Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/WoqMSZYPr4vRH6yF6J4AuFOc4e4.roa
File: WoqMSZYPr4vRH6yF6J4AuFOc4e4.roa (raw, json)
Hash identifier: 52/u87NS/Yy9mc3ZOO1cUAX9GXQWER0Gu3Hy9U/OsoU=
Subject key identifier: 5A:8A:8C:49:96:0F:AF:8B:D1:1F:AC:85:E8:9E:00:B8:53:9C:E1:EE
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C51
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/WoqMSZYPr4vRH6yF6J4AuFOc4e4.roa
Signing time: Sun 07 Feb 2021 11:35:41 +0000
ROA not before: Sun 07 Feb 2021 11:35:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24154
IP address blocks: 222.156.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3153 (0xc51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:35:41 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5A8A8C49960FAF8BD11FAC85E89E00B8539CE1EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:12:33:b7:5a:63:08:1e:70:55:15:8d:fc:
72:fb:2b:c5:c4:67:3f:b5:25:dd:35:f6:25:c1:31:
32:a7:4f:8b:c1:43:e0:76:b8:64:95:39:d0:63:6c:
a9:cc:c6:17:74:5d:bc:23:09:41:7c:2e:e8:04:04:
14:24:82:fe:02:47:41:7e:c9:6a:96:a6:a1:04:da:
24:45:aa:e5:26:ad:c9:ca:f7:9c:72:1a:f1:3d:42:
fb:24:46:a1:9d:98:18:3d:3e:d1:00:46:ad:91:a7:
d7:6c:5d:56:ed:06:71:3c:82:87:f8:3a:f8:27:2f:
e2:26:74:2f:3a:c1:35:a0:e8:1b:47:aa:c3:c0:9e:
be:c4:d4:ca:7e:fa:f4:10:e2:aa:b5:1c:79:b2:22:
e5:0e:ac:cb:7a:83:5c:d3:bc:88:96:84:3e:f4:c9:
06:70:db:09:fb:e8:04:c4:84:29:49:a5:8b:e5:ce:
39:2b:ca:8d:d5:80:cf:84:a1:db:0c:ca:d4:cd:eb:
25:34:c2:5b:e4:33:56:80:af:96:9c:0f:03:60:7c:
89:c2:36:08:9c:87:d5:f1:9c:6a:8d:b6:19:1b:e1:
52:20:92:79:26:67:60:71:79:f3:43:82:17:52:1c:
65:8d:a6:b4:f4:5e:d4:53:44:37:1b:e9:7f:a3:89:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8A:8C:49:96:0F:AF:8B:D1:1F:AC:85:E8:9E:00:B8:53:9C:E1:EE
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/WoqMSZYPr4vRH6yF6J4AuFOc4e4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.156.246.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ed:c5:98:d2:f8:a3:0c:87:be:85:10:c9:7a:e1:4b:39:0e:
b2:30:4d:0c:1b:71:41:3d:6e:91:12:27:2a:8c:8d:0f:7d:48:
01:2c:b7:3e:80:14:6c:df:33:bf:23:f1:04:85:02:8b:1c:d5:
1f:ca:7f:f4:1f:47:84:64:f7:40:58:c1:85:5d:31:b0:54:38:
a5:32:9a:cc:86:6e:c9:df:26:72:b2:5e:96:1f:75:5d:05:13:
81:d3:bb:8a:31:2a:68:3d:ef:99:38:ea:76:3b:ba:7e:89:3f:
63:01:fb:d4:91:d1:6f:98:97:27:22:be:bc:25:ce:b3:e7:ad:
28:b7:e5:8f:f1:d4:6f:3f:bc:98:7c:9d:e4:33:95:2e:ab:cd:
1a:25:4b:4e:ea:08:c9:7f:28:ca:c5:8d:04:1e:73:c5:32:0c:
10:6b:18:75:ba:21:64:95:08:f9:ee:4f:57:a4:d6:52:b8:39:
ff:30:44:9b:a4:62:96:4d:8e:b4:8e:1c:06:a2:58:60:36:b0:
c6:61:9f:e7:fe:f2:f8:d1:cf:8f:14:44:6c:ac:0d:ff:4e:7a:
1e:08:d4:df:21:50:3d:35:fb:e5:b2:f3:a2:f2:0e:ca:f5:72:
20:11:54:71:d7:b5:78:eb:b8:ac:0a:d8:9d:2a:3c:e5:90:f7:
b6:cb:12:68
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDFEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTAyMDcx
MTM1NDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVBOEE4QzQ5OTYwRkFG
OEJEMTFGQUM4NUU4OUUwMEI4NTM5Q0UxRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClhxIzt1pjCB5wVRWN/HL7K8XEZz+1Jd019iXBMTKnT4vBQ+B2
uGSVOdBjbKnMxhd0XbwjCUF8LugEBBQkgv4CR0F+yWqWpqEE2iRFquUmrcnK95xy
GvE9QvskRqGdmBg9PtEARq2Rp9dsXVbtBnE8gof4OvgnL+ImdC86wTWg6BtHqsPA
nr7E1Mp++vQQ4qq1HHmyIuUOrMt6g1zTvIiWhD70yQZw2wn76ATEhClJpYvlzjkr
yo3VgM+EodsMytTN6yU0wlvkM1aAr5acDwNgfInCNgich9XxnGqNthkb4VIgknkm
Z2BxefNDghdSHGWNprT0XtRTRDcb6X+jicZzAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUWoqMSZYPr4vRH6yF6J4AuFOc4e4wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvV29xTVNaWVByNHZSSDZ5RjZKNEF1
Rk9jNGU0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAN6c9jAN
BgkqhkiG9w0BAQsFAAOCAQEAoe3FmNL4owyHvoUQyXrhSzkOsjBNDBtxQT1ukRIn
KoyND31IASy3PoAUbN8zvyPxBIUCixzVH8p/9B9HhGT3QFjBhV0xsFQ4pTKazIZu
yd8mcrJelh91XQUTgdO7ijEqaD3vmTjqdju6fok/YwH71JHRb5iXJyK+vCXOs+et
KLflj/HUbz+8mHyd5DOVLqvNGiVLTuoIyX8oysWNBB5zxTIMEGsYdbohZJUI+e5P
V6TWUrg5/zBEm6Rilk2OtI4cBqJYYDawxmGf5/7y+NHPjxREbKwN/056HgjU3yFQ
PTX75bLzovIOyvVyIBFUcde1eOu4rArYnSo85ZD3tssSaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org