Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/gGL0XwYBlYShKsdS8ux-rvzMczU.roa
File: gGL0XwYBlYShKsdS8ux-rvzMczU.roa (raw, json)
Hash identifier: StAmHaZeyn/InAMSZBj1XzlEJwj1TLcisVYsH1MwYDc=
Subject key identifier: 80:62:F4:5F:06:01:95:84:A1:2A:C7:52:F2:EC:7E:AE:FC:CC:73:35
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C7D
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/gGL0XwYBlYShKsdS8ux-rvzMczU.roa
Signing time: Sun 07 Feb 2021 11:39:48 +0000
ROA not before: Sun 07 Feb 2021 11:39:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 210.201.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3197 (0xc7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:39:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8062F45F06019584A12AC752F2EC7EAEFCCC7335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:8e:da:2a:9b:e3:dc:3e:7a:65:39:47:7b:
be:64:c3:6a:a2:b6:f8:c2:f2:93:c5:81:4f:7a:51:
91:66:44:51:ff:f0:cb:fe:7e:a8:3b:9f:18:ea:be:
e4:d6:59:6a:2f:d0:bb:07:c3:0c:c7:50:13:d7:f1:
79:94:09:86:09:d3:70:3a:99:a9:72:0c:53:f5:e0:
2f:40:5f:33:3d:b2:75:27:4a:fc:3d:22:9e:e4:5a:
b6:29:d6:05:7e:a3:19:81:76:2e:de:0a:d1:38:c4:
2d:29:89:85:ec:f5:37:b4:5a:ac:4f:a5:d9:ee:e0:
4c:e1:ec:98:8c:36:51:d3:27:94:cb:ce:cb:c2:7f:
55:30:10:6a:8a:c2:87:94:7c:0b:a8:f3:83:89:b5:
de:8c:0b:43:ca:b0:ca:17:a9:60:86:1d:f1:63:60:
ac:fc:08:ba:f4:c2:b6:02:66:36:5c:d1:0e:b5:a8:
37:ae:a0:a0:ee:3d:e2:3a:9a:d5:0b:92:70:af:2b:
60:47:13:13:c9:af:aa:30:09:d9:6f:c0:0d:d2:c0:
6e:f4:a6:0e:52:13:4c:b6:2f:0a:4e:f0:a4:13:18:
4d:8a:cd:9a:8f:07:6a:c9:99:6b:23:c0:eb:dd:7e:
bc:d7:20:39:b8:1d:6e:b7:8a:50:ee:32:8b:4b:db:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:62:F4:5F:06:01:95:84:A1:2A:C7:52:F2:EC:7E:AE:FC:CC:73:35
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/gGL0XwYBlYShKsdS8ux-rvzMczU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:2b:f1:f1:3c:78:bb:2a:b8:da:2f:e3:ec:44:cb:9e:ef:1d:
00:8c:d9:c2:d0:7c:7a:0b:1e:1b:54:12:97:b5:b5:ce:72:1d:
c9:b8:7b:5f:e8:85:4e:49:20:9f:7a:43:d1:49:d9:ec:18:67:
27:c1:47:ec:c5:59:fc:7b:5a:cd:96:ae:b7:43:db:4e:35:78:
ae:74:22:a5:4c:44:3d:59:4c:4a:08:75:23:51:a6:99:a9:b8:
df:9d:02:43:75:9d:06:2b:45:b2:ab:64:5d:dd:12:33:28:a7:
ce:85:ff:ab:e3:a0:24:61:a9:db:e1:3e:41:da:ad:de:a4:20:
07:80:54:02:3f:a8:7c:04:7e:b2:a8:d4:f3:b2:20:0c:f5:42:
54:31:fa:ee:56:1c:0a:22:f5:14:24:7e:f1:9e:76:6e:75:b6:
4a:32:8c:8e:ce:c0:82:46:e3:78:4f:5a:42:4f:ea:15:cd:dd:
9f:90:9d:ee:12:0c:34:ad:7f:88:73:00:02:2e:96:47:b3:91:
7f:41:65:6a:ab:e3:7f:6d:5d:19:cb:a8:58:58:cc:d3:32:49:
f4:60:eb:98:09:8d:fb:0f:12:48:d2:7f:c3:7e:33:68:71:d4:
78:e0:aa:13:3b:71:f0:36:9b:5b:8b:81:6f:e8:f8:df:00:bc:
7a:eb:8b:9b
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICDH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTAyMDcx
MTM5NDhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDgwNjJGNDVGMDYwMTk1
ODRBMTJBQzc1MkYyRUM3RUFFRkNDQzczMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWho7aKpvj3D56ZTlHe75kw2qitvjC8pPFgU96UZFmRFH/8Mv+
fqg7nxjqvuTWWWov0LsHwwzHUBPX8XmUCYYJ03A6malyDFP14C9AXzM9snUnSvw9
Ip7kWrYp1gV+oxmBdi7eCtE4xC0piYXs9Te0WqxPpdnu4Ezh7JiMNlHTJ5TLzsvC
f1UwEGqKwoeUfAuo84OJtd6MC0PKsMoXqWCGHfFjYKz8CLr0wrYCZjZc0Q61qDeu
oKDuPeI6mtULknCvK2BHExPJr6owCdlvwA3SwG70pg5SE0y2LwpO8KQTGE2KzZqP
B2rJmWsjwOvdfrzXIDm4HW63ilDuMotL2wshAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUgGL0XwYBlYShKsdS8ux+rvzMczUwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvZ0dMMFh3WUJsWVNoS3NkUzh1eC1y
dnpNY3pVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANLJMA0G
CSqGSIb3DQEBCwUAA4IBAQClK/HxPHi7KrjaL+PsRMue7x0AjNnC0Hx6Cx4bVBKX
tbXOch3JuHtf6IVOSSCfekPRSdnsGGcnwUfsxVn8e1rNlq63Q9tONXiudCKlTEQ9
WUxKCHUjUaaZqbjfnQJDdZ0GK0Wyq2Rd3RIzKKfOhf+r46AkYanb4T5B2q3epCAH
gFQCP6h8BH6yqNTzsiAM9UJUMfruVhwKIvUUJH7xnnZudbZKMoyOzsCCRuN4T1pC
T+oVzd2fkJ3uEgw0rX+IcwACLpZHs5F/QWVqq+N/bV0Zy6hYWMzTMkn0YOuYCY37
DxJI0n/DfjNocdR44KoTO3HwNptbi4Fv6PjfALx664ub
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org