Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/tllnmxfLALzeAyFI3cM7pKgrVbw.roa
File: tllnmxfLALzeAyFI3cM7pKgrVbw.roa (raw, json)
Hash identifier: eGKLGKtnbbING55KvhW8RlfxSRv1JaqjR2PyJ/rdM8k=
Subject key identifier: B6:59:67:9B:17:CB:00:BC:DE:03:21:48:DD:C3:3B:A4:A8:2B:55:BC
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/tllnmxfLALzeAyFI3cM7pKgrVbw.roa
Signing time: Thu 15 Sep 2022 02:39:52 +0000
ROA not before: Thu 15 Sep 2022 02:39:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 219.91.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B659679B17CB00BCDE032148DDC33BA4A82B55BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:44:67:c3:22:8e:36:17:3b:13:8f:0a:d1:
e3:c3:99:17:67:f2:c3:c4:cf:2f:5e:4a:d3:f7:d2:
d5:7a:27:8d:62:51:cc:ea:ec:e5:55:98:2c:eb:bf:
c1:c2:1e:65:a0:4d:be:85:6a:a1:b4:d1:42:25:b2:
07:30:2e:2f:1b:d4:b3:9d:96:19:db:f6:e1:9e:c6:
21:a7:a3:45:0c:8d:a5:fa:82:c2:91:7e:d3:08:ca:
cd:41:a6:4e:c0:95:3d:90:23:b9:99:46:4f:c3:c4:
31:86:71:0d:bc:e4:3f:bf:18:cb:7c:9d:78:7c:a8:
19:74:39:0e:1a:69:0f:98:8e:f3:51:ca:d1:e6:ce:
1e:79:47:dd:3f:f4:da:5b:45:a2:f8:0d:8a:9c:7a:
f6:60:3f:6c:a2:09:37:c8:28:62:98:88:84:7a:a6:
76:6f:93:66:30:74:cc:61:3e:ad:61:a3:ce:88:9e:
a0:59:92:b1:63:a5:4d:83:5a:da:e9:c1:6e:23:4e:
a2:3a:17:e4:aa:79:d4:a1:62:4e:bb:1d:91:be:7c:
ca:0e:f8:05:44:58:22:97:30:91:ef:2f:db:f1:6c:
50:e5:b1:1c:80:98:64:fb:8b:31:31:5a:42:e5:1f:
01:04:0e:9a:62:6f:3a:63:e4:b5:b7:1f:b6:cb:41:
18:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:59:67:9B:17:CB:00:BC:DE:03:21:48:DD:C3:3B:A4:A8:2B:55:BC
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/tllnmxfLALzeAyFI3cM7pKgrVbw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.91.0.0/17
Signature Algorithm: sha256WithRSAEncryption
c1:20:f9:ed:14:4b:85:b3:e9:74:a1:aa:54:36:2f:69:66:b3:
c2:33:05:63:30:a2:10:47:5d:81:cf:95:33:4e:34:bf:a9:d7:
d8:dc:bb:6a:85:ee:60:a7:49:d4:b8:16:60:cc:55:aa:2a:2b:
03:d2:43:75:28:66:77:8c:cc:9b:19:43:aa:10:74:f7:b0:84:
b3:dc:6b:e1:48:6b:62:1a:4d:3f:5a:69:e1:72:22:bc:d2:33:
d1:6e:c2:c1:e3:f3:42:34:d4:31:bf:ca:f6:ca:1b:a7:56:ef:
63:0c:32:7d:f9:23:01:5a:c1:64:49:4f:a7:dc:e0:d3:32:4f:
ca:96:0e:b8:34:e0:18:9d:ee:74:24:1f:ab:50:c1:08:39:0e:
40:75:be:8c:d9:51:5a:16:83:f5:4e:8d:8c:d0:c0:0e:4f:0a:
07:f9:41:a2:86:f8:39:2e:1a:d9:76:69:47:40:c6:3b:50:6f:
41:f0:0e:47:29:3e:e5:10:4a:f1:44:4f:bb:68:57:ed:1f:ca:
41:c7:44:ee:c6:69:58:ad:01:71:97:01:63:9e:a8:3f:78:13:
fe:e9:d7:7b:80:51:ed:09:3b:34:23:f9:14:97:bb:9a:b8:c3:
a3:12:16:99:ba:69:3c:86:7a:0f:33:3d:93:81:c0:6b:18:d8:
c7:c6:46:34
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMjA5MTUw
MjM5NTJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI2NTk2NzlCMTdDQjAw
QkNERTAzMjE0OEREQzMzQkE0QTgyQjU1QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEKURnwyKONhc7E48K0ePDmRdn8sPEzy9eStP30tV6J41iUczq
7OVVmCzrv8HCHmWgTb6FaqG00UIlsgcwLi8b1LOdlhnb9uGexiGno0UMjaX6gsKR
ftMIys1Bpk7AlT2QI7mZRk/DxDGGcQ285D+/GMt8nXh8qBl0OQ4aaQ+YjvNRytHm
zh55R90/9NpbRaL4DYqcevZgP2yiCTfIKGKYiIR6pnZvk2YwdMxhPq1ho86InqBZ
krFjpU2DWtrpwW4jTqI6F+SqedShYk67HZG+fMoO+AVEWCKXMJHvL9vxbFDlsRyA
mGT7izExWkLlHwEEDppibzpj5LW3H7bLQRhLAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUtllnmxfLALzeAyFI3cM7pKgrVbwwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvdGxsbm14ZkxBTHplQXlGSTNjTTdw
S2dyVmJ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9tbADAN
BgkqhkiG9w0BAQsFAAOCAQEAwSD57RRLhbPpdKGqVDYvaWazwjMFYzCiEEddgc+V
M040v6nX2Ny7aoXuYKdJ1LgWYMxVqiorA9JDdShmd4zMmxlDqhB097CEs9xr4Uhr
YhpNP1pp4XIivNIz0W7CwePzQjTUMb/K9sobp1bvYwwyffkjAVrBZElPp9zg0zJP
ypYOuDTgGJ3udCQfq1DBCDkOQHW+jNlRWhaD9U6NjNDADk8KB/lBoob4OS4a2XZp
R0DGO1BvQfAORyk+5RBK8URPu2hX7R/KQcdE7sZpWK0BcZcBY56oP3gT/unXe4BR
7Qk7NCP5FJe7mrjDoxIWmbppPIZ6DzM9k4HAaxjYx8ZGNA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org