Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/T5RmycK57aDqjROQU1kmVZrLsf8.roa
File: T5RmycK57aDqjROQU1kmVZrLsf8.roa (raw, json)
Hash identifier: 13ua562p0E9Ni7+ftwx9iagyA11BZGMJFEKEU/Vj5R0=
Subject key identifier: 4F:94:66:C9:C2:B9:ED:A0:EA:8D:13:90:53:59:26:55:9A:CB:B1:FF
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1056
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/T5RmycK57aDqjROQU1kmVZrLsf8.roa
Signing time: Tue 16 May 2023 08:36:04 +0000
ROA not before: Tue 16 May 2023 08:36:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.202.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4182 (0x1056)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:04 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4F9466C9C2B9EDA0EA8D1390535926559ACBB1FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:4f:5d:36:6b:fe:c3:61:14:26:5a:cd:34:
3d:07:44:ae:04:94:38:aa:a3:eb:68:1f:f1:d2:97:
38:44:a7:14:92:51:14:99:a4:d4:85:62:e1:18:87:
98:b4:ea:de:92:86:9a:98:0b:be:6b:6f:87:95:58:
1e:c0:24:0d:4d:3e:d4:1a:f7:8b:aa:2f:b9:2a:27:
28:2d:80:8f:e4:6e:ce:25:10:79:57:6e:71:f6:8d:
89:b5:fe:3b:c8:2d:0f:e6:d8:74:6e:fa:5d:82:74:
3b:3b:6b:c6:a9:2a:b6:41:17:67:ce:00:01:09:ae:
a8:a7:09:a7:f1:f8:b4:bf:a8:7f:5a:bc:c8:84:f4:
db:93:95:78:35:66:8f:85:bb:fa:ec:77:e2:16:fa:
41:bb:8c:f9:43:6b:93:00:bd:ca:3f:e2:7a:72:ac:
83:e0:ff:48:37:f5:5d:92:1a:34:35:2f:9b:26:db:
11:40:6a:1f:55:28:aa:6d:42:04:88:ea:6d:9d:cf:
6a:bb:c0:02:18:c1:dd:87:98:ac:82:36:90:3a:24:
a6:cb:2f:c3:e2:82:6f:7f:10:59:b0:1a:f5:3b:36:
d6:1d:04:24:cc:7d:30:12:30:7b:70:aa:a0:da:1d:
e3:81:06:77:55:37:a9:b7:68:f5:e1:57:b6:af:ed:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:94:66:C9:C2:B9:ED:A0:EA:8D:13:90:53:59:26:55:9A:CB:B1:FF
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/T5RmycK57aDqjROQU1kmVZrLsf8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.64.0/18
Signature Algorithm: sha256WithRSAEncryption
52:d7:74:5f:1a:b0:b9:47:9f:35:1f:f1:9d:a6:01:45:8c:ab:
b6:60:80:cd:94:7d:0b:35:63:1d:7e:8e:73:70:13:d7:96:28:
53:61:3f:c8:99:9a:c3:1b:b8:39:c0:7a:f9:c1:5c:55:43:20:
9c:ba:e1:0a:62:cc:8d:11:8b:8d:e7:86:3e:0a:f7:30:94:08:
ee:8d:4e:5a:71:a1:37:18:39:38:d8:bf:f5:94:cd:fb:20:91:
d0:35:bc:9f:04:94:e6:ce:f3:6c:71:47:78:7d:85:a3:80:30:
fb:c8:73:a7:7b:e0:f8:5e:3f:f0:76:f0:71:4b:72:2c:f1:64:
5a:7d:43:30:0d:45:60:2f:8e:18:3f:0c:e0:f1:7d:ad:e0:8e:
f2:fd:bb:2d:c2:e4:fc:57:12:8c:20:8a:fc:a3:1c:17:74:97:
ef:1c:e2:58:fe:43:80:d9:50:b6:a7:01:f3:4d:2c:01:2f:5e:
93:30:6e:f8:4d:93:74:f2:eb:07:0c:b0:30:b9:52:e2:8c:08:
61:6d:3e:d7:2e:8a:0c:05:67:03:2c:90:fe:8e:4d:73:44:96:
c4:de:94:10:c7:f3:f2:d5:95:78:85:3f:02:44:4f:33:0b:ac:
08:a2:d7:2f:17:a3:b1:df:77:47:7d:47:45:19:b2:70:ac:e4:
92:2c:af:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:53:19 2025 by rpki-client