Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/PZEe5apc-ywkdyD3tTUPS32UzyY.roa
File: PZEe5apc-ywkdyD3tTUPS32UzyY.roa (raw, json)
Hash identifier: koa43V13DDkWk813nWS28VfJIFa/epHs69vF2zKJqR0=
Subject key identifier: 3D:91:1E:E5:AA:5C:FB:2C:24:77:20:F7:B5:35:0F:4B:7D:94:CF:26
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0BBD
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/PZEe5apc-ywkdyD3tTUPS32UzyY.roa
Signing time: Sun 07 Feb 2021 11:33:43 +0000
ROA not before: Sun 07 Feb 2021 11:33:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 203.79.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3005 (0xbbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:33:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3D911EE5AA5CFB2C247720F7B5350F4B7D94CF26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:ea:00:1c:30:f4:75:f3:94:14:3e:21:ca:
5e:a7:94:ff:3c:3a:04:01:9e:f2:ee:08:8f:05:18:
69:f9:72:a5:91:fe:29:e6:b9:81:d5:5f:fa:ef:81:
ae:ef:d6:12:a5:b9:ef:49:fd:46:4d:12:fd:fe:33:
e6:5b:bb:18:99:49:1b:eb:5e:1f:f3:c0:c1:78:dd:
06:19:04:f9:78:f7:87:8b:ed:a7:91:b1:95:ee:46:
e1:dd:ef:f4:5f:1a:78:56:78:a8:af:0e:90:08:9a:
3e:82:c1:07:08:b0:c2:24:b0:e7:90:d0:5a:bc:e9:
83:1c:cc:35:87:75:a5:66:57:50:54:7c:37:32:a3:
43:a2:8d:3c:79:91:b2:1e:22:11:4c:30:f1:24:fe:
0c:52:44:f9:b8:36:fa:a1:00:14:df:4c:12:45:7f:
b1:7b:82:f4:f4:7b:b9:01:91:86:61:a8:1e:5b:d8:
76:f7:68:6e:57:3a:db:ad:47:c9:9c:fc:8c:ac:1e:
e3:12:c7:ad:73:db:96:bd:d6:b6:3b:43:89:8c:e9:
84:4b:12:d6:ff:95:99:f2:d6:d8:d6:06:6c:0b:b1:
58:46:6e:31:c3:2e:c9:4d:f7:ae:d2:dd:f2:98:1e:
c3:40:ac:32:b8:55:8f:3c:b9:4a:cb:9c:62:34:14:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:91:1E:E5:AA:5C:FB:2C:24:77:20:F7:B5:35:0F:4B:7D:94:CF:26
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/PZEe5apc-ywkdyD3tTUPS32UzyY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.220.0/22
Signature Algorithm: sha256WithRSAEncryption
48:ba:37:e1:47:80:d4:9d:93:8e:25:ef:f9:8c:ca:a8:4f:7f:
23:8a:b5:e3:61:c6:e0:82:78:71:93:ba:e5:a1:a4:b3:18:6b:
bf:ab:eb:c0:25:d7:33:1e:a5:e3:6f:11:28:a0:d9:b9:28:65:
19:fc:21:12:17:bf:a4:02:65:bf:ec:3a:c7:8c:75:54:09:91:
d1:e4:81:5f:e8:8e:fa:ae:00:0b:e1:3b:17:27:c1:cb:c4:6f:
31:6d:65:03:85:be:a1:73:86:30:1f:9f:24:50:49:62:f2:88:
71:cf:82:76:38:34:70:6c:db:8d:8f:e3:45:a6:fe:23:79:4a:
c8:c8:e8:71:1f:9d:e0:ba:97:3b:55:98:a7:d3:85:a1:a8:f6:
d1:8e:61:8a:27:92:13:f8:3e:72:ac:d9:51:a9:9a:b9:59:5c:
ae:aa:7a:a6:cb:b5:ce:85:a3:83:6d:f5:64:0f:4e:74:78:15:
7b:bb:d4:af:d0:ec:c0:c1:19:47:4b:4a:01:db:fe:ee:90:31:
04:4d:34:f3:f8:52:e0:23:b6:66:77:b3:60:14:64:33:75:3a:
f1:19:9d:97:0d:63:38:a4:29:60:3e:9e:5c:7b:5b:b0:2b:85:
a9:e2:54:55:53:8f:28:db:1e:7d:d5:0c:0c:52:e4:7a:4d:8b:
2e:f4:fa:be
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICC70wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTAyMDcx
MTMzNDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNEOTExRUU1QUE1Q0ZC
MkMyNDc3MjBGN0I1MzUwRjRCN0Q5NENGMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYq+oAHDD0dfOUFD4hyl6nlP88OgQBnvLuCI8FGGn5cqWR/inm
uYHVX/rvga7v1hKlue9J/UZNEv3+M+ZbuxiZSRvrXh/zwMF43QYZBPl494eL7aeR
sZXuRuHd7/RfGnhWeKivDpAImj6CwQcIsMIksOeQ0Fq86YMczDWHdaVmV1BUfDcy
o0OijTx5kbIeIhFMMPEk/gxSRPm4NvqhABTfTBJFf7F7gvT0e7kBkYZhqB5b2Hb3
aG5XOtutR8mc/IysHuMSx61z25a91rY7Q4mM6YRLEtb/lZny1tjWBmwLsVhGbjHD
LslN967S3fKYHsNArDK4VY88uUrLnGI0FPC3AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUPZEe5apc+ywkdyD3tTUPS32UzyYwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvUFpFZTVhcGMteXdrZHlEM3RUVVBT
MzJVenlZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAstP3DAN
BgkqhkiG9w0BAQsFAAOCAQEASLo34UeA1J2TjiXv+YzKqE9/I4q142HG4IJ4cZO6
5aGksxhrv6vrwCXXMx6l428RKKDZuShlGfwhEhe/pAJlv+w6x4x1VAmR0eSBX+iO
+q4AC+E7FyfBy8RvMW1lA4W+oXOGMB+fJFBJYvKIcc+Cdjg0cGzbjY/jRab+I3lK
yMjocR+d4LqXO1WYp9OFoaj20Y5hiieSE/g+cqzZUamauVlcrqp6psu1zoWjg231
ZA9OdHgVe7vUr9DswMEZR0tKAdv+7pAxBE008/hS4CO2ZnezYBRkM3U68Rmdlw1j
OKQpYD6eXHtbsCuFqeJUVVOPKNsefdUMDFLkek2LLvT6vg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org