Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Rs2dOymO2_zsmMYOulEBeX9tLCI.roa
File: Rs2dOymO2_zsmMYOulEBeX9tLCI.roa (raw, json)
Hash identifier: BW9K2XTYCgVx0lTKgWVMhQ8Fy7lccNiZKOtJMMYAOYE=
Subject key identifier: 46:CD:9D:3B:29:8E:DB:FC:EC:98:C6:0E:BA:51:01:79:7F:6D:2C:22
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1050
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Rs2dOymO2_zsmMYOulEBeX9tLCI.roa
Signing time: Tue 16 May 2023 08:36:02 +0000
ROA not before: Tue 16 May 2023 08:36:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.201.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4176 (0x1050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:02 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=46CD9D3B298EDBFCEC98C60EBA5101797F6D2C22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:68:e0:41:40:c5:c1:04:35:66:a1:47:cf:
d0:8c:75:da:aa:b6:ad:9b:ed:fa:12:46:0f:4b:d3:
15:ed:2c:01:93:79:3c:b6:18:05:8f:b6:8a:b3:84:
d6:a5:d6:34:cb:24:64:dd:5e:05:55:6f:56:bf:8e:
a2:8b:22:97:d8:47:cb:e9:20:09:24:41:61:34:4e:
dc:9c:a5:4c:8a:0e:14:f5:06:47:f2:0a:4e:fe:77:
d4:c3:ad:da:a2:d6:1e:75:51:87:8d:b2:25:d6:dc:
27:ab:74:d1:ed:04:77:9f:4e:45:7a:92:f8:5b:08:
a2:58:11:b6:61:35:eb:f1:13:c2:39:4a:d6:03:29:
57:f0:de:51:ef:0a:7a:b6:31:86:a8:88:da:13:1f:
42:ab:0a:13:e0:52:08:97:be:99:b5:c3:22:2b:83:
f9:91:28:f8:34:fa:f0:1e:62:da:92:ab:70:d2:28:
d0:92:5a:ad:28:c9:aa:7b:32:ca:ed:82:86:ff:48:
9a:75:1b:5b:cb:cd:cb:84:3f:7e:a7:1d:6a:80:f2:
91:3d:2c:43:b8:53:16:02:89:41:da:ba:4e:a4:e8:
4d:bb:77:f0:28:d6:8e:12:4c:7a:fc:95:89:15:16:
9b:ef:a8:db:c6:5d:9c:7e:57:12:58:c3:c0:4e:38:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CD:9D:3B:29:8E:DB:FC:EC:98:C6:0E:BA:51:01:79:7F:6D:2C:22
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Rs2dOymO2_zsmMYOulEBeX9tLCI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:6d:e6:cb:44:31:b5:7d:a7:4d:12:f5:20:90:99:40:2e:b6:
ee:18:6e:67:8c:94:76:fe:15:e0:a3:87:09:46:6e:67:7d:ca:
81:ba:59:78:8a:cd:05:11:10:b0:c0:dd:e5:91:6a:11:72:ab:
49:6b:2a:df:c1:cc:fd:97:4c:21:24:1d:51:b8:80:81:56:aa:
18:ee:6e:69:a9:a4:b2:d4:47:31:86:59:53:47:08:1d:5b:a8:
a2:fa:ba:64:10:ca:21:92:06:81:12:23:47:98:d2:5d:2a:4a:
aa:6c:74:c6:a8:51:4f:79:40:df:e2:1d:a9:7e:6a:d8:ef:37:
54:38:5a:5b:8a:0b:c5:01:d3:7d:8b:99:f8:b7:7f:77:35:a3:
2d:c8:30:7d:20:e7:e4:68:80:fc:eb:fc:e7:ce:8f:7c:ab:1c:
a5:00:4e:e1:88:5f:20:71:59:ac:17:4a:1e:a5:87:4d:c4:f5:
e6:34:1f:2e:e3:08:6c:60:ab:06:f6:d9:bd:9c:8b:e9:5f:3b:
f5:ab:56:39:e0:80:7d:04:96:07:e1:d4:64:01:15:4e:a2:c8:
d7:b1:28:a2:1b:56:74:19:88:b4:78:97:1e:5b:f0:8d:2a:dc:
99:cc:a8:59:a8:f8:71:bc:04:72:01:02:56:8d:10:c0:44:61:
d9:a3:e6:11
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICEFAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA1MTYw
ODM2MDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQ2Q0Q5RDNCMjk4RURC
RkNFQzk4QzYwRUJBNTEwMTc5N0Y2RDJDMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxKmjgQUDFwQQ1ZqFHz9CMddqqtq2b7foSRg9L0xXtLAGTeTy2
GAWPtoqzhNal1jTLJGTdXgVVb1a/jqKLIpfYR8vpIAkkQWE0TtycpUyKDhT1Bkfy
Ck7+d9TDrdqi1h51UYeNsiXW3CerdNHtBHefTkV6kvhbCKJYEbZhNevxE8I5StYD
KVfw3lHvCnq2MYaoiNoTH0KrChPgUgiXvpm1wyIrg/mRKPg0+vAeYtqSq3DSKNCS
Wq0oyap7Msrtgob/SJp1G1vLzcuEP36nHWqA8pE9LEO4UxYCiUHauk6k6E27d/Ao
1o4STHr8lYkVFpvvqNvGXZx+VxJYw8BOOHMfAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQURs2dOymO2/zsmMYOulEBeX9tLCIwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvUnMyZE95bU8yX3pzbU1ZT3VsRUJl
WDl0TENJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANLJMA0G
CSqGSIb3DQEBCwUAA4IBAQAYbebLRDG1fadNEvUgkJlALrbuGG5njJR2/hXgo4cJ
Rm5nfcqBull4is0FERCwwN3lkWoRcqtJayrfwcz9l0whJB1RuICBVqoY7m5pqaSy
1EcxhllTRwgdW6ii+rpkEMohkgaBEiNHmNJdKkqqbHTGqFFPeUDf4h2pfmrY7zdU
OFpbigvFAdN9i5n4t393NaMtyDB9IOfkaID86/znzo98qxylAE7hiF8gcVmsF0oe
pYdNxPXmNB8u4whsYKsG9tm9nIvpXzv1q1Y54IB9BJYH4dRkARVOosjXsSiiG1Z0
GYi0eJceW/CNKtyZzKhZqPhxvARyAQJWjRDARGHZo+YR
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org