Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/dsfSjvFbmaak8l1IirGZYgDlfrU.roa
File: dsfSjvFbmaak8l1IirGZYgDlfrU.roa (raw, json)
Hash identifier: oWhbvISowMSjWKEhaQmWzEkbwoTYbN6pWn5ReGVf4xI=
Subject key identifier: 76:C7:D2:8E:F1:5B:99:A6:A4:F2:5D:48:8A:B1:99:62:00:E5:7E:B5
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1263
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/dsfSjvFbmaak8l1IirGZYgDlfrU.roa
Signing time: Fri 01 Sep 2023 08:04:23 +0000
ROA not before: Fri 01 Sep 2023 08:04:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 124.218.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4707 (0x1263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=76C7D28EF15B99A6A4F25D488AB1996200E57EB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:9e:fb:52:f5:e1:f0:c2:88:fc:c5:b4:f6:
b5:86:1e:07:f3:5b:e0:99:6a:29:60:d2:06:d4:64:
9b:a4:05:de:77:ea:bf:bf:55:dd:00:fa:6f:b6:10:
6c:ef:1b:de:b0:69:6f:82:bd:8e:87:1c:ce:d7:22:
c1:7d:ee:66:25:56:ea:3e:9b:38:88:9d:13:f0:eb:
4e:2a:1f:67:8e:6f:7a:73:1c:c4:ca:ce:23:1f:ee:
85:1c:f3:5a:69:c0:c4:fc:8a:2f:3b:c1:66:30:b7:
e6:90:cf:6c:05:f0:05:28:8e:e7:be:98:5d:07:22:
be:92:41:1a:e9:31:a8:7f:99:f6:1a:2c:0a:16:60:
c2:88:5d:0b:ff:3c:27:50:ea:65:55:a1:c6:a4:37:
ea:47:9b:a4:1c:f5:a0:e0:5a:48:b1:2e:81:94:51:
b6:6b:87:fd:65:3f:35:fb:dd:fd:3c:7b:53:8e:cc:
5e:45:b5:0f:d9:92:54:98:36:85:03:a3:ac:4e:ab:
06:3d:5b:b0:cb:aa:70:c7:8d:94:95:1d:73:02:2e:
83:35:18:94:5c:73:e4:a8:d2:aa:1e:1a:55:dc:b9:
68:e4:3c:d3:95:49:2d:7e:a7:3e:d0:c9:af:c3:41:
66:03:28:25:8b:2c:ec:84:f6:08:34:f5:43:01:e7:
7f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C7:D2:8E:F1:5B:99:A6:A4:F2:5D:48:8A:B1:99:62:00:E5:7E:B5
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/dsfSjvFbmaak8l1IirGZYgDlfrU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:67:e9:ee:05:d1:dc:68:d2:71:fe:0a:09:ea:2b:87:ae:9b:
7f:f5:22:b7:93:92:6e:da:ab:c3:f4:49:25:ac:69:10:37:e7:
39:2d:e9:0a:fc:57:74:d2:e3:1b:96:3a:ad:cd:10:aa:a5:4d:
e1:71:35:1d:fd:72:cf:8f:79:50:72:53:91:1b:8a:68:d6:18:
36:8c:bf:b6:21:e8:52:07:cc:3b:62:36:2d:98:93:52:a0:5f:
39:d7:14:11:b6:fe:3e:90:04:29:23:c9:4c:87:a9:7e:2a:e9:
f7:d8:fa:a9:c6:03:fa:8d:1e:26:09:d3:ec:61:b1:0a:0a:17:
a4:24:97:c5:39:e0:58:e5:81:c1:13:2e:3e:04:1c:58:c6:57:
21:17:56:5f:cf:46:33:74:75:56:de:b4:e3:e4:f0:11:dd:b0:
1c:c8:f5:f6:8c:94:31:60:0f:1a:1e:1b:78:ed:c5:85:0a:97:
3b:ac:d9:70:12:e0:da:f2:1e:5e:b4:ed:84:cc:96:0f:c9:71:
5b:72:ed:2a:a0:fd:50:8d:4e:98:f2:36:56:c1:a1:1b:d7:fa:
c0:bf:fb:c1:2a:e7:41:ec:c7:b8:06:70:e4:1c:90:59:ac:d0:
24:73:20:65:ae:fa:b8:1b:67:8a:49:98:0d:48:32:24:df:ea:
e4:8d:85:3a
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICEmMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA0MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc2QzdEMjhFRjE1Qjk5
QTZBNEYyNUQ0ODhBQjE5OTYyMDBFNTdFQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvBZ77UvXh8MKI/MW09rWGHgfzW+CZailg0gbUZJukBd536r+/
Vd0A+m+2EGzvG96waW+CvY6HHM7XIsF97mYlVuo+mziInRPw604qH2eOb3pzHMTK
ziMf7oUc81ppwMT8ii87wWYwt+aQz2wF8AUojue+mF0HIr6SQRrpMah/mfYaLAoW
YMKIXQv/PCdQ6mVVocakN+pHm6Qc9aDgWkixLoGUUbZrh/1lPzX73f08e1OOzF5F
tQ/ZklSYNoUDo6xOqwY9W7DLqnDHjZSVHXMCLoM1GJRcc+So0qoeGlXcuWjkPNOV
SS1+pz7Qya/DQWYDKCWLLOyE9gg09UMB53+jAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUdsfSjvFbmaak8l1IirGZYgDlfrUwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvZHNmU2p2RmJtYWFrOGwxSWlyR1pZ
Z0RsZnJVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHzaMA0G
CSqGSIb3DQEBCwUAA4IBAQA4Z+nuBdHcaNJx/goJ6iuHrpt/9SK3k5Ju2qvD9Ekl
rGkQN+c5LekK/Fd00uMbljqtzRCqpU3hcTUd/XLPj3lQclORG4po1hg2jL+2IehS
B8w7YjYtmJNSoF851xQRtv4+kAQpI8lMh6l+Kun32PqpxgP6jR4mCdPsYbEKChek
JJfFOeBY5YHBEy4+BBxYxlchF1Zfz0YzdHVW3rTj5PAR3bAcyPX2jJQxYA8aHht4
7cWFCpc7rNlwEuDa8h5etO2EzJYPyXFbcu0qoP1QjU6Y8jZWwaEb1/rAv/vBKudB
7Me4BnDkHJBZrNAkcyBlrvq4G2eKSZgNSDIk3+rkjYU6
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org