Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/tIYNyvF2otAYRjcRb-OsQMtl3BQ.roa
File: tIYNyvF2otAYRjcRb-OsQMtl3BQ.roa (raw, json)
Hash identifier: ooT6jhTgp7XrUvhtE4qTYLkMkO4XEqWO9I9pNbAp4z4=
Subject key identifier: B4:86:0D:CA:F1:76:A2:D0:18:46:37:11:6F:E3:AC:40:CB:65:DC:14
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0972
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/tIYNyvF2otAYRjcRb-OsQMtl3BQ.roa
Signing time: Tue 29 Sep 2020 10:01:50 +0000
ROA not before: Tue 29 Sep 2020 10:01:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 203.79.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2418 (0x972)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B4860DCAF176A2D0184637116FE3AC40CB65DC14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6d:0b:44:8f:1d:46:7c:fc:99:20:ae:9b:45:
32:75:14:c1:fc:83:4f:83:e9:96:39:aa:2a:b3:a2:
94:35:2b:01:30:13:5c:60:0e:fd:f6:6e:44:f1:e5:
dc:20:bb:b1:3f:ea:51:ce:49:d2:6e:24:20:15:04:
64:62:8b:35:16:78:68:fa:fa:a8:01:de:b4:d7:aa:
d8:fa:16:94:5a:1d:7c:77:a2:f3:54:4d:d1:91:75:
fc:a8:07:fc:2c:39:61:20:c5:6b:b2:80:c2:40:ac:
da:0c:a5:6a:72:0b:47:bc:75:38:35:67:eb:be:83:
d8:e1:04:c1:d3:f7:4f:3f:bd:e1:34:1f:4e:d1:93:
0d:ce:22:8b:db:ae:06:82:e7:f2:2a:c6:0f:02:ea:
88:88:8c:a2:39:e9:52:81:75:20:b5:4c:dd:c8:cf:
82:55:1c:97:e5:04:b6:d8:35:67:cd:31:1a:a1:bd:
26:94:33:e1:d6:ac:5b:69:d7:e4:0f:02:92:55:20:
ff:4d:9d:01:d6:20:77:2b:0f:2b:a2:e8:6f:0b:66:
41:01:0e:fa:45:68:4a:9d:c0:02:1b:b2:03:b8:10:
99:cd:27:7d:95:26:06:03:c0:b4:36:63:e4:7e:f6:
4c:86:31:bd:b5:3a:6a:9d:a7:ca:c5:e2:71:58:18:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:86:0D:CA:F1:76:A2:D0:18:46:37:11:6F:E3:AC:40:CB:65:DC:14
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/tIYNyvF2otAYRjcRb-OsQMtl3BQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:44:4f:50:46:9d:b6:b3:4e:5f:7b:7d:99:7b:97:0a:ee:2b:
8d:fa:6c:fc:f4:bc:81:27:f6:ea:48:04:2d:21:fc:fc:25:88:
00:3c:a9:f4:61:13:7c:d6:f4:22:6e:7d:af:f3:4e:3f:56:89:
b6:59:27:f7:d1:69:5b:bc:0f:87:60:90:af:5e:9a:9d:96:c1:
d1:3d:cd:15:b2:02:20:a0:29:37:60:40:1a:02:2e:be:9f:7c:
14:ca:b6:7e:37:52:c6:57:5a:b3:a3:f7:d1:a5:9a:10:e8:69:
69:c0:80:0f:69:28:f6:e8:8f:68:27:c7:e6:50:ab:0c:d0:42:
0f:22:9c:39:07:9c:c2:b7:49:3c:3e:70:ca:15:0b:13:f7:a1:
3d:d0:3d:45:99:ee:37:6b:8c:da:50:d4:a2:b6:3d:5a:98:4e:
61:80:99:84:6a:31:53:15:02:42:91:0d:5a:75:a7:95:0c:35:
cf:44:38:d8:28:0b:63:51:46:7e:4f:ab:b0:b7:10:5a:fc:d8:
8d:b3:c9:68:e4:26:cb:cf:2f:e5:17:43:f2:8f:f5:bf:90:d5:
ef:b8:26:9b:bf:39:bf:e5:bb:78:0b:5c:18:1e:22:e1:36:4d:
49:14:22:30:67:43:78:4a:7a:5d:16:c9:23:d3:bf:b4:57:10:
f6:34:14:c3
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMDA5Mjkx
MDAxNTBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI0ODYwRENBRjE3NkEy
RDAxODQ2MzcxMTZGRTNBQzQwQ0I2NURDMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgbQtEjx1GfPyZIK6bRTJ1FMH8g0+D6ZY5qiqzopQ1KwEwE1xg
Dv32bkTx5dwgu7E/6lHOSdJuJCAVBGRiizUWeGj6+qgB3rTXqtj6FpRaHXx3ovNU
TdGRdfyoB/wsOWEgxWuygMJArNoMpWpyC0e8dTg1Z+u+g9jhBMHT908/veE0H07R
kw3OIovbrgaC5/Iqxg8C6oiIjKI56VKBdSC1TN3Iz4JVHJflBLbYNWfNMRqhvSaU
M+HWrFtp1+QPApJVIP9NnQHWIHcrDyui6G8LZkEBDvpFaEqdwAIbsgO4EJnNJ32V
JgYDwLQ2Y+R+9kyGMb21Omqdp8rF4nFYGPWtAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUtIYNyvF2otAYRjcRb+OsQMtl3BQwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvdElZTnl2RjJvdEFZUmpjUmItT3NR
TXRsM0JRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAstPwDAN
BgkqhkiG9w0BAQsFAAOCAQEAHURPUEadtrNOX3t9mXuXCu4rjfps/PS8gSf26kgE
LSH8/CWIADyp9GETfNb0Im59r/NOP1aJtlkn99FpW7wPh2CQr16anZbB0T3NFbIC
IKApN2BAGgIuvp98FMq2fjdSxldas6P30aWaEOhpacCAD2ko9uiPaCfH5lCrDNBC
DyKcOQecwrdJPD5wyhULE/ehPdA9RZnuN2uM2lDUorY9WphOYYCZhGoxUxUCQpEN
WnWnlQw1z0Q42CgLY1FGfk+rsLcQWvzYjbPJaOQmy88v5RdD8o/1v5DV77gmm785
v+W7eAtcGB4i4TZNSRQiMGdDeEp6XRbJI9O/tFcQ9jQUww==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:07 2025 by rpki-client