Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/rZ1zLjKX3LC-ukDr5tGbvwd3Pl0.roa
File: rZ1zLjKX3LC-ukDr5tGbvwd3Pl0.roa (raw, json)
Hash identifier: IXXdRX5ZNhrUwch4uQx9mj08yYczug49MIwYJ7RDZM8=
Subject key identifier: AD:9D:73:2E:32:97:DC:B0:BE:BA:40:EB:E6:D1:9B:BF:07:77:3E:5D
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12AB
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/rZ1zLjKX3LC-ukDr5tGbvwd3Pl0.roa
Signing time: Fri 01 Sep 2023 08:04:49 +0000
ROA not before: Fri 01 Sep 2023 08:04:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 210.203.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4779 (0x12ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AD9D732E3297DCB0BEBA40EBE6D19BBF07773E5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6a:c2:7f:04:1d:94:26:54:f0:ea:6d:af:c5:
30:81:38:a3:db:60:94:a8:f8:8a:4d:88:9c:5e:b3:
9f:d9:21:9d:64:de:f9:d1:37:83:91:75:5b:1c:ab:
4f:44:a8:f4:79:16:f9:c9:e5:f1:fd:fb:82:29:f2:
6d:2d:d0:4f:20:d2:2c:4a:d9:19:d0:6c:5e:a1:51:
ad:ac:0d:1e:c1:66:59:e9:2f:c5:a0:39:e7:1a:32:
c2:d9:6f:b1:38:6e:91:d7:a4:b1:93:2f:39:76:b6:
a6:1d:db:e0:7f:66:1e:9a:b6:49:33:ec:58:2d:71:
06:81:ad:98:61:06:f2:7f:ac:0e:d1:29:da:f0:57:
02:bb:a6:b4:51:08:d5:20:a7:6f:98:70:d8:3e:76:
3c:96:d3:6e:28:b6:c3:70:d6:8d:b4:c5:ac:09:e6:
e9:53:4b:3e:9f:aa:c0:36:9a:ca:e7:d0:b1:f8:57:
87:9d:b1:ab:a2:b0:62:74:87:97:8b:73:0c:47:b7:
d1:d8:ec:97:05:38:45:e5:ba:42:9f:fc:2a:86:ca:
76:69:cc:76:b8:73:97:e9:d7:8e:ae:0d:2e:b5:13:
e1:b4:0d:5e:0a:7b:84:bd:72:69:9e:2c:ba:a3:f4:
09:fc:1e:8e:b9:93:fd:61:e3:b5:69:6a:f8:34:5f:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9D:73:2E:32:97:DC:B0:BE:BA:40:EB:E6:D1:9B:BF:07:77:3E:5D
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/rZ1zLjKX3LC-ukDr5tGbvwd3Pl0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.64.0/18
Signature Algorithm: sha256WithRSAEncryption
89:ab:f5:fd:41:86:76:0a:7d:a7:72:e2:be:ab:53:0f:eb:95:
43:22:63:eb:19:1d:5b:b3:3f:29:a2:4e:2a:80:82:4a:49:08:
66:d4:48:5b:72:dc:dd:de:38:b1:09:9a:25:94:de:de:e5:fd:
dd:26:b2:4a:b1:0f:31:c0:84:1b:9a:86:d1:11:3c:f7:b1:40:
32:1a:87:2a:4b:ae:07:e6:c6:fd:f3:3a:43:b2:59:2e:ca:40:
47:14:d6:d8:a7:df:44:0a:8e:9e:ee:18:cc:39:0b:27:3d:54:
d5:06:d7:eb:35:a9:20:79:86:a2:b4:29:f2:32:1a:29:f2:a0:
b3:5a:e8:f4:42:5c:85:45:35:8e:d1:6e:37:03:0d:c2:7e:67:
11:b5:11:b5:f2:bd:18:9e:db:1c:ad:21:e5:79:64:da:a0:cf:
03:6e:e2:85:2f:4f:91:ec:7d:a0:41:37:31:11:04:3b:dd:53:
99:b6:48:a4:32:ae:80:a1:f1:be:ed:a8:72:39:17:12:6e:66:
0b:3d:bd:cb:31:61:66:4d:1e:e8:b1:36:ac:71:d1:66:a4:f7:
d4:ee:6d:72:ec:e8:9b:42:3b:52:ab:7f:0c:24:12:46:c7:df:
ae:cc:56:fa:3b:9f:a3:c7:55:6a:2b:c8:de:9a:91:8c:24:6f:
20:f5:75:79
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEqswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA0NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFEOUQ3MzJFMzI5N0RD
QjBCRUJBNDBFQkU2RDE5QkJGMDc3NzNFNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVasJ/BB2UJlTw6m2vxTCBOKPbYJSo+IpNiJxes5/ZIZ1k3vnR
N4ORdVscq09EqPR5FvnJ5fH9+4Ip8m0t0E8g0ixK2RnQbF6hUa2sDR7BZlnpL8Wg
OecaMsLZb7E4bpHXpLGTLzl2tqYd2+B/Zh6atkkz7FgtcQaBrZhhBvJ/rA7RKdrw
VwK7prRRCNUgp2+YcNg+djyW024otsNw1o20xawJ5ulTSz6fqsA2msrn0LH4V4ed
sauisGJ0h5eLcwxHt9HY7JcFOEXlukKf/CqGynZpzHa4c5fp146uDS61E+G0DV4K
e4S9cmmeLLqj9An8Ho65k/1h47Vpavg0X6klAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUrZ1zLjKX3LC+ukDr5tGbvwd3Pl0wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvcloxekxqS1gzTEMtdWtEcjV0R2J2
d2QzUGwwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtLLQDAN
BgkqhkiG9w0BAQsFAAOCAQEAiav1/UGGdgp9p3LivqtTD+uVQyJj6xkdW7M/KaJO
KoCCSkkIZtRIW3Lc3d44sQmaJZTe3uX93SaySrEPMcCEG5qG0RE897FAMhqHKkuu
B+bG/fM6Q7JZLspARxTW2KffRAqOnu4YzDkLJz1U1QbX6zWpIHmGorQp8jIaKfKg
s1ro9EJchUU1jtFuNwMNwn5nEbURtfK9GJ7bHK0h5Xlk2qDPA27ihS9Pkex9oEE3
MREEO91TmbZIpDKugKHxvu2ocjkXEm5mCz29yzFhZk0e6LE2rHHRZqT31O5tcuzo
m0I7Uqt/DCQSRsffrsxW+jufo8dVaivI3pqRjCRvIPV1eQ==
-----END CERTIFICATE-----
Generated at Mon Jan 15 22:50:43 2024 by rpki-client on console-fra.rpki-client.org