Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/bEwwgqwMLDXSc5Wk-Qa4-Koy-Yk.roa
File: bEwwgqwMLDXSc5Wk-Qa4-Koy-Yk.roa (raw, json)
Hash identifier: WUKPQTn4B+zcANCyALXBfFJ1Ybkoo6TJyWNoB358vXw=
Subject key identifier: 6C:4C:30:82:AC:0C:2C:35:D2:73:95:A4:F9:06:B8:F8:AA:32:F9:89
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 13D5
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/bEwwgqwMLDXSc5Wk-Qa4-Koy-Yk.roa
Signing time: Fri 05 Jan 2024 09:17:12 +0000
ROA not before: Fri 05 Jan 2024 09:17:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 218.184.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5077 (0x13d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Jan 5 09:17:12 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6C4C3082AC0C2C35D27395A4F906B8F8AA32F989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:79:74:31:9c:aa:c3:39:db:c6:c6:70:f8:
37:5f:66:67:03:91:c9:f8:61:7d:33:48:54:3d:b9:
c5:d1:dd:21:9d:96:0a:23:d2:2e:36:09:b7:b0:36:
d5:0e:e0:31:39:8a:5d:8c:43:44:c7:87:2b:24:0e:
f6:4f:29:84:3e:d0:11:a9:97:5c:b8:30:8c:1b:47:
33:45:e4:1b:8c:5f:8e:19:1e:c7:32:b6:89:74:1e:
8f:99:ac:ca:b4:1b:3d:07:af:6f:23:df:11:83:62:
d6:73:fa:8e:7b:b0:7c:36:1d:30:74:0a:ee:58:b3:
6f:13:cb:1b:87:7c:ea:7d:03:c8:4c:49:34:1c:3c:
b2:1d:79:2a:83:fd:e2:a7:16:c6:92:b4:ce:51:70:
b9:99:7d:9b:cd:0a:cd:e2:3a:2f:20:5a:b1:c1:ef:
5c:68:6a:b8:0a:b7:fe:6a:e6:a1:df:72:99:32:87:
7c:13:e2:f3:6f:57:0f:8a:44:5a:4c:de:db:d9:c5:
d4:81:52:df:2f:01:9c:09:c4:9c:2a:9b:f1:2a:86:
dc:a4:d5:6b:1c:ad:28:28:0c:ca:0d:83:6d:f1:c7:
47:84:94:70:81:0f:44:f5:78:06:02:44:d0:e1:bf:
02:07:41:a2:b1:e1:01:bc:b2:da:37:2b:6f:ff:66:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4C:30:82:AC:0C:2C:35:D2:73:95:A4:F9:06:B8:F8:AA:32:F9:89
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/bEwwgqwMLDXSc5Wk-Qa4-Koy-Yk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.184.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:8f:13:df:63:ec:4f:a7:03:63:ca:c0:71:d7:50:8a:7a:a9:
5b:47:4e:cf:a4:3d:58:87:44:d8:b5:49:9a:cd:bd:ac:d4:88:
a3:e3:78:c7:ae:4d:6d:09:83:a7:fe:67:e0:2b:01:ad:52:f6:
3f:53:7e:46:3b:58:70:8c:57:12:6a:ab:5f:93:98:21:82:2a:
68:77:6d:7c:46:0b:89:41:b2:bf:18:ae:6d:b1:75:44:f7:f6:
bc:b4:4a:7b:a1:0d:10:08:7b:36:36:76:c8:00:3c:48:69:e9:
07:bc:a5:8d:e1:a4:c3:4d:39:e6:90:17:03:1b:a7:a1:ec:e3:
99:ec:c6:9f:02:27:8d:60:a9:e3:c7:ba:d5:02:e2:5e:eb:0c:
48:51:1e:32:bb:4c:77:52:c2:b9:e1:73:8c:f3:c9:c4:68:9e:
d2:9f:df:38:ce:ee:a1:4d:71:2f:81:eb:28:a2:f7:21:91:ea:
ee:6e:c2:7e:37:0c:f8:2f:1d:04:19:c0:57:5a:5a:f0:6c:9f:
da:ab:f8:06:0c:e5:f7:5e:17:d3:08:02:fd:51:3d:46:9c:71:
0f:83:33:64:1e:03:38:4d:78:c8:0d:66:f9:b2:ae:c7:a3:69:
58:56:2e:18:da:dc:fe:c8:d9:e6:18:ad:03:77:46:a2:f5:70:
db:41:3e:aa
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICE9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yNDAxMDUw
OTE3MTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZDNEMzMDgyQUMwQzJD
MzVEMjczOTVBNEY5MDZCOEY4QUEzMkY5ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0RXl0MZyqwznbxsZw+DdfZmcDkcn4YX0zSFQ9ucXR3SGdlgoj
0i42CbewNtUO4DE5il2MQ0THhyskDvZPKYQ+0BGpl1y4MIwbRzNF5BuMX44ZHscy
tol0Ho+ZrMq0Gz0Hr28j3xGDYtZz+o57sHw2HTB0Cu5Ys28TyxuHfOp9A8hMSTQc
PLIdeSqD/eKnFsaStM5RcLmZfZvNCs3iOi8gWrHB71xoargKt/5q5qHfcpkyh3wT
4vNvVw+KRFpM3tvZxdSBUt8vAZwJxJwqm/Eqhtyk1WscrSgoDMoNg23xx0eElHCB
D0T1eAYCRNDhvwIHQaKx4QG8sto3K2//ZvlDAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUbEwwgqwMLDXSc5Wk+Qa4+Koy+YkwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvYkV3d2dxd01MRFhTYzVXay1RYTQt
S295LVlrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANq4MA0G
CSqGSIb3DQEBCwUAA4IBAQCtjxPfY+xPpwNjysBx11CKeqlbR07PpD1Yh0TYtUma
zb2s1Iij43jHrk1tCYOn/mfgKwGtUvY/U35GO1hwjFcSaqtfk5ghgipod218RguJ
QbK/GK5tsXVE9/a8tEp7oQ0QCHs2NnbIADxIaekHvKWN4aTDTTnmkBcDG6eh7OOZ
7MafAieNYKnjx7rVAuJe6wxIUR4yu0x3UsK54XOM88nEaJ7Sn984zu6hTXEvgeso
ovchkerubsJ+Nwz4Lx0EGcBXWlrwbJ/aq/gGDOX3XhfTCAL9UT1GnHEPgzNkHgM4
TXjIDWb5sq7Ho2lYVi4Y2tz+yNnmGK0Dd0ai9XDbQT6q
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:54 2025 by rpki-client