Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/qrowYBJJ1LVo2emXvsWZxQmpvLw.roa
File: qrowYBJJ1LVo2emXvsWZxQmpvLw.roa (raw, json)
Hash identifier: zg2obXWWo+fErf2sfsiYlq+SMR/87gEsipn6ASliC34=
Subject key identifier: AA:BA:30:60:12:49:D4:B5:68:D9:E9:97:BE:C5:99:C5:09:A9:BC:BC
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 094C
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/qrowYBJJ1LVo2emXvsWZxQmpvLw.roa
Signing time: Tue 29 Sep 2020 10:01:41 +0000
ROA not before: Tue 29 Sep 2020 10:01:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 101.136.0.0/14 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2380 (0x94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AABA30601249D4B568D9E997BEC599C509A9BCBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:8d:a6:ea:b0:a3:ed:8a:87:4c:fc:09:a5:
06:be:f8:6c:b2:e7:b4:4f:50:4c:da:75:5d:22:b4:
1d:52:70:ec:17:28:40:d0:fe:3e:4f:9c:5c:70:08:
ca:37:9b:25:5d:e3:ee:39:49:68:96:20:19:5e:f8:
14:d2:b5:22:f1:61:e4:35:dd:23:23:d0:7a:2d:c0:
08:18:80:88:4e:68:53:8a:33:b9:8b:ea:95:6e:1b:
a3:fb:18:2b:9d:22:1b:18:52:90:0d:77:f2:fb:4f:
42:7b:fa:6c:98:c6:00:80:3d:7d:d9:2f:55:aa:5c:
14:67:c1:f8:7b:fb:6f:c3:ee:06:29:6e:40:0d:08:
91:3b:7d:21:b2:b0:34:7f:c6:df:eb:11:99:ce:78:
6f:b0:9c:02:03:c7:de:e6:2e:cb:53:60:dd:f6:6d:
aa:20:bf:51:2b:f1:34:eb:06:fc:d4:26:08:41:15:
2a:b5:a0:2b:27:1b:98:9e:40:4c:cb:f9:13:08:83:
c4:57:25:4f:a3:d6:51:dc:f1:25:68:d9:56:e8:af:
59:0a:e0:aa:ce:55:a3:22:2c:2d:8a:d2:d5:00:1c:
9e:52:0c:0e:81:4a:f0:35:cb:c2:0e:24:c8:e4:31:
36:2a:44:81:6d:03:7f:ea:56:fa:ed:2d:75:e6:3d:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BA:30:60:12:49:D4:B5:68:D9:E9:97:BE:C5:99:C5:09:A9:BC:BC
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/qrowYBJJ1LVo2emXvsWZxQmpvLw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.136.0.0/14
Signature Algorithm: sha256WithRSAEncryption
73:59:96:70:51:ea:c6:bc:d6:48:3b:80:73:cc:20:ae:11:2a:
47:b6:9a:28:5b:33:31:b9:1c:31:62:88:4f:a2:16:03:99:bb:
c6:c6:5c:dd:8d:b0:23:12:0d:97:4f:25:f2:3e:11:31:60:9a:
b0:ec:25:20:ca:3c:5f:0d:47:2d:ba:39:2c:1c:fc:ce:53:f3:
0b:65:a9:3b:8a:2d:bf:18:e5:3e:3a:a3:a8:dc:f6:ab:ec:ae:
ae:53:10:a3:c2:0c:6a:17:93:4d:12:80:0c:b8:3a:9a:8d:45:
26:9d:76:56:5a:3c:b1:28:74:7b:f0:c4:1e:14:c2:e1:be:7d:
6f:5c:15:59:f8:3f:84:a5:ff:4f:af:50:e2:40:84:37:7b:4c:
4e:8c:84:78:6e:59:9f:32:81:98:42:cd:6f:71:d1:b5:d7:6c:
74:29:b3:e9:af:99:2e:97:5f:64:45:8d:62:31:bb:8f:77:83:
b1:80:c5:82:9e:a2:e2:99:6a:6e:3c:2a:8c:73:42:17:a2:b7:
ce:87:7f:59:c1:d0:32:46:6b:e4:4b:27:6c:70:9b:ce:c5:30:
b7:50:8c:1a:b4:1e:e3:cd:ac:73:87:fd:d9:63:1d:6d:7a:6f:
f2:a9:47:9c:5d:76:a4:57:87:43:c6:4f:d3:94:61:75:6e:90:
41:32:ac:44
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICCUwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMDA5Mjkx
MDAxNDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEFBQkEzMDYwMTI0OUQ0
QjU2OEQ5RTk5N0JFQzU5OUM1MDlBOUJDQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxX42m6rCj7YqHTPwJpQa++Gyy57RPUEzadV0itB1ScOwXKEDQ
/j5PnFxwCMo3myVd4+45SWiWIBle+BTStSLxYeQ13SMj0HotwAgYgIhOaFOKM7mL
6pVuG6P7GCudIhsYUpANd/L7T0J7+myYxgCAPX3ZL1WqXBRnwfh7+2/D7gYpbkAN
CJE7fSGysDR/xt/rEZnOeG+wnAIDx97mLstTYN32baogv1Er8TTrBvzUJghBFSq1
oCsnG5ieQEzL+RMIg8RXJU+j1lHc8SVo2Vbor1kK4KrOVaMiLC2K0tUAHJ5SDA6B
SvA1y8IOJMjkMTYqRIFtA3/qVvrtLXXmPaCdAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUqrowYBJJ1LVo2emXvsWZxQmpvLwwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvcXJvd1lCSkoxTFZvMmVtWHZzV1p4
UW1wdkx3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAmWIMA0G
CSqGSIb3DQEBCwUAA4IBAQBzWZZwUerGvNZIO4BzzCCuESpHtpooWzMxuRwxYohP
ohYDmbvGxlzdjbAjEg2XTyXyPhExYJqw7CUgyjxfDUctujksHPzOU/MLZak7ii2/
GOU+OqOo3Par7K6uUxCjwgxqF5NNEoAMuDqajUUmnXZWWjyxKHR78MQeFMLhvn1v
XBVZ+D+Epf9Pr1DiQIQ3e0xOjIR4blmfMoGYQs1vcdG112x0KbPpr5kul19kRY1i
MbuPd4OxgMWCnqLimWpuPCqMc0IXorfOh39ZwdAyRmvkSydscJvOxTC3UIwatB7j
zaxzh/3ZYx1tem/yqUecXXakV4dDxk/TlGF1bpBBMqxE
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org