Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/jMMhtitsUNtwiAdbor8pZZRH4-E.roa
File: jMMhtitsUNtwiAdbor8pZZRH4-E.roa (raw, json)
Hash identifier: dV2+AF9OIDNpqMlBAG2L1jW1qiuq/r9cJHsCEf3v1fk=
Subject key identifier: 8C:C3:21:B6:2B:6C:50:DB:70:88:07:5B:A2:BF:29:65:94:47:E3:E1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 090B
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/jMMhtitsUNtwiAdbor8pZZRH4-E.roa
Signing time: Tue 29 Sep 2020 10:01:24 +0000
ROA not before: Tue 29 Sep 2020 10:01:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131591
IP address blocks: 2404:0:8000::/36 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315 (0x90b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:24 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8CC321B62B6C50DB7088075BA2BF29659447E3E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:61:1d:f0:12:ed:b9:f3:2d:1f:c5:65:14:
90:e5:f5:d4:c4:40:5b:6b:d2:a3:8f:a8:c6:ad:98:
7c:47:4f:16:03:70:d3:93:e2:1b:60:86:0f:1f:83:
9b:8b:cb:a8:16:c9:c2:7f:13:84:ac:95:7b:65:30:
a5:15:19:43:d6:a4:c9:34:be:57:ac:be:3d:d6:25:
35:38:8a:74:fd:9a:7f:82:00:fa:8f:dc:89:55:ba:
e3:e3:20:57:5c:c7:68:c1:00:9b:a5:e6:2f:e4:d7:
02:ea:03:77:3d:f9:1e:eb:a5:7d:b2:54:3f:32:c4:
48:a6:fd:f0:15:94:07:39:63:06:67:68:1c:13:ef:
59:a2:29:ad:bc:41:c3:7f:43:6f:2f:d6:34:67:ae:
bc:7f:d9:19:15:04:53:3d:74:a1:53:d1:b1:b8:c0:
88:56:bb:45:c9:86:bf:ff:8b:44:fc:4f:cf:d7:46:
bc:5e:ad:e1:0a:a7:ea:9f:6c:dc:04:09:89:67:e4:
e8:5a:8b:f3:4c:04:db:9c:7b:29:c2:ac:95:70:94:
b5:5c:74:b5:87:9f:51:06:df:93:4f:36:f1:05:37:
74:63:e8:18:6e:7b:a4:fe:35:75:ed:66:f7:4b:34:
d2:ab:49:d0:72:61:b1:b1:6d:26:c4:77:85:61:b1:
6f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C3:21:B6:2B:6C:50:DB:70:88:07:5B:A2:BF:29:65:94:47:E3:E1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/jMMhtitsUNtwiAdbor8pZZRH4-E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:8000::/36
Signature Algorithm: sha256WithRSAEncryption
87:f6:ca:fa:7f:df:8a:22:24:2c:22:53:85:2e:6b:44:b9:05:
de:c5:17:5c:f4:32:38:dd:92:a9:cc:1b:33:22:06:9e:cb:95:
1f:92:07:34:6e:a6:c0:9e:5e:80:37:84:1e:37:d8:2a:69:d3:
c5:c6:20:8f:17:cd:44:af:44:59:09:0c:67:3d:a3:1b:5b:cd:
15:17:f6:96:dc:5e:93:8f:f1:b2:be:49:b7:f5:2c:9f:a5:0c:
e2:33:1f:9c:a8:29:12:92:29:c3:07:44:40:d1:c2:31:2a:4e:
e1:bf:d3:b2:88:6b:b0:76:93:24:77:74:7a:2e:1f:60:9c:83:
f3:3f:fc:2d:72:e2:c6:f4:d8:80:a5:a6:eb:ca:c8:3b:e6:9a:
82:22:26:68:d3:19:5c:2c:7e:2e:87:9a:18:0b:d9:33:63:4b:
fc:88:dd:b3:06:f7:7b:5f:2f:df:23:c8:f7:67:7f:22:cc:60:
f0:21:3a:6c:4a:29:61:16:27:a5:9a:22:3c:d4:24:89:19:4b:
8c:56:e2:02:23:5c:62:6d:61:8b:95:42:a0:b9:2f:7e:01:a7:
95:41:fc:9a:15:88:30:47:a0:f4:1d:f2:1c:2d:32:d6:a4:a3:
c8:a7:1e:cc:a7:05:3c:9e:9d:6f:26:39:93:ca:1c:2e:28:53:
7d:6f:60:ac
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMDA5Mjkx
MDAxMjRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDhDQzMyMUI2MkI2QzUw
REI3MDg4MDc1QkEyQkYyOTY1OTQ0N0UzRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCus2Ed8BLtufMtH8VlFJDl9dTEQFtr0qOPqMatmHxHTxYDcNOT
4htghg8fg5uLy6gWycJ/E4SslXtlMKUVGUPWpMk0vlesvj3WJTU4inT9mn+CAPqP
3IlVuuPjIFdcx2jBAJul5i/k1wLqA3c9+R7rpX2yVD8yxEim/fAVlAc5YwZnaBwT
71miKa28QcN/Q28v1jRnrrx/2RkVBFM9dKFT0bG4wIhWu0XJhr//i0T8T8/XRrxe
reEKp+qfbNwECYln5Ohai/NMBNuceynCrJVwlLVcdLWHn1EG35NPNvEFN3Rj6Bhu
e6T+NXXtZvdLNNKrSdByYbGxbSbEd4VhsW/rAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUjMMhtitsUNtwiAdbor8pZZRH4+EwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvak1NaHRpdHNVTnR3aUFkYm9yOHBa
WlJINC1FLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCQEAACA
MA0GCSqGSIb3DQEBCwUAA4IBAQCH9sr6f9+KIiQsIlOFLmtEuQXexRdc9DI43ZKp
zBszIgaey5Ufkgc0bqbAnl6AN4QeN9gqadPFxiCPF81Er0RZCQxnPaMbW80VF/aW
3F6Tj/Gyvkm39SyfpQziMx+cqCkSkinDB0RA0cIxKk7hv9OyiGuwdpMkd3R6Lh9g
nIPzP/wtcuLG9NiApabrysg75pqCIiZo0xlcLH4uh5oYC9kzY0v8iN2zBvd7Xy/f
I8j3Z38izGDwITpsSilhFielmiI81CSJGUuMVuICI1xibWGLlUKguS9+AaeVQfya
FYgwR6D0HfIcLTLWpKPIpx7MpwU8np1vJjmTyhwuKFN9b2Cs
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org