Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ZIc97qtI2kdn2XRK9U_eoyvRRb4.roa
File: ZIc97qtI2kdn2XRK9U_eoyvRRb4.roa (raw, json)
Hash identifier: cuJJz4LGaGsP2synhgdcDEx54cyrkclW5C0HOwrJtGU=
Subject key identifier: 64:87:3D:EE:AB:48:DA:47:67:D9:74:4A:F5:4F:DE:A3:2B:D1:45:BE
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DFE
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ZIc97qtI2kdn2XRK9U_eoyvRRb4.roa
Signing time: Wed 29 Sep 2021 02:39:50 +0000
ROA not before: Wed 29 Sep 2021 02:39:50 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9311
IP address blocks: 210.63.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3582 (0xdfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:50 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=64873DEEAB48DA4767D9744AF54FDEA32BD145BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:c7:5b:6c:59:5d:58:6a:52:e7:8c:c2:58:
31:b1:38:f8:ef:8c:ec:83:98:c9:b2:8d:98:b4:4c:
18:5d:5d:c7:4a:48:3d:79:ce:de:19:03:7b:f1:d3:
bd:82:b2:99:42:d3:47:eb:c8:de:7b:d4:79:df:ce:
c7:63:ff:4d:23:93:d2:8a:aa:97:b4:c1:29:a7:39:
c9:88:59:cb:53:47:2c:68:03:e2:08:02:6b:77:88:
47:4f:09:b7:78:15:c0:46:52:43:5d:41:eb:cb:c9:
a5:50:57:94:85:a6:c2:28:15:71:98:6b:2b:c1:d4:
93:87:b7:e3:fe:ad:86:e1:ef:7d:6e:04:37:e3:ce:
dc:65:63:b0:81:c5:86:23:87:d0:8f:f8:54:e6:c6:
73:54:2b:2e:8b:01:61:47:3f:f2:89:1d:f9:67:20:
37:7c:e0:3f:61:3e:ea:2f:1d:e6:67:e1:f3:54:f1:
4c:1e:53:fc:fd:63:33:fb:27:b1:2f:4b:92:95:e6:
ad:59:38:5b:6c:94:bc:64:e8:14:e8:7e:46:31:77:
74:a6:7c:df:a8:48:63:8c:00:0e:6a:8d:d9:67:ce:
14:71:9c:f4:bc:52:6d:e8:54:54:19:0c:e5:82:73:
15:37:ab:f9:c8:3b:28:35:73:45:0b:55:1d:66:da:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:87:3D:EE:AB:48:DA:47:67:D9:74:4A:F5:4F:DE:A3:2B:D1:45:BE
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ZIc97qtI2kdn2XRK9U_eoyvRRb4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.240.0/24
Signature Algorithm: sha256WithRSAEncryption
82:2c:f1:59:da:bb:b4:79:b1:45:59:c9:3a:19:c7:c9:c6:53:
b8:de:2a:45:c1:a4:c0:d6:d8:ab:79:92:38:f7:24:12:08:cd:
34:db:2d:63:4e:f0:b3:2c:bd:90:68:56:49:97:46:c8:fe:3b:
98:28:e2:54:de:46:a0:fc:e7:1e:44:82:ea:85:64:40:e3:34:
f7:8f:4c:b7:51:97:f2:63:b7:3b:c0:c3:55:6e:91:5f:3d:a9:
cc:eb:52:33:16:c8:88:1c:35:a7:7c:de:eb:4b:3c:53:e9:88:
44:40:48:60:f6:a4:01:3f:2e:72:14:5f:9c:d9:5f:a3:57:bc:
7d:6d:ff:dd:87:99:b9:b1:f0:ec:5e:90:54:5e:98:d7:bc:84:
3a:58:b3:31:2c:c7:5c:4b:ac:9d:7c:e8:b7:b2:36:90:cb:3a:
92:d8:31:09:7d:fe:08:fc:0e:bd:ae:30:ba:b8:c0:dc:5e:e7:
67:21:1e:32:a9:aa:48:72:42:87:63:a5:6b:98:a1:ba:9c:45:
fd:3c:2c:1d:e0:ee:2e:cc:1a:5a:99:24:74:1e:92:c1:de:94:
73:6f:03:52:1d:6e:a0:26:5a:54:0d:26:88:e8:53:d4:e4:0f:
8d:51:5c:5f:f5:3e:49:e3:28:5d:ab:89:6e:b4:c9:ac:d0:5c:
a7:f1:40:b6
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDf4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTA5Mjkw
MjM5NTBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDY0ODczREVFQUI0OERB
NDc2N0Q5NzQ0QUY1NEZERUEzMkJEMTQ1QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3SsdbbFldWGpS54zCWDGxOPjvjOyDmMmyjZi0TBhdXcdKSD15
zt4ZA3vx072CsplC00fryN571Hnfzsdj/00jk9KKqpe0wSmnOcmIWctTRyxoA+II
Amt3iEdPCbd4FcBGUkNdQevLyaVQV5SFpsIoFXGYayvB1JOHt+P+rYbh731uBDfj
ztxlY7CBxYYjh9CP+FTmxnNUKy6LAWFHP/KJHflnIDd84D9hPuovHeZn4fNU8Uwe
U/z9YzP7J7EvS5KV5q1ZOFtslLxk6BTofkYxd3SmfN+oSGOMAA5qjdlnzhRxnPS8
Um3oVFQZDOWCcxU3q/nIOyg1c0ULVR1m2vW3AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUZIc97qtI2kdn2XRK9U/eoyvRRb4wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvWkljOTdxdEkya2RuMlhSSzlVX2Vv
eXZSUmI0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI/8DAN
BgkqhkiG9w0BAQsFAAOCAQEAgizxWdq7tHmxRVnJOhnHycZTuN4qRcGkwNbYq3mS
OPckEgjNNNstY07wsyy9kGhWSZdGyP47mCjiVN5GoPznHkSC6oVkQOM0949Mt1GX
8mO3O8DDVW6RXz2pzOtSMxbIiBw1p3ze60s8U+mIREBIYPakAT8uchRfnNlfo1e8
fW3/3YeZubHw7F6QVF6Y17yEOlizMSzHXEusnXzot7I2kMs6ktgxCX3+CPwOva4w
urjA3F7nZyEeMqmqSHJCh2Ola5ihupxF/TwsHeDuLswaWpkkdB6Swd6Uc28DUh1u
oCZaVA0miOhT1OQPjVFcX/U+SeMoXauJbrTJrNBcp/FAtg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org