Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/hRplhm0G_b4lpzCvJz3-_SRIDoY.roa
File: hRplhm0G_b4lpzCvJz3-_SRIDoY.roa (raw, json)
Hash identifier: Urv+ZuV27AI6XBhB72b+cuqHe8N3Prbg6lDqHm6sANQ=
Subject key identifier: 85:1A:65:86:6D:06:FD:BE:25:A7:30:AF:27:3D:FE:FD:24:48:0E:86
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1091
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/hRplhm0G_b4lpzCvJz3-_SRIDoY.roa
Signing time: Tue 16 May 2023 08:36:21 +0000
ROA not before: Tue 16 May 2023 08:36:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 203.79.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4241 (0x1091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:21 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=851A65866D06FDBE25A730AF273DFEFD24480E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e3:c3:02:3f:38:6d:e0:fb:a5:d0:f0:4d:92:
a0:37:b4:35:c6:ed:21:3c:b2:ef:11:ce:a0:72:ca:
cd:e6:c9:28:5d:93:99:df:44:26:16:f7:f5:88:6f:
6b:ad:8a:9e:89:37:d9:a2:02:46:58:6c:1f:e6:e4:
a3:d3:d4:24:50:25:fd:1c:70:a6:10:7b:4b:ba:15:
36:ec:d9:53:59:16:da:29:55:49:c7:ab:30:22:1c:
0b:5a:90:14:75:a1:c8:02:78:8b:19:8e:5f:f2:42:
dc:0b:ac:f7:ed:cf:e5:98:35:6d:dd:52:ab:82:e0:
dc:59:46:2e:74:de:20:89:51:5c:c5:f5:1e:3b:bb:
79:1d:8e:3a:77:fe:7a:79:25:f5:6c:18:26:49:20:
1d:ca:fe:45:b7:21:80:c1:31:ac:2d:54:fc:80:61:
21:8c:9a:80:5d:e0:83:2d:5f:80:51:30:92:08:ce:
4f:dc:fb:c6:78:bc:b1:59:95:10:9a:bd:b9:99:c5:
46:2a:bd:e3:5e:23:31:85:cf:64:c1:ef:ee:f2:36:
8e:bc:c3:c0:ec:20:b5:37:77:77:10:aa:05:f7:ec:
41:11:a4:48:5e:4d:a5:bc:b4:76:0f:cb:b8:33:89:
66:af:7c:2b:c6:0d:a0:4c:da:f4:f3:24:90:f8:7e:
27:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1A:65:86:6D:06:FD:BE:25:A7:30:AF:27:3D:FE:FD:24:48:0E:86
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/hRplhm0G_b4lpzCvJz3-_SRIDoY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.248.0/21
Signature Algorithm: sha256WithRSAEncryption
56:21:12:e8:b5:0f:57:97:ba:49:88:8f:be:15:97:a3:fc:24:
f8:62:cb:d6:9d:e2:a0:e2:b0:bb:98:6d:b4:08:82:94:96:65:
1b:88:20:2d:d7:a3:e3:ba:3c:3e:fc:07:54:5c:08:d8:33:13:
b6:56:a9:8e:a3:c2:3c:3e:e8:56:c1:da:5f:e7:a8:6b:aa:86:
92:22:65:ec:d7:0c:2f:1c:5b:f0:82:34:e7:b8:1c:ba:8f:b5:
7b:c4:18:e5:76:ba:68:95:c5:75:67:e2:93:5a:08:70:99:0e:
31:d3:88:5c:55:08:67:70:44:df:a2:49:5d:62:d5:3e:74:e7:
f6:d6:db:b1:73:d2:f8:82:a1:b3:d2:3f:f6:5f:72:6e:aa:5c:
fd:8a:1f:10:04:e9:dd:ff:11:77:f4:67:11:ed:99:f7:eb:b3:
a3:58:72:68:93:45:d1:44:00:e0:b6:c3:1e:47:f6:4c:7c:b4:
f5:d8:f8:76:73:3d:58:a9:2c:a9:d0:76:5e:92:53:ae:4c:a7:
a8:e9:df:8c:00:7a:0b:45:3c:0c:e2:83:e7:43:93:1c:8f:11:
21:49:76:53:bb:58:b2:5d:3a:52:95:cf:41:e0:8e:91:b6:c8:
88:15:80:b4:1c:01:fa:ea:ef:7c:d3:09:8f:4b:cf:4f:3e:78:
e3:74:82:e1
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA1MTYw
ODM2MjFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDg1MUE2NTg2NkQwNkZE
QkUyNUE3MzBBRjI3M0RGRUZEMjQ0ODBFODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDV48MCPzht4Pul0PBNkqA3tDXG7SE8su8RzqByys3myShdk5nf
RCYW9/WIb2utip6JN9miAkZYbB/m5KPT1CRQJf0ccKYQe0u6FTbs2VNZFtopVUnH
qzAiHAtakBR1ocgCeIsZjl/yQtwLrPftz+WYNW3dUquC4NxZRi503iCJUVzF9R47
u3kdjjp3/np5JfVsGCZJIB3K/kW3IYDBMawtVPyAYSGMmoBd4IMtX4BRMJIIzk/c
+8Z4vLFZlRCavbmZxUYqveNeIzGFz2TB7+7yNo68w8DsILU3d3cQqgX37EERpEhe
TaW8tHYPy7gziWavfCvGDaBM2vTzJJD4ficpAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUhRplhm0G/b4lpzCvJz3+/SRIDoYwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvaFJwbGhtMEdfYjRscHpDdkp6My1f
U1JJRG9ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8tP+DAN
BgkqhkiG9w0BAQsFAAOCAQEAViES6LUPV5e6SYiPvhWXo/wk+GLL1p3ioOKwu5ht
tAiClJZlG4ggLdej47o8PvwHVFwI2DMTtlapjqPCPD7oVsHaX+eoa6qGkiJl7NcM
Lxxb8II057gcuo+1e8QY5Xa6aJXFdWfik1oIcJkOMdOIXFUIZ3BE36JJXWLVPnTn
9tbbsXPS+IKhs9I/9l9ybqpc/YofEATp3f8Rd/RnEe2Z9+uzo1hyaJNF0UQA4LbD
Hkf2THy09dj4dnM9WKksqdB2XpJTrkynqOnfjAB6C0U8DOKD50OTHI8RIUl2U7tY
sl06UpXPQeCOkbbIiBWAtBwB+urvfNMJj0vPTz5443SC4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org