Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/S8kWwtZQgc9BpMVZh9zcA7XoYEk.roa
File: S8kWwtZQgc9BpMVZh9zcA7XoYEk.roa (raw, json)
Hash identifier: PfbLLvW5ZtjAZK+OearZJqBcJGpCKmT4tjJ3kkcuccY=
Subject key identifier: 4B:C9:16:C2:D6:50:81:CF:41:A4:C5:59:87:DC:DC:03:B5:E8:60:49
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1028
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/S8kWwtZQgc9BpMVZh9zcA7XoYEk.roa
Signing time: Tue 16 May 2023 08:35:49 +0000
ROA not before: Tue 16 May 2023 08:35:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.200.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4136 (0x1028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:35:49 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4BC916C2D65081CF41A4C55987DCDC03B5E86049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:8f:15:0d:7c:8d:60:00:3f:74:9c:45:da:
b5:78:8a:8f:b1:a9:48:62:bb:d9:40:81:45:2e:45:
60:b7:5f:05:18:0e:53:0b:c0:e8:5b:e7:ca:d5:fc:
c6:04:6b:6f:c0:e6:1d:c8:27:15:80:98:e6:77:cc:
07:55:d7:6a:b7:cf:59:b0:67:0a:a5:b1:c7:a7:82:
22:84:06:ad:06:06:bd:b5:4b:44:f4:42:02:be:6a:
30:c6:f1:fb:e4:f0:86:f7:82:ec:65:f1:ac:38:69:
33:de:ab:e8:ea:58:78:ef:29:f7:0d:a0:a9:7d:93:
d8:88:79:92:be:f2:34:23:90:d5:41:0b:c2:b6:c2:
8b:e6:de:56:03:9f:28:9c:52:3c:47:09:5e:74:82:
9e:0b:0d:c3:e8:b1:1c:ba:c3:cf:c8:03:fb:8c:fb:
ab:6b:02:85:3a:46:c8:6b:7f:04:f5:8c:02:e2:7b:
74:bd:7f:18:67:aa:d9:d3:05:6f:9d:d1:c2:5b:0d:
c6:6b:1c:3a:04:98:84:6b:95:47:bb:14:e9:b4:b9:
e2:b3:74:8a:61:41:30:f1:18:73:53:3f:6a:97:bc:
20:50:63:88:93:8c:3a:25:6f:76:69:e9:15:5e:d7:
5f:dc:9e:95:c8:59:29:49:09:a0:7e:25:e2:28:39:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C9:16:C2:D6:50:81:CF:41:A4:C5:59:87:DC:DC:03:B5:E8:60:49
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/S8kWwtZQgc9BpMVZh9zcA7XoYEk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.83.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5f:44:13:5a:0e:32:19:32:fe:d7:7e:59:70:81:b3:d6:1f:
27:23:4b:72:21:0b:d8:83:86:30:e7:75:86:87:13:0e:7b:57:
d7:13:0e:c3:9e:40:13:dd:b0:b1:29:b4:25:b3:34:22:4e:27:
ab:33:14:fa:c9:a7:60:7f:bd:2e:b7:4a:ce:62:a6:69:9c:8e:
aa:9b:c8:18:fb:11:46:aa:5f:38:97:97:22:f2:ee:23:b0:67:
06:23:93:3b:c2:bd:54:3c:9a:b6:b1:d2:8c:f8:4d:22:d1:5f:
97:f4:24:e3:78:98:22:0b:b7:25:f2:e1:ca:91:2c:33:a7:f7:
ee:f2:6e:fb:10:85:0e:a0:6c:e2:75:f3:29:44:4c:25:e7:13:
51:e6:10:10:7b:b6:f2:11:5b:f2:7a:41:ef:6f:08:97:72:12:
70:66:3a:cd:7f:c7:2e:39:1e:b0:14:b9:0f:16:85:04:0f:4a:
ca:b6:9c:c1:ef:6a:f6:23:5e:8a:20:4b:ca:d1:ef:70:e0:9d:
ea:34:3a:25:e2:80:d5:ab:db:fe:89:98:f6:db:4d:46:ff:ba:
b8:e0:37:b8:2e:22:4e:6c:ff:e5:7f:d0:13:f5:b3:f9:f4:7b:
fc:43:ef:97:7d:ff:64:87:a8:9b:6c:1e:fe:5d:81:50:57:53:
2a:df:f9:e8
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICECgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA1MTYw
ODM1NDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDRCQzkxNkMyRDY1MDgx
Q0Y0MUE0QzU1OTg3RENEQzAzQjVFODYwNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3yI8VDXyNYAA/dJxF2rV4io+xqUhiu9lAgUUuRWC3XwUYDlML
wOhb58rV/MYEa2/A5h3IJxWAmOZ3zAdV12q3z1mwZwqlscengiKEBq0GBr21S0T0
QgK+ajDG8fvk8Ib3guxl8aw4aTPeq+jqWHjvKfcNoKl9k9iIeZK+8jQjkNVBC8K2
wovm3lYDnyicUjxHCV50gp4LDcPosRy6w8/IA/uM+6trAoU6RshrfwT1jALie3S9
fxhnqtnTBW+d0cJbDcZrHDoEmIRrlUe7FOm0ueKzdIphQTDxGHNTP2qXvCBQY4iT
jDolb3Zp6RVe11/cnpXIWSlJCaB+JeIoOb6pAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUS8kWwtZQgc9BpMVZh9zcA7XoYEkwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvUzhrV3d0WlFnYzlCcE1WWmg5emNB
N1hvWUVrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANLIUzAN
BgkqhkiG9w0BAQsFAAOCAQEAg19EE1oOMhky/td+WXCBs9YfJyNLciEL2IOGMOd1
hocTDntX1xMOw55AE92wsSm0JbM0Ik4nqzMU+smnYH+9LrdKzmKmaZyOqpvIGPsR
RqpfOJeXIvLuI7BnBiOTO8K9VDyatrHSjPhNItFfl/Qk43iYIgu3JfLhypEsM6f3
7vJu+xCFDqBs4nXzKURMJecTUeYQEHu28hFb8npB728Il3IScGY6zX/HLjkesBS5
DxaFBA9Kyracwe9q9iNeiiBLytHvcOCd6jQ6JeKA1avb/omY9ttNRv+6uOA3uC4i
Tmz/5X/QE/Wz+fR7/EPvl33/ZIeom2we/l2BUFdTKt/56A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org