Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Tcu2cwa_eI8z2HnMa9QzyLV0y8M.roa
File: Tcu2cwa_eI8z2HnMa9QzyLV0y8M.roa (raw, json)
Hash identifier: UTfxnTcYAxu+n+07vnT7qIhP9YQ+J45YDhb6EuxwNE8=
Subject key identifier: 4D:CB:B6:73:06:BF:78:8F:33:D8:79:CC:6B:D4:33:C8:B5:74:CB:C3
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Tcu2cwa_eI8z2HnMa9QzyLV0y8M.roa
Signing time: Thu 15 Sep 2022 02:40:09 +0000
ROA not before: Thu 15 Sep 2022 02:40:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131597
IP address blocks: 218.35.32.0/19 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4DCBB67306BF788F33D879CC6BD433C8B574CBC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:70:b5:92:fa:df:a8:76:6d:55:2b:a5:c0:
a4:dc:08:19:f9:75:b7:c7:9d:18:6c:2f:e2:b4:fb:
7a:4e:d9:58:a0:6b:32:93:dc:ae:56:b6:14:73:82:
f9:12:66:fc:9a:c4:ef:be:f5:e6:f2:76:77:bb:50:
2d:c2:2a:a7:69:ce:7f:20:95:b2:51:2b:fa:45:e9:
7a:7e:17:9e:22:86:be:67:f9:3f:15:e5:08:26:5d:
0e:91:66:d9:c7:77:c6:87:85:9b:e8:ff:80:c1:bf:
7e:22:e5:0c:c3:d0:7d:96:84:76:48:28:d2:fc:44:
19:e3:dc:3c:98:3e:1c:c4:8b:81:e4:61:ee:08:1e:
0f:11:80:91:37:61:7d:33:2d:3f:56:94:f0:5b:95:
76:ab:6e:09:6b:83:1c:0b:ca:89:4f:33:4b:bc:6c:
4f:23:c5:70:7e:16:42:e1:24:20:95:42:d2:0d:bc:
17:38:d0:f0:27:5c:ac:1d:29:c7:06:cb:18:82:62:
bc:42:e1:f0:74:52:b4:c2:9a:61:66:8c:51:46:f1:
b3:ef:57:82:ff:14:be:98:a9:9f:64:10:cd:ab:0f:
cb:43:76:0a:10:92:be:d3:18:b2:ac:9a:38:4a:aa:
72:85:24:89:3f:e1:57:30:30:00:1b:16:8e:7d:ce:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CB:B6:73:06:BF:78:8F:33:D8:79:CC:6B:D4:33:C8:B5:74:CB:C3
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Tcu2cwa_eI8z2HnMa9QzyLV0y8M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.32.0/19
Signature Algorithm: sha256WithRSAEncryption
34:1b:4e:b8:8c:31:b9:1a:fc:c1:fd:8f:d6:b3:04:4f:9c:95:
6a:4d:31:1f:5f:af:e3:22:0a:bb:b3:c6:c4:d7:f3:63:48:04:
a1:2f:1b:99:1d:db:aa:de:41:95:27:0b:5c:9d:a8:ad:8d:99:
ed:fd:f3:66:09:37:3a:09:5f:3e:e5:f1:d3:bd:90:bb:a0:51:
e8:30:10:92:51:cd:bd:7d:f6:06:ee:09:d8:82:44:cf:d3:e0:
95:65:f5:db:aa:c7:75:08:c2:67:65:f4:12:e5:72:ef:96:bb:
7c:aa:8f:77:8d:68:52:bc:24:80:47:db:f4:a9:61:46:ee:a0:
d7:64:e9:a5:1a:8c:49:2f:41:40:63:d3:6b:f8:52:e0:17:93:
e6:62:e6:83:aa:92:b2:1e:d8:29:59:7b:9b:92:d7:4d:80:1f:
ad:8e:14:52:8f:f3:71:bf:ca:25:64:81:74:34:ef:93:1c:57:
9b:fd:eb:e6:88:0d:7a:5c:7f:6e:ae:06:1c:56:9a:3c:3e:b6:
57:ae:04:f3:94:73:64:f1:c8:95:38:41:b3:2b:45:b1:a6:0a:
bc:f4:68:22:1f:dc:65:2b:13:bf:e3:bc:09:23:36:85:55:84:
ef:b0:fd:59:56:ae:56:a7:45:6d:dc:c3:e1:43:df:c5:ff:02:
aa:2a:d2:6d
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMjA5MTUw
MjQwMDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDREQ0JCNjczMDZCRjc4
OEYzM0Q4NzlDQzZCRDQzM0M4QjU3NENCQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCD3C1kvrfqHZtVSulwKTcCBn5dbfHnRhsL+K0+3pO2VigazKT
3K5WthRzgvkSZvyaxO++9ebydne7UC3CKqdpzn8glbJRK/pF6Xp+F54ihr5n+T8V
5QgmXQ6RZtnHd8aHhZvo/4DBv34i5QzD0H2WhHZIKNL8RBnj3DyYPhzEi4HkYe4I
Hg8RgJE3YX0zLT9WlPBblXarbglrgxwLyolPM0u8bE8jxXB+FkLhJCCVQtINvBc4
0PAnXKwdKccGyxiCYrxC4fB0UrTCmmFmjFFG8bPvV4L/FL6YqZ9kEM2rD8tDdgoQ
kr7TGLKsmjhKqnKFJIk/4VcwMAAbFo59zkOzAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUTcu2cwa/eI8z2HnMa9QzyLV0y8MwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvVGN1MmN3YV9lSTh6MkhuTWE5UXp5
TFYweThNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdojIDAN
BgkqhkiG9w0BAQsFAAOCAQEANBtOuIwxuRr8wf2P1rMET5yVak0xH1+v4yIKu7PG
xNfzY0gEoS8bmR3bqt5BlScLXJ2orY2Z7f3zZgk3OglfPuXx072Qu6BR6DAQklHN
vX32Bu4J2IJEz9PglWX126rHdQjCZ2X0EuVy75a7fKqPd41oUrwkgEfb9KlhRu6g
12TppRqMSS9BQGPTa/hS4BeT5mLmg6qSsh7YKVl7m5LXTYAfrY4UUo/zcb/KJWSB
dDTvkxxXm/3r5ogNelx/bq4GHFaaPD62V64E85RzZPHIlThBsytFsaYKvPRoIh/c
ZSsTv+O8CSM2hVWE77D9WVauVqdFbdzD4UPfxf8CqirSbQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org