Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/K5AfE_zW8Ob39hZlm8tjTj_jRzo.roa
File: K5AfE_zW8Ob39hZlm8tjTj_jRzo.roa (raw, json)
Hash identifier: i9tBHs+kO1HDtKlTU5JbBARvXTBMsrbBPAScVGukBPg=
Subject key identifier: 2B:90:1F:13:FC:D6:F0:E6:F7:F6:16:65:9B:CB:63:4E:3F:E3:47:3A
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 124C
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/K5AfE_zW8Ob39hZlm8tjTj_jRzo.roa
Signing time: Fri 01 Sep 2023 08:04:18 +0000
ROA not before: Fri 01 Sep 2023 08:04:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 218.187.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4684 (0x124c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2B901F13FCD6F0E6F7F616659BCB634E3FE3473A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:1b:e8:8b:e6:c9:32:7c:0e:a6:da:6e:c8:
d8:ab:00:cb:59:3c:ee:a3:fc:61:de:4e:15:b4:51:
2b:d1:89:c4:c5:55:53:55:50:0f:57:30:34:d9:43:
8d:94:95:d0:c8:01:be:c5:f5:b5:9b:2c:c0:97:d7:
70:a7:79:50:47:65:b8:09:79:a0:fa:fb:81:f9:79:
ba:6a:3b:31:ac:2f:ce:58:1a:db:a0:d3:4d:9b:f2:
d4:ba:d2:90:ce:d3:e1:d3:1b:63:4d:68:b6:19:b7:
5c:07:45:f5:26:7b:70:d8:3e:f8:c2:23:7d:5f:ec:
79:87:d7:b9:02:30:0c:39:18:10:2e:d4:8e:a7:fc:
61:75:8d:b6:e4:8d:cc:4c:94:fc:57:e7:6d:89:9c:
0f:0f:90:67:73:73:a7:93:c7:e5:8c:c7:f6:28:51:
89:6b:c8:b7:96:be:15:6b:5c:dd:b9:3e:66:e0:d7:
18:a6:39:d7:c4:23:3e:3e:d1:bb:3b:e8:28:3c:73:
e1:8d:70:3b:7c:be:cb:d6:e7:ab:f1:67:93:a5:4a:
30:b3:32:d1:32:14:97:6d:40:9f:a6:3c:bb:99:a1:
2f:e5:2e:87:13:cd:a3:02:38:91:7c:ae:9c:c8:94:
09:66:58:7c:27:41:c0:9b:c4:9b:5e:34:20:7e:ba:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:90:1F:13:FC:D6:F0:E6:F7:F6:16:65:9B:CB:63:4E:3F:E3:47:3A
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/K5AfE_zW8Ob39hZlm8tjTj_jRzo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.187.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:f2:37:52:93:bc:20:a3:d6:19:73:df:37:df:28:b2:47:d1:
b0:3e:a6:ac:13:f4:fc:75:b9:c5:f7:67:8f:ec:8a:76:6a:89:
f4:72:48:f5:d9:92:60:53:70:0b:4c:5d:0a:1e:56:9c:cf:91:
eb:75:c6:81:ba:da:7f:c4:e0:08:8e:71:ba:09:33:91:d7:38:
66:7f:ab:28:36:d0:74:51:c6:72:a9:ab:33:b6:98:52:42:cf:
36:bb:f8:41:04:ab:f7:d2:a1:c5:c7:44:ba:24:a1:17:13:e4:
ed:8f:2c:38:9d:0b:51:31:9f:50:4a:05:bb:9f:b9:3b:fa:a6:
2f:1f:b4:cd:00:01:38:5a:c1:4a:70:80:78:0e:b6:bc:7c:39:
fb:42:ac:b6:83:7e:cd:dd:5f:04:e2:80:4e:a9:f0:9b:02:cb:
3f:a7:ae:85:06:2c:a0:1a:46:50:c3:37:7d:51:a9:38:de:51:
7d:1e:8b:55:3f:d5:22:85:6b:7e:0a:eb:32:c4:a9:7c:9e:fb:
a9:1a:13:3a:b6:1c:0d:94:2f:db:9e:63:b2:be:fb:44:bc:95:
a0:42:81:96:7e:a5:cf:fb:62:71:eb:26:57:41:8c:57:c4:1a:
13:df:63:d2:70:05:2c:a2:9c:3d:41:4f:56:51:d7:f7:30:41:
62:20:a6:90
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICEkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA0MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJCOTAxRjEzRkNENkYw
RTZGN0Y2MTY2NTlCQ0I2MzRFM0ZFMzQ3M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpeBvoi+bJMnwOptpuyNirAMtZPO6j/GHeThW0USvRicTFVVNV
UA9XMDTZQ42UldDIAb7F9bWbLMCX13CneVBHZbgJeaD6+4H5ebpqOzGsL85YGtug
002b8tS60pDO0+HTG2NNaLYZt1wHRfUme3DYPvjCI31f7HmH17kCMAw5GBAu1I6n
/GF1jbbkjcxMlPxX522JnA8PkGdzc6eTx+WMx/YoUYlryLeWvhVrXN25Pmbg1xim
OdfEIz4+0bs76Cg8c+GNcDt8vsvW56vxZ5OlSjCzMtEyFJdtQJ+mPLuZoS/lLocT
zaMCOJF8rpzIlAlmWHwnQcCbxJteNCB+uskdAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUK5AfE/zW8Ob39hZlm8tjTj/jRzowHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvSzVBZkVfelc4T2IzOWhabG04dGpU
al9qUnpvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANq7MA0G
CSqGSIb3DQEBCwUAA4IBAQBd8jdSk7wgo9YZc9833yiyR9GwPqasE/T8dbnF92eP
7Ip2aon0ckj12ZJgU3ALTF0KHlacz5HrdcaButp/xOAIjnG6CTOR1zhmf6soNtB0
UcZyqasztphSQs82u/hBBKv30qHFx0S6JKEXE+Ttjyw4nQtRMZ9QSgW7n7k7+qYv
H7TNAAE4WsFKcIB4Dra8fDn7Qqy2g37N3V8E4oBOqfCbAss/p66FBiygGkZQwzd9
Uak43lF9HotVP9UihWt+CusyxKl8nvupGhM6thwNlC/bnmOyvvtEvJWgQoGWfqXP
+2Jx6yZXQYxXxBoT32PScAUsopw9QU9WUdf3MEFiIKaQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org