Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/h0IBQH0xDIhMznH7rilHZtj5Dlw.roa
File: h0IBQH0xDIhMznH7rilHZtj5Dlw.roa (raw, json)
Hash identifier: aKNnVyR6PTwvyf8J0RBAUIAoUk7UW40QGb5wtHunXbU=
Subject key identifier: 87:42:01:40:7D:31:0C:88:4C:CE:71:FB:AE:29:47:66:D8:F9:0E:5C
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12DB
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/h0IBQH0xDIhMznH7rilHZtj5Dlw.roa
Signing time: Fri 01 Sep 2023 08:05:05 +0000
ROA not before: Fri 01 Sep 2023 08:05:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.202.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4827 (0x12db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=874201407D310C884CCE71FBAE294766D8F90E5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8f:e1:6e:8c:0c:68:e3:09:20:10:48:db:ca:
39:52:fd:fb:ed:5e:a1:33:df:06:e7:24:97:15:21:
66:82:5e:b9:08:cb:02:e0:a8:6b:cf:ff:be:bd:0b:
35:fa:53:ab:7f:d2:5d:71:46:d1:c0:f4:a0:86:8f:
51:7e:47:93:c4:49:e8:a2:3d:1f:cb:70:9c:c5:aa:
1f:3a:ab:bd:f6:80:bd:e1:ac:89:69:f6:42:6f:cc:
10:58:c0:ba:96:6e:5d:b1:90:24:21:ec:9e:37:1a:
0c:ff:45:d0:6f:9f:4c:a2:09:12:fc:c7:ae:d6:af:
db:88:1a:d8:18:c3:9b:bd:40:62:a5:f8:88:39:1c:
ac:c4:52:9e:90:75:08:e1:5f:01:a7:0c:a7:7c:11:
5a:39:bb:88:e6:57:3a:62:49:b7:1d:2a:bd:dc:fc:
64:a6:be:06:b7:1f:f5:36:e4:e5:03:f5:46:75:7c:
44:a9:88:b2:e0:a4:30:8f:79:cd:fd:34:77:c0:46:
b0:2b:85:f8:4b:15:b9:47:01:b7:a5:da:7a:d7:9b:
4b:5b:63:79:5e:9b:3f:46:18:0d:cb:de:09:fc:95:
b2:6e:89:48:c5:70:0c:76:95:02:60:6b:02:a4:fd:
a9:12:98:82:6e:01:d2:8c:84:ed:a1:a4:09:f2:f6:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:42:01:40:7D:31:0C:88:4C:CE:71:FB:AE:29:47:66:D8:F9:0E:5C
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/h0IBQH0xDIhMznH7rilHZtj5Dlw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.128.0/17
Signature Algorithm: sha256WithRSAEncryption
60:3a:4e:54:0c:87:d4:31:06:26:7b:3b:22:3b:7b:a5:2d:b6:
ee:54:ef:d4:0e:7e:0a:35:e5:c3:61:5c:23:a3:11:ca:1a:c7:
18:43:b8:f7:34:86:9f:7b:73:cc:1f:a5:9e:7a:a9:cb:90:d0:
84:26:5a:d6:2a:3c:99:9e:9b:6a:c8:5b:e7:0a:27:9e:17:7f:
51:f5:68:ce:bd:19:12:b6:29:d6:e6:54:6c:e0:b0:92:f3:5c:
4d:04:46:d4:69:bd:f5:47:41:1c:c0:57:46:28:bc:23:cf:09:
e1:88:25:dd:d3:01:01:a5:35:72:6f:cf:9d:4d:6a:5a:ce:73:
13:55:14:80:c8:75:13:34:f8:d8:bd:26:94:d0:b4:8e:37:20:
06:aa:da:9a:c5:6a:12:d1:1c:7a:65:4f:fb:68:68:f3:d3:5b:
a7:f3:49:7d:68:47:fc:85:92:ca:77:8e:d4:ea:81:5e:3c:9c:
4e:45:61:40:45:00:17:a1:5a:c3:53:41:4c:18:c9:8c:eb:e2:
24:64:6a:68:96:95:ae:a9:e1:65:71:f1:b7:4d:ed:8f:1f:b8:
bc:ae:d3:dc:a4:2b:9f:0e:a2:b6:6f:4d:7e:39:48:cf:3c:ef:
e2:48:f1:45:76:8f:b0:3c:de:18:48:30:49:36:4a:ab:a7:53:
5a:df:cd:1f
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEtswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA1MDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg3NDIwMTQwN0QzMTBD
ODg0Q0NFNzFGQkFFMjk0NzY2RDhGOTBFNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdj+FujAxo4wkgEEjbyjlS/fvtXqEz3wbnJJcVIWaCXrkIywLg
qGvP/769CzX6U6t/0l1xRtHA9KCGj1F+R5PESeiiPR/LcJzFqh86q732gL3hrIlp
9kJvzBBYwLqWbl2xkCQh7J43Ggz/RdBvn0yiCRL8x67Wr9uIGtgYw5u9QGKl+Ig5
HKzEUp6QdQjhXwGnDKd8EVo5u4jmVzpiSbcdKr3c/GSmvga3H/U25OUD9UZ1fESp
iLLgpDCPec39NHfARrArhfhLFblHAbel2nrXm0tbY3lemz9GGA3L3gn8lbJuiUjF
cAx2lQJgawKk/akSmIJuAdKMhO2hpAny9sDpAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUh0IBQH0xDIhMznH7rilHZtj5DlwwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvaDBJQlFIMHhESWhNem5IN3JpbEha
dGo1RGx3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9LKgDAN
BgkqhkiG9w0BAQsFAAOCAQEAYDpOVAyH1DEGJns7Ijt7pS227lTv1A5+CjXlw2Fc
I6MRyhrHGEO49zSGn3tzzB+lnnqpy5DQhCZa1io8mZ6bashb5wonnhd/UfVozr0Z
ErYp1uZUbOCwkvNcTQRG1Gm99UdBHMBXRii8I88J4Ygl3dMBAaU1cm/PnU1qWs5z
E1UUgMh1EzT42L0mlNC0jjcgBqramsVqEtEcemVP+2ho89Nbp/NJfWhH/IWSyneO
1OqBXjycTkVhQEUAF6Faw1NBTBjJjOviJGRqaJaVrqnhZXHxt03tjx+4vK7T3KQr
nw6itm9NfjlIzzzv4kjxRXaPsDzeGEgwSTZKq6dTWt/NHw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org