Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/kv_ZrmwnZAdm_mWUNVdPv4yLJC8.roa
File: kv_ZrmwnZAdm_mWUNVdPv4yLJC8.roa (raw, json)
Hash identifier: 0fvjCUAZeZhu56QypJ3KVA/k/9gosFaEphHkhZekDbw=
Subject key identifier: 92:FF:D9:AE:6C:27:64:07:66:FE:65:94:35:57:4F:BF:8C:8B:24:2F
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1255
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/kv_ZrmwnZAdm_mWUNVdPv4yLJC8.roa
Signing time: Fri 01 Sep 2023 08:04:20 +0000
ROA not before: Fri 01 Sep 2023 08:04:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 219.91.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4693 (0x1255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=92FFD9AE6C27640766FE659435574FBF8C8B242F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:92:11:50:60:c7:c8:f8:37:98:49:37:7c:
73:3b:81:8c:28:90:57:c2:37:e7:34:e0:be:75:59:
b1:45:fc:8c:c7:27:bc:38:ff:bf:3b:c0:7e:e2:df:
93:75:d7:3e:6e:ee:07:a5:97:bd:8e:40:35:70:9d:
ee:2d:70:4f:ba:b6:23:95:52:12:51:0b:d5:ec:b8:
3c:a1:72:77:23:86:7d:1e:0f:a4:2d:26:27:00:a7:
11:4a:44:34:98:92:ea:1b:3f:fa:0a:96:86:b6:18:
2b:31:37:b7:d6:67:dc:0a:ed:e1:4c:10:74:ce:3b:
0c:47:91:9e:04:5a:7d:fb:de:3a:8e:97:49:8c:15:
e7:4d:3f:f2:64:d7:3c:44:d6:0e:5c:51:74:60:b3:
fb:a9:6a:74:f7:fc:be:84:28:d7:5a:86:44:1b:b9:
fa:d2:be:d6:40:63:99:cc:8e:ed:46:0d:f4:9f:0e:
db:07:8e:cf:c7:5a:ae:7f:24:24:46:bc:b1:37:41:
8a:bc:a1:fc:75:71:02:ac:bd:96:48:b1:ab:0e:92:
ba:23:f1:59:05:04:e7:6d:8d:5e:79:fb:cb:6f:bc:
19:7d:79:71:7b:86:d4:e1:97:be:fb:67:31:d2:a6:
18:1e:9d:24:2e:1c:60:9c:f8:29:da:26:ca:1d:dc:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FF:D9:AE:6C:27:64:07:66:FE:65:94:35:57:4F:BF:8C:8B:24:2F
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/kv_ZrmwnZAdm_mWUNVdPv4yLJC8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.91.0.0/18
Signature Algorithm: sha256WithRSAEncryption
b4:88:58:02:2d:c3:bd:35:ff:ed:ca:b4:eb:b8:37:27:01:fe:
97:26:4b:ec:33:20:f1:49:6d:a7:b6:2b:4b:5c:91:d2:bd:72:
74:c6:83:c2:48:45:8b:d4:2b:54:db:49:53:e3:e5:80:99:07:
c6:30:a4:e2:eb:50:06:aa:84:ff:52:2c:b1:87:04:b0:53:e1:
1b:7e:fe:74:ab:b1:3c:77:81:d4:ca:ef:4c:a2:6f:c4:84:54:
20:8f:25:a5:0c:84:51:fb:90:8e:ac:72:f3:b8:45:3e:c0:86:
93:20:e7:fc:13:dd:fe:d8:9c:1e:b6:a0:fa:35:0d:07:46:cd:
af:4c:cc:c1:ad:ec:e4:ea:70:da:b1:c5:2c:b7:df:9e:93:29:
1f:db:a9:8e:9f:c2:fc:21:64:5c:3e:c7:a2:b9:26:8d:e4:86:
f1:45:3b:84:fa:02:7e:36:80:bb:b7:b5:92:a3:46:3f:d0:8a:
81:49:89:18:b5:27:ae:87:5a:00:41:97:b1:95:fd:bd:94:96:
25:cd:d1:5a:0e:92:fc:3b:50:4f:5a:8d:c7:7e:83:fa:3d:f6:
87:d9:91:65:84:33:5f:b6:47:26:28:7e:a8:b9:43:cf:7e:23:
38:4e:fd:df:b8:2d:a2:2f:fd:e5:c2:1c:49:6e:f0:40:7b:6d:
4a:f1:d8:18
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICElUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA0MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkyRkZEOUFFNkMyNzY0
MDc2NkZFNjU5NDM1NTc0RkJGOEM4QjI0MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7rJIRUGDHyPg3mEk3fHM7gYwokFfCN+c04L51WbFF/IzHJ7w4
/787wH7i35N11z5u7gell72OQDVwne4tcE+6tiOVUhJRC9XsuDyhcncjhn0eD6Qt
JicApxFKRDSYkuobP/oKloa2GCsxN7fWZ9wK7eFMEHTOOwxHkZ4EWn373jqOl0mM
FedNP/Jk1zxE1g5cUXRgs/upanT3/L6EKNdahkQbufrSvtZAY5nMju1GDfSfDtsH
js/HWq5/JCRGvLE3QYq8ofx1cQKsvZZIsasOkroj8VkFBOdtjV55+8tvvBl9eXF7
htThl777ZzHSphgenSQuHGCc+CnaJsod3KPnAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUkv/ZrmwnZAdm/mWUNVdPv4yLJC8wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wva3ZfWnJtd25aQWRtX21XVU5WZFB2
NHlMSkM4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBttbADAN
BgkqhkiG9w0BAQsFAAOCAQEAtIhYAi3DvTX/7cq067g3JwH+lyZL7DMg8Ultp7Yr
S1yR0r1ydMaDwkhFi9QrVNtJU+PlgJkHxjCk4utQBqqE/1IssYcEsFPhG37+dKux
PHeB1MrvTKJvxIRUII8lpQyEUfuQjqxy87hFPsCGkyDn/BPd/ticHrag+jUNB0bN
r0zMwa3s5Opw2rHFLLffnpMpH9upjp/C/CFkXD7HorkmjeSG8UU7hPoCfjaAu7e1
kqNGP9CKgUmJGLUnrodaAEGXsZX9vZSWJc3RWg6S/DtQT1qNx36D+j32h9mRZYQz
X7ZHJih+qLlDz34jOE7937gtoi/95cIcSW7wQHttSvHYGA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org