Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/QTqE6y4cH0nTDlIFXLMlVzYPoWo.roa
File: QTqE6y4cH0nTDlIFXLMlVzYPoWo.roa (raw, json)
Hash identifier: VovNBsvqTfxdwdPu+PAqVXtvxORg7XDN6mYOz9KFdgU=
Subject key identifier: 41:3A:84:EB:2E:1C:1F:49:D3:0E:52:05:5C:B3:25:57:36:0F:A1:6A
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1035
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/QTqE6y4cH0nTDlIFXLMlVzYPoWo.roa
Signing time: Tue 16 May 2023 08:35:53 +0000
ROA not before: Tue 16 May 2023 08:35:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 219.91.68.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4149 (0x1035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:35:53 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=413A84EB2E1C1F49D30E52055CB32557360FA16A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:73:2d:0e:2d:29:76:3d:d3:80:c2:27:9a:
22:6b:1c:90:b3:7f:93:0f:bc:4d:e4:7d:34:46:1d:
0b:bd:f8:fb:02:eb:df:74:35:b5:00:56:ae:e7:41:
57:42:79:71:4e:97:5a:08:d8:65:c4:19:91:0d:44:
44:d8:49:74:0c:2d:d9:0b:d5:e4:39:bc:76:63:10:
9a:c5:20:8c:2a:aa:e7:44:7a:e8:8c:4f:bc:e6:9a:
e4:d9:8b:d9:78:28:34:6e:be:33:a6:9f:83:c9:7a:
4e:54:3d:5b:4b:13:8d:8d:8f:c5:0c:97:d8:eb:82:
91:9f:ea:28:77:85:72:74:a3:c9:1a:66:ec:5d:54:
2f:f5:09:95:32:4e:f5:b4:40:d3:86:db:d0:6d:bd:
96:7f:73:aa:cd:12:bc:05:a5:43:bb:9b:e4:db:47:
64:51:6f:b5:e9:c2:7a:0e:fd:2f:8f:9a:9d:66:7d:
32:c8:e1:26:48:e7:e5:b2:d6:2c:a1:0f:6f:ca:e6:
3f:23:65:cf:e7:12:68:72:aa:67:cc:d7:88:23:84:
39:59:af:6d:cd:67:b0:f2:64:e8:f0:fe:6f:4b:cd:
fd:1f:91:be:bd:3f:dd:d4:7e:5e:39:43:f8:b4:f8:
e2:aa:c9:ce:db:bb:5b:83:fc:f9:17:24:cd:d5:be:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3A:84:EB:2E:1C:1F:49:D3:0E:52:05:5C:B3:25:57:36:0F:A1:6A
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/QTqE6y4cH0nTDlIFXLMlVzYPoWo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.91.68.0/23
Signature Algorithm: sha256WithRSAEncryption
37:5b:1c:46:18:c3:63:04:25:cf:ed:49:5a:0c:fa:6a:ab:80:
05:25:83:9f:0d:31:b7:b0:bd:56:e8:7c:2f:bf:b5:e7:11:13:
06:a5:4e:c3:59:ef:8f:5a:ce:b6:34:2c:df:1b:d4:74:40:99:
16:b6:7e:69:08:a5:2c:e4:bd:14:b6:98:cd:68:b8:24:76:d3:
de:c5:3e:4a:45:80:94:1d:0c:bd:ca:19:6d:ed:bc:b4:12:fb:
82:09:38:f3:15:88:68:cf:a8:0b:36:6e:a4:b3:b8:b0:0a:b0:
e1:50:94:86:c8:16:21:94:58:39:ef:47:fe:2f:2f:af:8b:20:
3e:bc:ee:89:c8:ac:f5:74:18:b5:ec:0a:8e:15:d7:b9:90:c7:
2e:08:5c:39:7d:9d:fa:e4:ab:ad:df:00:53:72:de:97:7b:be:
e4:81:77:f0:23:06:77:d2:7b:41:21:32:4d:94:e4:b8:18:67:
d6:41:67:88:b9:e6:a9:80:34:ea:a9:bb:a4:74:8a:12:2e:95:
00:39:8f:4d:d2:56:ca:ee:ef:91:e4:3b:4f:58:6d:1e:26:0a:
56:a9:96:0b:e9:77:9f:da:85:c7:1b:0e:fd:bb:74:12:03:5f:
5a:db:50:43:52:b1:f9:be:af:e0:56:6a:2b:db:e6:a3:97:0b:
61:68:48:f1
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEDUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA1MTYw
ODM1NTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQxM0E4NEVCMkUxQzFG
NDlEMzBFNTIwNTVDQjMyNTU3MzYwRkExNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1FnMtDi0pdj3TgMInmiJrHJCzf5MPvE3kfTRGHQu9+PsC6990
NbUAVq7nQVdCeXFOl1oI2GXEGZENRETYSXQMLdkL1eQ5vHZjEJrFIIwqqudEeuiM
T7zmmuTZi9l4KDRuvjOmn4PJek5UPVtLE42Nj8UMl9jrgpGf6ih3hXJ0o8kaZuxd
VC/1CZUyTvW0QNOG29BtvZZ/c6rNErwFpUO7m+TbR2RRb7XpwnoO/S+Pmp1mfTLI
4SZI5+Wy1iyhD2/K5j8jZc/nEmhyqmfM14gjhDlZr23NZ7DyZOjw/m9Lzf0fkb69
P93Ufl45Q/i0+OKqyc7bu1uD/PkXJM3VvoDTAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUQTqE6y4cH0nTDlIFXLMlVzYPoWowHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvUVRxRTZ5NGNIMG5URGxJRlhMTWxW
ellQb1dvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdtbRDAN
BgkqhkiG9w0BAQsFAAOCAQEAN1scRhjDYwQlz+1JWgz6aquABSWDnw0xt7C9Vuh8
L7+15xETBqVOw1nvj1rOtjQs3xvUdECZFrZ+aQilLOS9FLaYzWi4JHbT3sU+SkWA
lB0MvcoZbe28tBL7ggk48xWIaM+oCzZupLO4sAqw4VCUhsgWIZRYOe9H/i8vr4sg
Przuicis9XQYtewKjhXXuZDHLghcOX2d+uSrrd8AU3Lel3u+5IF38CMGd9J7QSEy
TZTkuBhn1kFniLnmqYA06qm7pHSKEi6VADmPTdJWyu7vkeQ7T1htHiYKVqmWC+l3
n9qFxxsO/bt0EgNfWttQQ1Kx+b6v4FZqK9vmo5cLYWhI8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org