Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/YZGjXLFw-9OwPTrn8Nz2VXPhO38.roa
File: YZGjXLFw-9OwPTrn8Nz2VXPhO38.roa (raw, json)
Hash identifier: Rv/HnFiv0I9vMX+CH8Lymb/BwTn/sveu6ciDnf6dZwE=
Subject key identifier: 61:91:A3:5C:B1:70:FB:D3:B0:3D:3A:E7:F0:DC:F6:55:73:E1:3B:7F
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0938
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/YZGjXLFw-9OwPTrn8Nz2VXPhO38.roa
Signing time: Tue 29 Sep 2020 10:01:36 +0000
ROA not before: Tue 29 Sep 2020 10:01:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 203.79.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2360 (0x938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:36 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6191A35CB170FBD3B03D3AE7F0DCF65573E13B7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:cf:94:7f:04:eb:a9:76:48:34:51:4f:e6:
cd:62:6b:ad:ea:e3:43:3f:d8:7d:b6:f5:28:ac:0d:
04:b2:9b:33:36:f0:31:2e:4f:1e:79:d7:4d:68:fd:
65:7d:92:24:6d:26:cb:04:7f:29:35:fe:09:ab:81:
13:18:9d:44:35:fa:44:4f:02:1b:1e:bb:d4:38:f0:
a0:37:dc:f9:6d:14:2b:b5:ea:5b:fa:5b:02:30:87:
37:17:40:1b:03:c0:be:5b:fb:28:10:4c:b9:a5:ec:
5c:cc:9f:8e:f3:c7:05:24:70:a3:5e:c4:8d:9c:c1:
df:0a:fb:e3:1c:06:f5:98:51:84:e3:cc:18:d2:62:
b3:93:92:b8:a0:4b:ed:e6:7b:6c:b4:53:36:cc:9e:
ab:88:87:fc:b9:0a:f6:97:b0:e5:b4:90:54:2f:85:
5e:02:60:f1:96:1e:ca:d2:d5:f6:4c:ae:cc:67:d2:
93:ba:da:85:f7:ea:65:82:69:c2:7c:d6:40:7c:1a:
09:fb:eb:93:dd:4b:70:6a:fa:a1:f7:d8:99:11:42:
4d:dd:bb:32:81:5c:41:20:b5:1f:2a:e0:3f:25:40:
a6:b1:8b:b8:7b:3d:22:62:14:d2:24:e9:03:7b:60:
e1:f5:6b:a6:3f:50:d4:e3:38:6d:01:04:2e:81:ca:
5c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:91:A3:5C:B1:70:FB:D3:B0:3D:3A:E7:F0:DC:F6:55:73:E1:3B:7F
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/YZGjXLFw-9OwPTrn8Nz2VXPhO38.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.248.0/21
Signature Algorithm: sha256WithRSAEncryption
03:7d:39:d8:ce:10:43:18:55:bb:02:78:1b:05:4a:9a:c8:ff:
07:a4:b3:5b:de:1c:37:30:a5:ea:e5:47:14:2a:ec:78:e6:05:
b6:f5:88:bb:ec:24:c7:d1:d7:a4:91:5f:21:5a:08:74:bd:67:
21:0c:6f:1c:c9:58:d1:94:f0:a5:db:c3:43:98:24:d8:db:82:
14:6d:ad:1d:d0:a5:8d:54:98:72:ec:68:c9:43:49:7a:0e:8a:
5f:3b:5e:63:f5:db:d8:34:21:87:05:d4:24:85:bc:36:cc:60:
f6:fe:97:83:6d:e7:3e:97:19:0c:2c:a6:aa:be:59:fe:db:e0:
63:5d:25:ed:aa:7d:49:cc:be:f4:7b:7d:1d:fa:52:5f:92:72:
b1:3c:e7:2d:9f:50:14:ec:71:7d:8e:79:73:5e:5f:d4:87:b4:
0a:6f:52:f1:d0:5d:70:a0:75:46:f5:cf:59:da:14:af:0b:0d:
35:f7:5f:a2:d4:86:25:ce:70:cd:2a:89:05:66:f5:3d:ea:70:
6b:a6:c3:6a:34:40:da:db:9f:0a:5f:66:2a:11:85:25:56:8d:
1f:03:8b:e0:86:28:cf:37:2f:82:1a:6d:ba:fa:36:a5:d7:c5:
7c:5e:1c:bc:fe:44:5c:2e:01:19:57:4a:89:c1:1d:b6:0d:11:
a2:a7:59:ef
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCTgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMDA5Mjkx
MDAxMzZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDYxOTFBMzVDQjE3MEZC
RDNCMDNEM0FFN0YwRENGNjU1NzNFMTNCN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDncM+UfwTrqXZINFFP5s1ia63q40M/2H229SisDQSymzM28DEu
Tx55101o/WV9kiRtJssEfyk1/gmrgRMYnUQ1+kRPAhseu9Q48KA33PltFCu16lv6
WwIwhzcXQBsDwL5b+ygQTLml7FzMn47zxwUkcKNexI2cwd8K++McBvWYUYTjzBjS
YrOTkrigS+3me2y0UzbMnquIh/y5CvaXsOW0kFQvhV4CYPGWHsrS1fZMrsxn0pO6
2oX36mWCacJ81kB8Ggn765PdS3Bq+qH32JkRQk3duzKBXEEgtR8q4D8lQKaxi7h7
PSJiFNIk6QN7YOH1a6Y/UNTjOG0BBC6BylzlAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUYZGjXLFw+9OwPTrn8Nz2VXPhO38wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvWVpHalhMRnctOU93UFRybjhOejJW
WFBoTzM4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8tP+DAN
BgkqhkiG9w0BAQsFAAOCAQEAA3052M4QQxhVuwJ4GwVKmsj/B6SzW94cNzCl6uVH
FCrseOYFtvWIu+wkx9HXpJFfIVoIdL1nIQxvHMlY0ZTwpdvDQ5gk2NuCFG2tHdCl
jVSYcuxoyUNJeg6KXzteY/Xb2DQhhwXUJIW8Nsxg9v6Xg23nPpcZDCymqr5Z/tvg
Y10l7ap9Scy+9Ht9HfpSX5JysTznLZ9QFOxxfY55c15f1Ie0Cm9S8dBdcKB1RvXP
WdoUrwsNNfdfotSGJc5wzSqJBWb1Pepwa6bDajRA2tufCl9mKhGFJVaNHwOL4IYo
zzcvghptuvo2pdfFfF4cvP5EXC4BGVdKicEdtg0RoqdZ7w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org