Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/qvaO46UEPg8j6SunlDZR0aT4eC0.roa
File: qvaO46UEPg8j6SunlDZR0aT4eC0.roa (raw, json)
Hash identifier: HtNziE35sWZk+Jkd9ssW9UfXw4pHCfEh/p4TDpuq0J0=
Subject key identifier: AA:F6:8E:E3:A5:04:3E:0F:23:E9:2B:A7:94:36:51:D1:A4:F8:78:2D
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E30
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/qvaO46UEPg8j6SunlDZR0aT4eC0.roa
Signing time: Wed 29 Sep 2021 02:40:04 +0000
ROA not before: Wed 29 Sep 2021 02:40:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 101.136.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3632 (0xe30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:40:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=AAF68EE3A5043E0F23E92BA7943651D1A4F8782D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:57:43:9d:d7:70:d2:ab:99:07:13:35:b2:
59:3a:6f:91:09:b8:77:3f:58:2c:db:90:e1:73:62:
f5:fc:56:10:87:e0:8c:06:c9:f7:c9:b3:46:0b:47:
60:04:8a:b2:8b:72:6a:4c:2f:5f:aa:fc:64:04:fc:
2f:7b:b3:31:ce:64:bd:76:fe:76:d9:0c:b9:9d:51:
9c:55:ce:68:df:44:24:90:5f:8a:19:cf:d3:f8:82:
6a:e5:ba:61:ba:bd:dc:cd:2b:53:59:67:22:58:2d:
4d:5f:46:ca:4b:cb:2c:fa:1e:d5:6d:82:55:15:82:
18:69:6b:d9:9d:43:e3:0a:47:21:d3:71:bc:77:d0:
e5:96:57:17:17:2e:d1:53:80:46:52:7f:e0:2a:65:
20:8b:5d:81:ec:c4:a3:c4:49:2a:ec:73:d0:53:41:
72:66:85:c9:a0:ce:18:c9:97:f4:9e:c6:55:49:9c:
36:b9:55:d0:9d:1d:77:ef:2a:ce:e1:cf:9e:ed:ba:
a9:cc:48:6e:01:62:6d:8a:32:9d:84:ec:17:87:8a:
65:d7:c5:a9:09:9c:c7:8d:4a:c4:2c:df:d7:8e:5f:
4b:e9:46:8d:02:22:d6:c8:38:2e:2f:ed:25:5e:ff:
3b:d0:69:2e:24:79:89:6d:51:32:a9:41:2b:f4:7d:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F6:8E:E3:A5:04:3E:0F:23:E9:2B:A7:94:36:51:D1:A4:F8:78:2D
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/qvaO46UEPg8j6SunlDZR0aT4eC0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.136.0.0/14
Signature Algorithm: sha256WithRSAEncryption
8a:90:dd:3e:84:4b:d6:c3:a9:e1:6c:51:92:95:d2:60:d7:81:
22:47:7c:f0:7a:f9:2e:2f:8b:9c:c8:69:9d:e4:b3:17:dd:e9:
5a:d5:f6:43:57:0d:e7:f0:4b:03:d6:1b:fc:92:0a:03:e5:6c:
51:6b:a3:6d:a4:e1:b8:ea:c2:cf:81:30:ae:c1:fa:12:3d:b0:
fd:22:81:61:ad:da:3f:55:dd:d3:c0:30:b8:45:6b:96:94:26:
e4:d0:db:f5:94:45:ef:94:dc:10:07:d8:ec:dd:e6:20:a1:d3:
c3:03:ae:cd:8d:0e:d8:7c:b6:52:47:32:15:40:dd:43:8b:51:
63:86:26:87:50:84:65:d5:17:ce:c7:4e:7f:99:24:37:be:e6:
6e:97:7b:b9:99:c1:5c:28:d0:c0:47:e8:c2:2d:73:0f:c9:88:
39:57:b5:e9:59:68:51:95:f7:d7:7b:c0:6a:a8:48:44:3d:65:
24:95:5f:94:94:84:b2:9d:b9:58:09:af:61:b7:c8:e2:e9:75:
e3:43:56:e7:0b:e9:2f:ae:6c:a3:43:10:16:e5:d4:26:70:48:
58:35:6d:30:51:53:bc:1c:f0:89:af:c0:dd:84:91:62:25:0c:
95:09:64:1e:a0:6b:56:4c:58:9a:40:0f:1f:be:e5:46:a4:58:
f6:9e:d4:c4
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICDjAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTA5Mjkw
MjQwMDRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEFBRjY4RUUzQTUwNDNF
MEYyM0U5MkJBNzk0MzY1MUQxQTRGODc4MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwzFdDnddw0quZBxM1slk6b5EJuHc/WCzbkOFzYvX8VhCH4IwG
yffJs0YLR2AEirKLcmpML1+q/GQE/C97szHOZL12/nbZDLmdUZxVzmjfRCSQX4oZ
z9P4gmrlumG6vdzNK1NZZyJYLU1fRspLyyz6HtVtglUVghhpa9mdQ+MKRyHTcbx3
0OWWVxcXLtFTgEZSf+AqZSCLXYHsxKPESSrsc9BTQXJmhcmgzhjJl/SexlVJnDa5
VdCdHXfvKs7hz57tuqnMSG4BYm2KMp2E7BeHimXXxakJnMeNSsQs39eOX0vpRo0C
ItbIOC4v7SVe/zvQaS4keYltUTKpQSv0fb4pAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUqvaO46UEPg8j6SunlDZR0aT4eC0wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvcXZhTzQ2VUVQZzhqNlN1bmxEWlIw
YVQ0ZUMwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAmWIMA0G
CSqGSIb3DQEBCwUAA4IBAQCKkN0+hEvWw6nhbFGSldJg14EiR3zwevkuL4ucyGmd
5LMX3ela1fZDVw3n8EsD1hv8kgoD5WxRa6NtpOG46sLPgTCuwfoSPbD9IoFhrdo/
Vd3TwDC4RWuWlCbk0Nv1lEXvlNwQB9js3eYgodPDA67NjQ7YfLZSRzIVQN1Di1Fj
hiaHUIRl1RfOx05/mSQ3vuZul3u5mcFcKNDAR+jCLXMPyYg5V7XpWWhRlffXe8Bq
qEhEPWUklV+UlISynblYCa9ht8ji6XXjQ1bnC+kvrmyjQxAW5dQmcEhYNW0wUVO8
HPCJr8DdhJFiJQyVCWQeoGtWTFiaQA8fvuVGpFj2ntTE
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org