Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/k1PnfKtINQ2UyqTPFFrWd6Awupg.roa
File: k1PnfKtINQ2UyqTPFFrWd6Awupg.roa (raw, json)
Hash identifier: J/j8uK3kuI2BoKoJ8pJSqwu0YGMys13/8MqAMwXBxoo=
Subject key identifier: 93:53:E7:7C:AB:48:35:0D:94:CA:A4:CF:14:5A:D6:77:A0:30:BA:98
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10B1
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/k1PnfKtINQ2UyqTPFFrWd6Awupg.roa
Signing time: Tue 16 May 2023 08:36:30 +0000
ROA not before: Tue 16 May 2023 08:36:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24154
IP address blocks: 124.219.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4273 (0x10b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:30 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9353E77CAB48350D94CAA4CF145AD677A030BA98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:1a:62:d9:c7:50:16:9b:39:f1:e0:65:a1:
64:1d:29:be:e1:7e:4e:64:a8:6c:63:0e:5d:42:3d:
cf:f7:10:04:bc:28:06:14:96:b8:c8:eb:9b:39:11:
38:67:75:af:01:ae:dd:84:23:b2:93:1d:9e:6f:ae:
78:9f:fa:76:0a:e1:55:de:c6:c5:dc:6d:db:60:75:
78:16:e4:55:1a:af:93:36:ba:95:33:b9:77:d1:a0:
ba:ca:1c:f0:df:64:a5:de:28:31:e8:d2:2a:e6:2f:
bc:7b:b3:a4:89:cb:4f:18:3e:ce:70:56:f9:39:50:
93:d2:70:b4:4a:b4:e5:91:1d:c9:01:9b:1b:6f:85:
f8:76:77:4e:0b:44:ad:e0:21:91:3c:cf:3a:ff:0d:
2a:5f:34:49:8e:78:5e:9c:05:6b:59:1d:f1:39:4c:
bd:eb:7b:6d:76:9c:d1:e1:1f:82:74:33:c3:fa:80:
c1:aa:4f:d4:50:b3:98:c9:7c:aa:c1:dd:51:58:72:
24:51:49:30:a0:ca:22:ed:1b:5d:d0:f5:4b:34:8e:
18:0e:7b:3d:d4:7d:44:52:ae:06:8a:b4:56:b3:46:
bb:15:e6:f7:2d:2c:c3:79:fe:45:b4:bf:91:81:d0:
e8:7b:a2:9b:04:e3:48:d6:50:4b:07:93:b7:f3:59:
b7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:53:E7:7C:AB:48:35:0D:94:CA:A4:CF:14:5A:D6:77:A0:30:BA:98
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/k1PnfKtINQ2UyqTPFFrWd6Awupg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.219.0.0/17
Signature Algorithm: sha256WithRSAEncryption
1f:a8:7e:ec:8e:e2:35:9d:2f:73:26:f9:80:0b:77:87:73:b1:
91:a8:fe:05:da:9b:c9:78:43:ca:03:32:18:95:89:6b:45:55:
c9:8e:da:f0:0f:90:0d:2a:a1:2b:8a:2d:15:4b:49:c5:02:43:
85:a9:2c:14:fd:87:7a:6c:c2:98:a3:e1:f4:98:10:1e:bd:77:
bf:71:16:9a:94:6e:38:f7:8a:0d:fc:48:fa:bc:51:95:64:eb:
bb:83:41:f6:b6:a6:fb:0d:e9:2b:08:be:51:85:3c:fc:67:f9:
04:ff:f2:b3:db:b0:cd:18:a2:92:d2:0a:9f:60:fd:c3:6e:61:
bc:fd:a0:2a:ee:c2:90:4f:0b:39:44:12:32:ba:f8:42:4c:9f:
24:85:0a:d5:ab:bd:a3:e1:3b:2f:54:5c:c7:73:f7:f5:0d:3a:
bf:9e:06:11:32:40:5b:51:79:d3:92:21:d3:40:f7:4e:a4:60:
b3:63:fb:46:8c:31:f7:66:43:0c:42:c8:99:26:76:3e:3f:cc:
67:dc:26:5b:63:d8:51:b6:0d:e4:2f:58:a0:55:f0:9f:02:3a:
0a:08:ef:23:70:2f:45:81:76:a7:af:10:27:d0:15:b1:1c:65:
1a:9c:5e:73:c1:de:2b:af:7c:38:85:9a:2d:03:a5:0c:5b:87:
c8:91:94:07
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICELEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA1MTYw
ODM2MzBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDkzNTNFNzdDQUI0ODM1
MEQ5NENBQTRDRjE0NUFENjc3QTAzMEJBOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDUBpi2cdQFps58eBloWQdKb7hfk5kqGxjDl1CPc/3EAS8KAYU
lrjI65s5EThnda8Brt2EI7KTHZ5vrnif+nYK4VXexsXcbdtgdXgW5FUar5M2upUz
uXfRoLrKHPDfZKXeKDHo0irmL7x7s6SJy08YPs5wVvk5UJPScLRKtOWRHckBmxtv
hfh2d04LRK3gIZE8zzr/DSpfNEmOeF6cBWtZHfE5TL3re212nNHhH4J0M8P6gMGq
T9RQs5jJfKrB3VFYciRRSTCgyiLtG13Q9Us0jhgOez3UfURSrgaKtFazRrsV5vct
LMN5/kW0v5GB0Oh7opsE40jWUEsHk7fzWbc7AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUk1PnfKtINQ2UyqTPFFrWd6AwupgwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvazFQbmZLdElOUTJVeXFUUEZGcldk
NkF3dXBnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3zbADAN
BgkqhkiG9w0BAQsFAAOCAQEAH6h+7I7iNZ0vcyb5gAt3h3Oxkaj+BdqbyXhDygMy
GJWJa0VVyY7a8A+QDSqhK4otFUtJxQJDhaksFP2HemzCmKPh9JgQHr13v3EWmpRu
OPeKDfxI+rxRlWTru4NB9ram+w3pKwi+UYU8/Gf5BP/ys9uwzRiiktIKn2D9w25h
vP2gKu7CkE8LOUQSMrr4QkyfJIUK1au9o+E7L1Rcx3P39Q06v54GETJAW1F505Ih
00D3TqRgs2P7Rowx92ZDDELImSZ2Pj/MZ9wmW2PYUbYN5C9YoFXwnwI6CgjvI3Av
RYF2p68QJ9AVsRxlGpxec8HeK698OIWaLQOlDFuHyJGUBw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org