Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Za1CPh6XoE9G6ml9etrWYGEYqRQ.roa
File: Za1CPh6XoE9G6ml9etrWYGEYqRQ.roa (raw, json)
Hash identifier: YOD76ob/mzo4DiYo/MN6+NpZNEW/Ape4Hw46lx3BN3c=
Subject key identifier: 65:AD:42:3E:1E:97:A0:4F:46:EA:69:7D:7A:DA:D6:60:61:18:A9:14
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Za1CPh6XoE9G6ml9etrWYGEYqRQ.roa
Signing time: Thu 15 Sep 2022 02:40:24 +0000
ROA not before: Thu 15 Sep 2022 02:40:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 222.250.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=65AD423E1E97A04F46EA697D7ADAD6606118A914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:37:49:45:9a:ab:e5:e9:a1:3d:2a:12:11:ba:
04:f6:4b:a6:e0:79:69:30:d8:bb:48:16:e3:22:78:
b3:67:75:d7:3c:4f:9c:ac:5b:3c:01:ca:35:7c:e3:
9b:ff:06:37:7b:0f:cc:16:c9:b3:26:78:be:f0:6e:
04:e7:fb:51:36:b0:4b:f0:fe:bf:0a:25:a4:a7:32:
c2:8e:9f:ba:a5:ec:fe:bc:35:dc:67:51:01:71:c2:
ee:8e:bb:9c:24:c3:66:57:1e:50:12:3c:fb:df:5b:
8b:a2:63:b4:66:de:e4:03:4c:e3:53:fa:5b:ce:08:
93:60:a1:a9:47:95:0e:42:a4:b6:9a:f0:58:6e:5c:
e7:86:f4:ea:b7:54:79:d9:1e:e2:cf:9a:3a:97:bd:
38:da:3f:6b:c5:19:d5:95:fb:61:6f:27:83:91:6a:
88:f9:b6:88:78:09:ea:47:17:bd:74:66:a9:a2:9d:
0d:eb:df:58:3c:f0:dd:6e:12:12:dc:5a:fd:00:33:
16:6b:62:ce:99:cc:c9:37:8a:8f:6a:c5:18:db:16:
70:bc:ad:c6:19:49:02:9c:c9:9c:d1:34:6e:b6:b6:
be:ab:ea:72:80:aa:5f:16:8d:ed:38:7a:0b:3d:a3:
6a:bc:74:62:b1:73:d4:c1:50:0c:c5:56:3e:75:3b:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AD:42:3E:1E:97:A0:4F:46:EA:69:7D:7A:DA:D6:60:61:18:A9:14
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Za1CPh6XoE9G6ml9etrWYGEYqRQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.250.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:f3:b9:8c:4a:b2:aa:c8:5e:98:03:ed:4b:90:ef:8f:aa:b1:
35:24:80:6a:3f:7c:c7:9c:00:35:66:99:a6:08:7a:5d:39:10:
24:5c:5e:e8:c4:03:fb:28:33:fe:d0:71:d5:14:32:78:b4:0c:
38:44:b6:bf:07:7b:d8:4c:a1:3d:48:f3:78:d5:6b:b2:05:7b:
92:ac:92:7f:9d:e8:ee:8c:26:28:7e:ef:21:ca:bc:51:9b:cf:
b5:c5:c6:9f:9b:e2:26:a4:b6:0f:67:8c:d0:42:59:bb:c4:7e:
46:5b:0f:93:d4:56:ce:df:6a:dc:60:d2:5d:9e:ed:9d:62:7b:
c3:00:59:db:5c:e8:f3:83:a8:3e:8a:bd:c4:bc:97:bf:ec:48:
4b:13:cd:d7:3e:c4:00:67:d0:7c:cb:14:a2:58:f5:3d:7b:f3:
3c:c8:56:93:0b:17:5e:31:fc:c5:e9:f9:2d:8a:57:be:5e:23:
f8:8a:9b:5a:4e:29:d6:a8:ec:4c:90:65:6a:6e:da:53:8c:ca:
a7:67:eb:4d:68:c9:23:a1:ab:4c:d7:38:06:48:8d:48:f6:06:
90:c7:00:95:01:72:bd:6b:3e:53:42:aa:5d:04:18:55:44:b1:
f3:37:99:88:df:af:a3:19:1b:22:16:8a:87:1d:13:8b:fa:03:
96:24:31:9b
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMjA5MTUw
MjQwMjRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDY1QUQ0MjNFMUU5N0Ew
NEY0NkVBNjk3RDdBREFENjYwNjExOEE5MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYN0lFmqvl6aE9KhIRugT2S6bgeWkw2LtIFuMieLNnddc8T5ys
WzwByjV845v/Bjd7D8wWybMmeL7wbgTn+1E2sEvw/r8KJaSnMsKOn7ql7P68Ndxn
UQFxwu6Ou5wkw2ZXHlASPPvfW4uiY7Rm3uQDTONT+lvOCJNgoalHlQ5CpLaa8Fhu
XOeG9Oq3VHnZHuLPmjqXvTjaP2vFGdWV+2FvJ4ORaoj5toh4CepHF710ZqminQ3r
31g88N1uEhLcWv0AMxZrYs6ZzMk3io9qxRjbFnC8rcYZSQKcyZzRNG62tr6r6nKA
ql8Wje04egs9o2q8dGKxc9TBUAzFVj51O07NAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUZa1CPh6XoE9G6ml9etrWYGEYqRQwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvWmExQ1BoNlhvRTlHNm1sOWV0cldZ
R0VZcVJRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAN76MA0G
CSqGSIb3DQEBCwUAA4IBAQBX87mMSrKqyF6YA+1LkO+PqrE1JIBqP3zHnAA1Zpmm
CHpdORAkXF7oxAP7KDP+0HHVFDJ4tAw4RLa/B3vYTKE9SPN41WuyBXuSrJJ/neju
jCYofu8hyrxRm8+1xcafm+ImpLYPZ4zQQlm7xH5GWw+T1FbO32rcYNJdnu2dYnvD
AFnbXOjzg6g+ir3EvJe/7EhLE83XPsQAZ9B8yxSiWPU9e/M8yFaTCxdeMfzF6fkt
ile+XiP4iptaTinWqOxMkGVqbtpTjMqnZ+tNaMkjoatM1zgGSI1I9gaQxwCVAXK9
az5TQqpdBBhVRLHzN5mI36+jGRsiFoqHHROL+gOWJDGb
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:08:24 2025 by rpki-client