c5:e0:9a:ce:
87:3c:fe:0d:32:12:41:d8:2a:96:8b:20:cd:f5:3a:
c0:13:f1:fc:e5:c0:b3:d2:62:fc:4f:7d:cd:fc:84:
fa:87:97:f2:86:a4:a6:1f:0c:23:46:09:65:be:02:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A6:EC:90:52:89:84:0E:F3:78:2A:30:E5:C8:21:3C:00:BE:43:78
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/JqbskFKJhA7zeCow5cghPAC-Q3g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.156.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:0d:af:4f:a8:5d:88:9e:40:75:4a:e9:0c:9e:2d:57:e4:83:
35:d8:b0:be:4d:53:31:eb:80:49:ee:a6:0e:8c:14:f4:7d:21:
e1:30:3d:8b:7a:9d:4b:6d:02:54:b8:b3:b5:b4:32:be:71:42:
86:ef:bb:93:aa:0d:f0:18:19:a2:37:3a:b8:bc:24:6e:26:af:
d4:d1:69:6d:b7:ad:56:f2:23:e9:62:0d:2c:b8:58:98:9c:68:
09:9c:3a:0f:1e:06:f1:49:ed:65:eb:10:c6:9f:17:46:89:ee:
a3:21:db:87:13:26:8a:a5:ec:2f:85:fe:be:c7:85:91:f2:c0:
6d:fc:2c:be:e6:af:f4:fe:09:31:90:84:bd:33:49:6a:b6:78:
2a:43:06:85:a4:35:a5:ce:51:20:14:4b:e3:47:bc:d5:80:2b:
50:b7:51:3e:bd:1b:eb:28:0a:be:b7:7b:f8:b9:c3:79:2f:2d:
4f:3f:e2:73:0c:9d:f9:d9:30:88:ae:1a:4b:a2:26:e5:e9:76:
d7:87:2f:c0:a9:8f:90:65:8a:e4:de:a0:fb:e1:2c:46:25:7b:
c7:2c:83:96:98:c3:45:0b:6b:47:d3:f0:66:93:64:8f:1a:91:
45:94:02:00:ec:38:bd:7f:d3:a7:13:82:59:9d:39:2b:8b:62:
3d:fa:0d:74
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICElgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA0MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI2QTZFQzkwNTI4OTg0
MEVGMzc4MkEzMEU1QzgyMTNDMDBCRTQzNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDW4/eLPPiQ8HmF/LL+/XiDE+ibzEBkjG0tyUttiWay6dLIyVYw
ZwO3S38Y8/6Q9A63eYrMagBPjMWBRWEZsetm7A7xVFKI2EfL7A3etNAtrE8Rtvec
Q/XJe3uiHSYF3apMNsP3rDtiLmj0DIZAeYpuIH7iQ1q4VXJOF0ubXowCqA4AX8U+
vqfeGF7jZTxnetyE/XF9A9isNjell8fGudzlWgHRb1JwPVfaAmuqX4Gl6jCfeuDd
RI3K9jLRYe9ynQ2IpB7s/YB9+QLxQEDLxeCazoc8/g0yEkHYKpaLIM31OsAT8fzl
wLPSYvxPfc38hPqHl/KGpKYfDCNGCWW+An5bAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUJqbskFKJhA7zeCow5cghPAC+Q3gwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvSnFic2tGS0poQTd6ZUNvdzVjZ2hQ
QUMtUTNnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAN6cMA0G
CSqGSIb3DQEBCwUAA4IBAQB0Da9PqF2InkB1SukMni1X5IM12LC+TVMx64BJ7qYO
jBT0fSHhMD2Lep1LbQJUuLO1tDK+cUKG77uTqg3wGBmiNzq4vCRuJq/U0Wltt61W
8iPpYg0suFiYnGgJnDoPHgbxSe1l6xDGnxdGie6jIduHEyaKpewvhf6+x4WR8sBt
/Cy+5q/0/gkxkIS9M0lqtngqQwaFpDWlzlEgFEvjR7zVgCtQt1E+vRvrKAq+t3v4
ucN5Ly1PP+JzDJ352TCIrhpLoibl6XbXhy/AqY+QZYrk3qD74SxGJXvHLIOWmMNF
C2tH0/Bmk2SPGpFFlAIA7Di9f9OnE4JZnTkri2I9+g10
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org