Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/uWIzlZJNGFUi4rDgq2QLEjmsZgA.roa
File: uWIzlZJNGFUi4rDgq2QLEjmsZgA.roa (raw, json)
Hash identifier: jolsNKB+TMEmV/3ZK8lhQtU+lAg+nDcIKLdETZqfclA=
Subject key identifier: B9:62:33:95:92:4D:18:55:22:E2:B0:E0:AB:64:0B:12:39:AC:66:00
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 129C
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uWIzlZJNGFUi4rDgq2QLEjmsZgA.roa
Signing time: Fri 01 Sep 2023 08:04:42 +0000
ROA not before: Fri 01 Sep 2023 08:04:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 124.218.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4764 (0x129c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B9623395924D185522E2B0E0AB640B1239AC6600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:7a:db:8e:f4:c9:85:98:ed:46:82:41:30:
5c:a2:3e:84:de:f0:b1:3e:0e:ac:bb:5f:a9:bc:6e:
8a:ec:b2:69:e1:e6:ac:05:85:28:66:84:50:3c:e3:
c1:f3:21:be:c2:38:75:ba:45:77:50:28:11:b9:7f:
0e:76:3e:29:88:35:17:c3:48:87:52:f3:e9:a8:81:
99:4f:9e:c0:f1:bf:3a:fe:df:01:34:80:93:96:22:
ae:02:cb:38:21:4b:71:2a:fe:8e:b8:62:a0:51:c2:
29:64:2f:97:70:69:92:9f:67:b4:c3:23:3d:e4:3a:
8f:5f:68:46:46:63:61:90:7e:73:56:36:95:68:8a:
ce:0e:bb:ac:2e:7a:fc:e8:c9:04:56:6f:5c:d2:de:
61:d7:8d:42:43:c0:61:31:72:e5:b7:28:ea:b6:fd:
a0:1f:b6:8b:e1:91:6f:c4:f9:5e:93:ca:27:6e:7d:
b4:84:9a:d1:6e:68:c5:b2:a7:a0:ff:dc:db:0e:61:
dc:c0:34:23:6c:5e:d8:e4:b1:fc:83:21:80:82:c2:
99:a4:dc:5d:40:dc:29:69:a1:27:ea:03:db:8e:17:
de:85:e2:f1:0f:e1:51:9b:67:99:51:73:0a:77:83:
e9:54:7e:81:ad:29:b9:b7:bf:a9:b9:cd:4a:ba:4c:
93:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:62:33:95:92:4D:18:55:22:E2:B0:E0:AB:64:0B:12:39:AC:66:00
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uWIzlZJNGFUi4rDgq2QLEjmsZgA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.80.0/20
Signature Algorithm: sha256WithRSAEncryption
13:2c:f3:aa:d3:d0:3a:f3:2c:66:94:8e:da:4d:56:67:c5:3a:
2e:d7:38:07:83:0a:45:89:ec:97:0e:c1:73:fa:d7:11:f5:4d:
b6:3a:44:67:8e:e7:4a:f5:2d:8d:bc:40:01:e7:af:8b:8e:db:
33:6e:cc:88:cc:e1:4f:60:cc:da:78:c1:ad:c9:2f:e7:d6:7f:
3f:84:77:97:bb:ed:78:c4:b1:b6:58:fd:ad:0d:e3:1f:cf:0e:
aa:46:00:8b:8f:8b:75:53:3c:b4:83:67:04:08:7f:8e:03:f0:
83:6d:4a:fd:e4:5c:34:82:65:0d:2f:27:c2:18:ea:dd:23:70:
6e:b9:16:69:85:be:14:b6:8f:32:35:50:2d:81:74:a9:69:e8:
e2:a8:2d:b2:65:b2:c4:99:f1:c0:a2:bf:70:fb:be:75:2a:39:
2d:af:5d:39:00:26:c5:e5:2f:ea:60:8b:81:29:bb:ee:5d:2e:
19:4c:2d:e6:83:55:f1:be:62:2e:18:dc:ff:0f:bd:aa:48:98:
b4:a0:42:05:18:f2:7b:4c:e3:0f:f5:b7:0d:18:bb:28:54:ff:
94:7e:c6:a1:a9:53:fb:c2:63:e7:51:16:64:12:61:7d:60:41:
bd:dd:5b:d9:15:cc:6b:fe:37:89:ca:b6:37:a2:70:93:61:0b:
a2:46:c9:4b
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEpwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA0NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI5NjIzMzk1OTI0RDE4
NTUyMkUyQjBFMEFCNjQwQjEyMzlBQzY2MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCW43rbjvTJhZjtRoJBMFyiPoTe8LE+Dqy7X6m8borssmnh5qwF
hShmhFA848HzIb7COHW6RXdQKBG5fw52PimINRfDSIdS8+mogZlPnsDxvzr+3wE0
gJOWIq4CyzghS3Eq/o64YqBRwilkL5dwaZKfZ7TDIz3kOo9faEZGY2GQfnNWNpVo
is4Ou6wuevzoyQRWb1zS3mHXjUJDwGExcuW3KOq2/aAftovhkW/E+V6TyidufbSE
mtFuaMWyp6D/3NsOYdzANCNsXtjksfyDIYCCwpmk3F1A3ClpoSfqA9uOF96F4vEP
4VGbZ5lRcwp3g+lUfoGtKbm3v6m5zUq6TJNPAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUuWIzlZJNGFUi4rDgq2QLEjmsZgAwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvdVdJemxaSk5HRlVpNHJEZ3EyUUxF
am1zWmdBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHzaUDAN
BgkqhkiG9w0BAQsFAAOCAQEAEyzzqtPQOvMsZpSO2k1WZ8U6Ltc4B4MKRYnslw7B
c/rXEfVNtjpEZ47nSvUtjbxAAeevi47bM27MiMzhT2DM2njBrckv59Z/P4R3l7vt
eMSxtlj9rQ3jH88OqkYAi4+LdVM8tINnBAh/jgPwg21K/eRcNIJlDS8nwhjq3SNw
brkWaYW+FLaPMjVQLYF0qWno4qgtsmWyxJnxwKK/cPu+dSo5La9dOQAmxeUv6mCL
gSm77l0uGUwt5oNV8b5iLhjc/w+9qkiYtKBCBRjye0zjD/W3DRi7KFT/lH7GoalT
+8Jj51EWZBJhfWBBvd1b2RXMa/43icq2N6Jwk2ELokbJSw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org