Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/eJ-1ugx3isSkB5AcsNbKlrR6jNA.roa
File: eJ-1ugx3isSkB5AcsNbKlrR6jNA.roa (raw, json)
Hash identifier: G4Fo5HdBT4v39NrYbtEiJ4zpzXx4sP+PmfRc4UFhZoY=
Subject key identifier: 78:9F:B5:BA:0C:77:8A:C4:A4:07:90:1C:B0:D6:CA:96:B4:7A:8C:D0
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0BEF
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/eJ-1ugx3isSkB5AcsNbKlrR6jNA.roa
Signing time: Sun 07 Feb 2021 11:34:20 +0000
ROA not before: Sun 07 Feb 2021 11:34:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.201.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3055 (0xbef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:34:20 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=789FB5BA0C778AC4A407901CB0D6CA96B47A8CD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:10:15:dc:f6:a4:99:8c:f2:eb:19:5c:e8:
2d:ed:9c:9b:36:df:5a:7a:69:47:c3:a5:a6:76:0e:
3b:e3:fe:e2:54:4e:1c:04:c9:cc:90:da:1b:2d:1b:
59:1f:4c:48:ca:91:f0:89:22:48:da:ed:0d:69:24:
06:2c:f5:18:0d:18:1a:a5:12:d3:58:66:b6:6d:92:
c6:7f:1e:f9:7c:af:8a:f3:e0:be:6f:0b:3e:01:90:
2e:e2:dd:29:93:87:e2:ea:a9:1e:86:43:fe:a4:1d:
ad:f1:19:31:a1:2e:4a:bc:44:6a:48:61:8a:51:5c:
26:21:8a:90:44:79:d4:64:08:f2:32:74:98:2e:56:
37:2d:06:a0:99:a5:8e:b7:4e:d5:b3:f0:6e:9d:d7:
58:53:46:2e:9a:cc:0c:75:f4:e9:71:cf:e4:78:87:
1b:54:1d:a9:86:5c:2a:a5:2b:31:c1:c2:10:73:7d:
f5:32:83:83:ef:1a:39:95:d0:d9:1e:51:c0:0c:88:
a7:9f:90:8e:4e:19:f9:84:b3:55:8c:f9:51:12:46:
7c:77:53:74:59:8d:75:b0:35:5c:c0:cb:83:95:97:
de:83:85:1f:76:68:5e:7b:d8:03:15:da:c2:8b:ca:
46:69:18:be:08:2f:36:e2:a1:32:b0:77:ce:f6:e2:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9F:B5:BA:0C:77:8A:C4:A4:07:90:1C:B0:D6:CA:96:B4:7A:8C:D0
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/eJ-1ugx3isSkB5AcsNbKlrR6jNA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:d1:b9:6d:98:0b:3e:dc:f4:01:7f:ac:8d:c1:f1:89:d5:be:
69:a1:a0:5c:66:9d:89:3b:7e:32:67:97:d1:7e:03:4d:68:32:
25:99:ec:2c:09:29:ac:04:d1:27:3f:47:c8:76:f6:a7:3d:f6:
f4:9f:3f:7c:7b:7d:31:9c:00:2f:eb:66:7d:1d:b4:28:bb:c3:
cb:a8:d9:e0:17:31:54:be:35:d4:e3:a9:7b:61:b0:62:46:63:
82:54:43:87:14:56:2e:bf:32:dc:8b:65:f6:6b:e0:69:05:bb:
c9:4e:9e:07:65:d8:6a:74:dd:66:0c:6c:19:d9:25:2a:92:b2:
a7:23:8e:9d:3c:63:41:6a:e5:d4:ff:dd:ad:2e:c6:b4:9e:5d:
29:dd:2a:8a:60:b1:f5:75:10:0f:4e:f3:76:86:8f:e4:54:bb:
9d:8a:ec:58:1a:21:d2:56:50:07:f0:ea:5f:11:5d:5b:31:bf:
39:79:01:fd:4e:ae:bc:8a:99:47:b9:29:3e:4d:0f:3f:bc:e0:
9d:21:63:41:07:ae:7c:93:ca:7e:d6:c5:b6:e5:a3:d9:b9:40:
e0:cf:1a:ab:98:71:38:22:b9:d2:88:56:bb:a7:8b:2e:91:ab:
c2:bb:e6:89:73:25:92:45:ef:ec:f4:f4:36:f1:5d:62:3e:1d:
ed:32:82:b5
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICC+8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTAyMDcx
MTM0MjBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDc4OUZCNUJBMEM3NzhB
QzRBNDA3OTAxQ0IwRDZDQTk2QjQ3QThDRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTWRAV3PakmYzy6xlc6C3tnJs231p6aUfDpaZ2Djvj/uJUThwE
ycyQ2hstG1kfTEjKkfCJIkja7Q1pJAYs9RgNGBqlEtNYZrZtksZ/Hvl8r4rz4L5v
Cz4BkC7i3SmTh+LqqR6GQ/6kHa3xGTGhLkq8RGpIYYpRXCYhipBEedRkCPIydJgu
VjctBqCZpY63TtWz8G6d11hTRi6azAx19Olxz+R4hxtUHamGXCqlKzHBwhBzffUy
g4PvGjmV0NkeUcAMiKefkI5OGfmEs1WM+VESRnx3U3RZjXWwNVzAy4OVl96DhR92
aF572AMV2sKLykZpGL4ILzbioTKwd8724stTAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUeJ+1ugx3isSkB5AcsNbKlrR6jNAwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvZUotMXVneDNpc1NrQjVBY3NOYkts
clI2ak5BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANLJMA0G
CSqGSIb3DQEBCwUAA4IBAQBx0bltmAs+3PQBf6yNwfGJ1b5poaBcZp2JO34yZ5fR
fgNNaDIlmewsCSmsBNEnP0fIdvanPfb0nz98e30xnAAv62Z9HbQou8PLqNngFzFU
vjXU46l7YbBiRmOCVEOHFFYuvzLci2X2a+BpBbvJTp4HZdhqdN1mDGwZ2SUqkrKn
I46dPGNBauXU/92tLsa0nl0p3SqKYLH1dRAPTvN2ho/kVLudiuxYGiHSVlAH8Opf
EV1bMb85eQH9Tq68iplHuSk+TQ8/vOCdIWNBB658k8p+1sW25aPZuUDgzxqrmHE4
IrnSiFa7p4sukavCu+aJcyWSRe/s9PQ28V1iPh3tMoK1
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org