Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/e25hNdOUY2jSurH-NKLiQcoAeM4.roa
File: e25hNdOUY2jSurH-NKLiQcoAeM4.roa (raw, json)
Hash identifier: M3bM2ElNJSL6yPBmslArw+wnbalW6NwmUpDSAYQqn5Q=
Subject key identifier: 7B:6E:61:35:D3:94:63:68:D2:BA:B1:FE:34:A2:E2:41:CA:00:78:CE
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1313
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/e25hNdOUY2jSurH-NKLiQcoAeM4.roa
Signing time: Fri 01 Sep 2023 08:05:20 +0000
ROA not before: Fri 01 Sep 2023 08:05:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9311
IP address blocks: 210.200.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4883 (0x1313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7B6E6135D3946368D2BAB1FE34A2E241CA0078CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:9c:d6:ac:5d:ff:6f:9d:13:e4:eb:c4:4c:
6d:c2:0b:58:0e:c5:06:a6:53:eb:c9:4b:41:f7:9f:
38:b3:e2:bf:1c:16:e8:fb:4f:9b:60:2b:a5:fb:cd:
ad:59:f7:d1:88:d0:83:0b:c5:c5:3f:32:20:f1:56:
26:b4:8f:67:f6:9e:e0:f2:fc:67:50:78:1c:c4:5c:
c1:bf:83:38:0f:19:ad:42:ac:7b:75:c1:1d:9f:f1:
58:dc:44:55:94:dd:f6:81:43:f1:6e:67:4e:73:27:
43:cd:9b:18:e8:42:c8:7f:f7:c5:ad:1f:a1:a6:bc:
71:f5:db:56:e7:d9:08:5d:c5:82:02:31:d7:f3:1f:
47:75:c8:81:3c:5a:df:ce:c5:c0:23:f2:aa:6d:05:
22:87:26:22:23:f3:24:b1:25:84:f5:ec:4b:35:cb:
a2:8f:8f:b2:6c:8c:3d:29:32:b6:39:07:26:12:a4:
43:14:ee:79:f3:48:2f:f6:3d:28:86:dd:90:52:4e:
09:4f:88:ca:0c:b8:4b:fb:bb:1d:c4:10:96:0e:04:
a8:70:00:84:51:3b:1d:88:5b:ff:e6:9a:7e:ff:ca:
74:11:17:b0:8b:aa:67:01:ae:ca:73:e6:a5:62:39:
53:64:38:c6:01:22:ea:b2:ed:cf:40:e2:87:d1:4c:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6E:61:35:D3:94:63:68:D2:BA:B1:FE:34:A2:E2:41:CA:00:78:CE
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/e25hNdOUY2jSurH-NKLiQcoAeM4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.17.0/24
Signature Algorithm: sha256WithRSAEncryption
56:41:79:3e:22:e3:d2:54:06:1f:55:78:7b:f4:98:4e:ef:5a:
fe:3e:63:54:97:67:39:e9:ca:f5:91:85:aa:63:52:25:c2:f8:
d0:3a:31:7b:3f:ea:3e:d5:55:7c:5e:d8:45:ef:97:3d:38:21:
23:6e:7e:36:63:92:3f:6b:ff:1c:1d:92:42:bd:03:91:73:82:
d3:a8:71:32:92:a3:99:eb:cd:7d:17:57:7f:b4:f9:64:59:f6:
72:1b:f3:33:37:8c:38:95:8f:be:df:20:5b:50:59:dc:5b:02:
d9:62:c3:2e:cc:94:bd:3b:6d:44:a5:85:ba:d7:e6:52:82:e1:
55:4a:95:5f:0d:dc:1d:c6:ad:80:df:45:3b:02:8b:3b:12:40:
92:10:76:22:e6:8d:05:0a:ad:53:fd:3f:41:34:ec:6c:03:08:
ed:4b:61:88:2b:ac:09:ac:02:39:41:4e:7c:db:a7:d5:7a:28:
7b:c2:4c:5e:72:2a:5f:57:8b:61:42:39:6f:68:5c:c9:53:fa:
57:55:04:bf:54:db:28:ae:c0:e3:74:34:2b:11:25:59:67:25:
0c:b2:00:d6:fe:13:7f:fb:95:a4:31:e2:2f:d4:d4:03:5d:53:
bd:2a:3c:3a:67:a5:44:ad:3b:7a:47:e7:de:b2:14:3d:e0:5a:
75:9a:00:09
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICExMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA1MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdCNkU2MTM1RDM5NDYz
NjhEMkJBQjFGRTM0QTJFMjQxQ0EwMDc4Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrbpzWrF3/b50T5OvETG3CC1gOxQamU+vJS0H3nziz4r8cFuj7
T5tgK6X7za1Z99GI0IMLxcU/MiDxVia0j2f2nuDy/GdQeBzEXMG/gzgPGa1CrHt1
wR2f8VjcRFWU3faBQ/FuZ05zJ0PNmxjoQsh/98WtH6GmvHH121bn2QhdxYICMdfz
H0d1yIE8Wt/OxcAj8qptBSKHJiIj8ySxJYT17Es1y6KPj7JsjD0pMrY5ByYSpEMU
7nnzSC/2PSiG3ZBSTglPiMoMuEv7ux3EEJYOBKhwAIRROx2IW//mmn7/ynQRF7CL
qmcBrspz5qViOVNkOMYBIuqy7c9A4ofRTIXVAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUe25hNdOUY2jSurH+NKLiQcoAeM4wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvZTI1aE5kT1VZMmpTdXJILU5LTGlR
Y29BZU00LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANLIETAN
BgkqhkiG9w0BAQsFAAOCAQEAVkF5PiLj0lQGH1V4e/SYTu9a/j5jVJdnOenK9ZGF
qmNSJcL40Doxez/qPtVVfF7YRe+XPTghI25+NmOSP2v/HB2SQr0DkXOC06hxMpKj
mevNfRdXf7T5ZFn2chvzMzeMOJWPvt8gW1BZ3FsC2WLDLsyUvTttRKWFutfmUoLh
VUqVXw3cHcatgN9FOwKLOxJAkhB2IuaNBQqtU/0/QTTsbAMI7UthiCusCawCOUFO
fNun1Xooe8JMXnIqX1eLYUI5b2hcyVP6V1UEv1TbKK7A43Q0KxElWWclDLIA1v4T
f/uVpDHiL9TUA11TvSo8OmelRK07ekfn3rIUPeBadZoACQ==
-----END CERTIFICATE-----
Generated at Mon Jan 15 22:50:43 2024 by rpki-client on console-fra.rpki-client.org