Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ur6GR_DVIWMzlq1gZmGFYkuVpT8.roa
File: ur6GR_DVIWMzlq1gZmGFYkuVpT8.roa (raw, json)
Hash identifier: Y1lfCSsTwX3vNH/zkKYw7TrBh7IwBN+Cj9eWiw65wJ4=
Subject key identifier: BA:BE:86:47:F0:D5:21:63:33:96:AD:60:66:61:85:62:4B:95:A5:3F
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12EF
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ur6GR_DVIWMzlq1gZmGFYkuVpT8.roa
Signing time: Fri 01 Sep 2023 08:05:11 +0000
ROA not before: Fri 01 Sep 2023 08:05:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24155
IP address blocks: 2404:0:6000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4847 (0x12ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BABE8647F0D521633396AD60666185624B95A53F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:5b:ef:34:57:ca:70:d2:4d:45:42:a5:e5:
7d:d1:71:45:b5:e0:65:ee:d3:4c:61:4b:94:9c:9a:
62:fa:b5:08:83:0c:0e:11:f8:3a:37:f7:fe:95:ca:
3a:62:76:84:38:d4:9f:2b:19:46:3a:d4:59:bf:d5:
5f:44:02:38:ed:a3:27:bb:8f:08:27:b1:47:76:87:
2c:fb:ac:33:17:b1:50:c0:0a:4a:c8:a9:c2:f3:7e:
db:cb:3b:20:f7:5f:e2:af:16:3d:d3:16:b4:62:2c:
41:28:de:8b:6c:0c:bc:16:fc:34:5b:eb:a6:2b:30:
0e:fd:c5:98:16:a0:54:ed:26:ea:00:3a:1c:a3:6c:
52:4a:ba:01:e6:39:7e:d3:de:33:32:54:bb:c5:11:
2c:3b:58:09:1a:82:bf:08:94:f0:1a:0e:dc:4b:d0:
74:43:82:85:b1:e7:d8:02:16:91:0d:38:c3:22:01:
e2:93:f5:53:40:d0:c1:8d:db:d7:33:76:d4:56:2a:
82:34:bf:7a:9b:c2:48:32:ba:c2:f3:b8:12:87:7e:
23:3d:86:41:94:10:14:28:93:83:8b:9a:7b:43:4e:
fb:c1:a9:e2:e2:2d:1c:0e:92:de:71:7c:85:41:26:
5c:27:ce:ed:ba:36:ca:be:97:38:de:b6:9f:0f:7f:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BE:86:47:F0:D5:21:63:33:96:AD:60:66:61:85:62:4B:95:A5:3F
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ur6GR_DVIWMzlq1gZmGFYkuVpT8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:6000::/36
Signature Algorithm: sha256WithRSAEncryption
ba:f3:08:c6:f8:ea:60:2b:e2:48:08:34:a4:f9:d4:98:40:e7:
bc:80:6b:ca:6c:12:15:a2:90:34:16:b4:ad:a2:d1:0b:1a:e3:
32:9f:0a:de:4c:3d:0a:58:06:7b:f6:94:8f:ac:d4:62:ee:d5:
4f:be:eb:29:88:a2:8b:f3:5c:cb:1b:dc:a0:d4:3e:b0:00:0b:
6b:79:2d:38:50:bd:ca:00:6e:35:1b:76:5f:9d:7c:3a:fe:b2:
bc:0d:a2:74:77:2f:fa:9b:61:d3:f9:19:b0:c5:8c:a0:46:ed:
52:1f:5c:c0:24:da:9d:9b:c9:ef:82:c8:93:32:5c:b8:7f:20:
67:fe:07:5b:9c:2e:41:00:17:cf:7b:a2:40:5f:a0:c4:e7:e7:
28:6e:41:49:83:13:7a:89:26:aa:91:83:14:99:78:be:87:1c:
a5:04:3e:80:27:c2:e7:bb:27:90:57:8f:55:50:ef:e9:68:42:
2e:18:53:ee:2c:df:9b:88:f9:be:62:9e:83:75:fc:8a:78:1b:
31:f2:42:6a:b7:f3:6b:ff:95:a2:f0:8a:54:e0:98:b2:34:1c:
28:25:0f:3e:42:aa:37:5a:7e:2c:5e:3e:ab:0e:d6:0f:0e:e3:
46:2b:4c:5a:34:26:ac:c7:c0:51:56:de:bd:b5:13:79:1d:3c:
13:e2:8a:f4
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEu8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA1MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJBQkU4NjQ3RjBENTIx
NjMzMzk2QUQ2MDY2NjE4NTYyNEI5NUE1M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCSLFvvNFfKcNJNRUKl5X3RcUW14GXu00xhS5ScmmL6tQiDDA4R
+Do39/6VyjpidoQ41J8rGUY61Fm/1V9EAjjtoye7jwgnsUd2hyz7rDMXsVDACkrI
qcLzftvLOyD3X+KvFj3TFrRiLEEo3otsDLwW/DRb66YrMA79xZgWoFTtJuoAOhyj
bFJKugHmOX7T3jMyVLvFESw7WAkagr8IlPAaDtxL0HRDgoWx59gCFpENOMMiAeKT
9VNA0MGN29czdtRWKoI0v3qbwkgyusLzuBKHfiM9hkGUEBQok4OLmntDTvvBqeLi
LRwOkt5xfIVBJlwnzu26Nsq+lzjetp8Pf0qLAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUur6GR/DVIWMzlq1gZmGFYkuVpT8wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvdXI2R1JfRFZJV016bHExZ1ptR0ZZ
a3VWcFQ4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCQEAABg
MA0GCSqGSIb3DQEBCwUAA4IBAQC68wjG+OpgK+JICDSk+dSYQOe8gGvKbBIVopA0
FrStotELGuMynwreTD0KWAZ79pSPrNRi7tVPvuspiKKL81zLG9yg1D6wAAtreS04
UL3KAG41G3ZfnXw6/rK8DaJ0dy/6m2HT+RmwxYygRu1SH1zAJNqdm8nvgsiTMly4
fyBn/gdbnC5BABfPe6JAX6DE5+cobkFJgxN6iSaqkYMUmXi+hxylBD6AJ8LnuyeQ
V49VUO/paEIuGFPuLN+biPm+Yp6DdfyKeBsx8kJqt/Nr/5Wi8IpU4JiyNBwoJQ8+
Qqo3Wn4sXj6rDtYPDuNGK0xaNCasx8BRVt69tRN5HTwT4or0
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org