Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/kUSsr1st4dOBw2wauHv48LcYy5c.roa
File: kUSsr1st4dOBw2wauHv48LcYy5c.roa (raw, json)
Hash identifier: dO3/Rh+RiJJA5uY4n3Xc1i5I8xcIFLvZJ2TIHG/daJY=
Subject key identifier: 91:44:AC:AF:5B:2D:E1:D3:81:C3:6C:1A:B8:7B:F8:F0:B7:18:CB:97
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 131F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/kUSsr1st4dOBw2wauHv48LcYy5c.roa
Signing time: Fri 01 Sep 2023 08:05:24 +0000
ROA not before: Fri 01 Sep 2023 08:05:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24154
IP address blocks: 210.202.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4895 (0x131f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9144ACAF5B2DE1D381C36C1AB87BF8F0B718CB97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:12:2e:01:e9:ef:d3:38:09:ae:ad:cb:c0:
20:46:a9:2e:7a:b4:a8:4d:c0:d1:d5:81:4b:fd:bb:
52:1a:52:61:5b:b2:00:42:ad:0d:39:49:35:22:71:
dd:4d:eb:12:76:d8:98:d2:bf:dc:d7:af:f1:db:6d:
2e:b6:b8:c2:02:28:e6:7f:ea:29:46:38:1f:65:dd:
bd:5b:b7:47:fc:30:b9:e8:75:5c:b9:c8:f7:d8:fe:
91:5e:0b:d0:8a:ec:3f:29:45:d1:29:cb:a0:bf:b9:
3c:c3:8a:0b:51:d4:de:c4:ca:48:4f:b0:5e:66:8c:
33:4d:e1:99:ea:7e:00:23:11:04:cd:6e:75:f5:7e:
2d:c9:68:d1:9f:e2:95:4d:2f:5d:e1:b5:c6:3f:f1:
30:86:e9:fb:8d:c3:fa:34:5f:1e:63:a5:d2:8a:e3:
c9:fe:27:d7:dd:42:0f:09:55:1e:04:df:55:77:db:
df:c6:c5:d3:30:f8:91:62:4a:5a:5a:0a:51:0a:18:
ba:2e:cc:ab:ec:a1:61:62:37:e8:c9:a1:16:e1:d5:
1b:c4:39:01:1c:e3:5a:26:fc:32:32:fa:ce:e8:ab:
e7:8f:be:38:04:82:80:24:f3:a3:fe:a1:fb:4a:f3:
4b:e7:bf:55:79:da:24:ba:33:83:fd:bf:94:69:ee:
69:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:44:AC:AF:5B:2D:E1:D3:81:C3:6C:1A:B8:7B:F8:F0:B7:18:CB:97
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/kUSsr1st4dOBw2wauHv48LcYy5c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.32.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:3d:6d:fb:6e:b8:72:99:9a:05:5b:cc:52:cc:8f:23:aa:05:
d6:70:e9:c0:c1:8f:2f:66:9b:10:04:77:b0:f3:58:27:a0:3f:
17:95:99:e8:d1:fc:55:f9:5a:4d:14:15:e3:91:98:38:05:f6:
8d:85:54:69:48:bb:23:cc:81:8e:70:d0:9e:77:ab:68:55:a7:
92:24:72:8c:35:cc:5f:89:fa:6f:14:b4:38:0a:47:1f:a3:f2:
33:bc:ed:9c:84:ea:82:fb:48:ea:ea:f9:24:d5:91:69:96:f3:
8c:cb:7a:53:37:28:9c:0f:1d:c3:0a:16:9d:25:74:04:80:54:
b0:e0:8e:34:45:89:ad:59:9c:25:91:e3:87:84:29:ee:f4:01:
e5:07:5f:1f:ac:42:7f:91:3a:6a:42:99:ce:58:2c:9f:69:50:
98:51:48:10:47:ad:86:03:06:3d:69:fd:95:0a:5d:ed:54:47:
80:1f:3c:e2:8c:db:e9:87:d1:97:80:32:da:09:ba:0f:58:36:
a4:a4:ca:69:7e:e7:6f:d5:d5:c2:4e:d7:e3:1a:3e:c3:28:ed:
79:93:a3:a2:3f:b0:75:98:bb:38:3f:bb:dc:e3:85:89:de:9a:
f4:f0:0e:2f:45:40:24:d5:2d:94:5e:fe:a3:0f:27:db:51:08:
eb:7b:7d:f9
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEx8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA1MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkxNDRBQ0FGNUIyREUx
RDM4MUMzNkMxQUI4N0JGOEYwQjcxOENCOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC99RIuAenv0zgJrq3LwCBGqS56tKhNwNHVgUv9u1IaUmFbsgBC
rQ05STUicd1N6xJ22JjSv9zXr/HbbS62uMICKOZ/6ilGOB9l3b1bt0f8MLnodVy5
yPfY/pFeC9CK7D8pRdEpy6C/uTzDigtR1N7EykhPsF5mjDNN4ZnqfgAjEQTNbnX1
fi3JaNGf4pVNL13htcY/8TCG6fuNw/o0Xx5jpdKK48n+J9fdQg8JVR4E31V329/G
xdMw+JFiSlpaClEKGLouzKvsoWFiN+jJoRbh1RvEOQEc41om/DIy+s7oq+ePvjgE
goAk86P+oftK80vnv1V52iS6M4P9v5Rp7mk/AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUkUSsr1st4dOBw2wauHv48LcYy5cwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wva1VTc3Ixc3Q0ZE9CdzJ3YXVIdjQ4
TGNZeTVjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNLKIDAN
BgkqhkiG9w0BAQsFAAOCAQEAOj1t+264cpmaBVvMUsyPI6oF1nDpwMGPL2abEAR3
sPNYJ6A/F5WZ6NH8VflaTRQV45GYOAX2jYVUaUi7I8yBjnDQnneraFWnkiRyjDXM
X4n6bxS0OApHH6PyM7ztnITqgvtI6ur5JNWRaZbzjMt6UzconA8dwwoWnSV0BIBU
sOCONEWJrVmcJZHjh4Qp7vQB5QdfH6xCf5E6akKZzlgsn2lQmFFIEEethgMGPWn9
lQpd7VRHgB884ozb6YfRl4Ay2gm6D1g2pKTKaX7nb9XVwk7X4xo+wyjteZOjoj+w
dZi7OD+73OOFid6a9PAOL0VAJNUtlF7+ow8n21EI63t9+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org