Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/OKv8F_xoSmrcKqFxIEsrSftfyLI.roa
File: OKv8F_xoSmrcKqFxIEsrSftfyLI.roa (raw, json)
Hash identifier: DhB8qWeZReAuL2gvAJWqahmvn82qSjubGCpN60CAYPY=
Subject key identifier: 38:AB:FC:17:FC:68:4A:6A:DC:2A:A1:71:20:4B:2B:49:FB:5F:C8:B2
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E65
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/OKv8F_xoSmrcKqFxIEsrSftfyLI.roa
Signing time: Thu 30 Sep 2021 01:59:17 +0000
ROA not before: Thu 30 Sep 2021 01:59:17 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38843
IP address blocks: 210.58.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3685 (0xe65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 30 01:59:17 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=38ABFC17FC684A6ADC2AA171204B2B49FB5FC8B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:49:c3:fa:47:34:e9:6c:40:0b:be:62:85:
5f:a6:52:87:4e:7b:3b:17:9d:72:17:d7:92:13:91:
b0:76:ce:f5:77:83:32:9b:78:5d:53:b6:4d:b1:98:
39:83:27:61:0a:29:1c:d0:b2:c8:9f:d5:d4:82:15:
09:2f:bd:90:15:c6:27:ed:76:84:1b:74:b6:e8:a9:
a1:e7:eb:67:c3:95:b3:f8:7d:51:1b:0a:52:43:bb:
d0:08:75:eb:36:2c:a8:5c:65:71:38:5b:bf:f3:d1:
ff:73:18:4d:42:b8:da:8a:b2:43:1d:51:87:23:60:
2c:92:b8:b4:da:c4:56:f9:b2:de:2b:95:7c:8b:97:
75:24:23:34:3e:fc:6f:d1:12:fd:7d:0d:df:78:c4:
1e:a2:3f:f5:34:ae:ff:2f:c9:64:b4:a7:3a:91:a6:
35:c9:04:ce:b0:a4:c8:bd:da:2d:52:1c:22:bb:7e:
8a:87:9b:d7:1f:5b:6b:e2:22:3b:93:52:49:10:9b:
dc:33:65:d2:52:7c:e9:e5:a9:17:ea:a7:a0:f3:f6:
a1:84:69:e6:60:18:0e:f8:e0:e0:71:07:f5:0b:68:
18:84:cc:17:2b:3b:e0:1a:5a:43:b4:ed:a1:57:2b:
84:55:a1:b0:38:2f:f5:d1:0d:d6:f1:77:82:af:25:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AB:FC:17:FC:68:4A:6A:DC:2A:A1:71:20:4B:2B:49:FB:5F:C8:B2
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/OKv8F_xoSmrcKqFxIEsrSftfyLI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.92.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f7:90:37:67:77:7b:8b:be:85:9f:f5:9f:34:a4:0b:c6:30:
12:16:c6:fe:b5:3b:0b:3f:fd:1d:9f:69:9f:e7:fd:4e:ca:d7:
ce:1b:99:d7:aa:4f:7e:73:20:c6:95:7c:48:d8:c0:95:7f:e0:
bf:01:9c:39:8b:d9:95:66:97:0d:b8:0a:dc:fb:b3:b1:b5:46:
c3:68:2b:31:bc:ab:30:42:55:a4:7d:7f:bc:ce:51:2d:76:24:
ea:fa:4d:3e:78:f1:c0:40:67:e2:77:a9:0f:ac:c5:bd:02:82:
c0:0d:9f:bd:94:10:26:2a:d3:2f:53:16:c1:06:39:ba:80:02:
86:75:de:21:c4:1b:42:87:d2:11:4a:52:7c:78:40:29:11:ea:
a0:11:f3:2e:87:92:6e:e9:d8:20:21:1f:d5:7e:d7:a6:07:a7:
46:a2:64:c5:0d:5f:25:1f:23:35:21:b3:d2:a6:4b:68:c1:04:
f2:b3:e3:5a:d5:12:da:a4:13:19:3e:17:1b:80:f4:e2:ee:c7:
56:0d:4d:55:c0:07:ac:8b:fc:f6:6d:f0:b1:61:58:46:bc:2c:
8b:a8:8a:42:70:e3:34:70:1f:b9:12:c1:d6:04:1b:4e:c4:b6:
69:2c:b3:fd:f1:2a:4a:ac:6f:7c:05:32:bb:a2:b2:21:d6:4b:
a5:87:e9:1c
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTA5MzAw
MTU5MTdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDM4QUJGQzE3RkM2ODRB
NkFEQzJBQTE3MTIwNEIyQjQ5RkI1RkM4QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGIEnD+kc06WxAC75ihV+mUodOezsXnXIX15ITkbB2zvV3gzKb
eF1Ttk2xmDmDJ2EKKRzQssif1dSCFQkvvZAVxiftdoQbdLboqaHn62fDlbP4fVEb
ClJDu9AIdes2LKhcZXE4W7/z0f9zGE1CuNqKskMdUYcjYCySuLTaxFb5st4rlXyL
l3UkIzQ+/G/REv19Dd94xB6iP/U0rv8vyWS0pzqRpjXJBM6wpMi92i1SHCK7foqH
m9cfW2viIjuTUkkQm9wzZdJSfOnlqRfqp6Dz9qGEaeZgGA744OBxB/ULaBiEzBcr
O+AaWkO07aFXK4RVobA4L/XRDdbxd4KvJRxjAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUOKv8F/xoSmrcKqFxIEsrSftfyLIwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvT0t2OEZfeG9TbXJjS3FGeElFc3JT
ZnRmeUxJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI6XDAN
BgkqhkiG9w0BAQsFAAOCAQEAYPeQN2d3e4u+hZ/1nzSkC8YwEhbG/rU7Cz/9HZ9p
n+f9TsrXzhuZ16pPfnMgxpV8SNjAlX/gvwGcOYvZlWaXDbgK3PuzsbVGw2grMbyr
MEJVpH1/vM5RLXYk6vpNPnjxwEBn4nepD6zFvQKCwA2fvZQQJirTL1MWwQY5uoAC
hnXeIcQbQofSEUpSfHhAKRHqoBHzLoeSbunYICEf1X7XpgenRqJkxQ1fJR8jNSGz
0qZLaMEE8rPjWtUS2qQTGT4XG4D04u7HVg1NVcAHrIv89m3wsWFYRrwsi6iKQnDj
NHAfuRLB1gQbTsS2aSyz/fEqSqxvfAUyu6KyIdZLpYfpHA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org