Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/wOGYbVwZ2CBpXzUs9TULvwnkBP4.roa
File: wOGYbVwZ2CBpXzUs9TULvwnkBP4.roa (raw, json)
Hash identifier: gM5XLLuR9Bk5nCLWIy6tFCkGyvZL/Igrep6k2VhHmyo=
Subject key identifier: C0:E1:98:6D:5C:19:D8:20:69:5F:35:2C:F5:35:0B:BF:09:E4:04:FE
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1079
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wOGYbVwZ2CBpXzUs9TULvwnkBP4.roa
Signing time: Tue 16 May 2023 08:36:15 +0000
ROA not before: Tue 16 May 2023 08:36:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 218.34.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4217 (0x1079)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:15 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C0E1986D5C19D820695F352CF5350BBF09E404FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3c:50:aa:79:b2:a5:0a:56:a5:03:96:4e:31:
a4:e9:22:f9:98:11:f3:f1:32:1a:d2:0d:cc:6a:fe:
d5:31:99:f5:0e:e5:bd:12:33:8c:62:ef:e1:d9:a1:
88:68:88:5a:ac:e5:bf:67:7c:1b:d3:2c:e1:be:05:
d5:2a:a4:78:46:6c:38:0f:4b:39:55:1a:c1:82:0c:
4d:b1:24:2a:1a:15:09:e4:dc:bb:6c:31:60:19:b0:
fe:a7:4c:ac:31:08:54:09:35:4d:93:a5:36:32:4a:
11:7b:4e:85:90:6c:bc:ca:6f:32:34:23:cd:f6:3b:
3b:23:c3:6f:31:58:13:5f:7d:85:d1:66:aa:11:eb:
d1:56:9a:82:04:1f:fc:c0:6a:71:e6:c7:78:9a:e7:
6b:25:be:4f:aa:45:4a:0a:ca:b8:5a:96:0a:7d:9a:
b9:95:79:97:29:b5:bf:9d:6d:17:e7:36:6d:e5:ac:
11:7c:e1:5b:ae:bf:96:45:30:f2:ab:0e:c1:23:e1:
27:5b:80:99:aa:43:99:0b:b1:55:36:53:6d:a0:0d:
52:7a:e2:2a:76:53:ea:27:f3:b6:f9:32:36:cc:c7:
fa:ed:f1:19:cd:79:d2:43:6d:a6:b0:97:93:52:0f:
d5:ac:df:74:6b:26:e9:f1:2f:33:d8:3f:ae:77:b5:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E1:98:6D:5C:19:D8:20:69:5F:35:2C:F5:35:0B:BF:09:E4:04:FE
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wOGYbVwZ2CBpXzUs9TULvwnkBP4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
44:a0:7d:4c:00:16:d9:4e:e0:b3:d2:07:71:df:83:da:61:e9:
0e:99:6c:d2:57:8f:b4:fc:6c:2b:e1:0a:a8:4f:b8:94:75:cd:
22:74:7a:77:58:11:6d:c1:38:95:39:45:f7:0d:6b:be:81:4e:
d6:20:0d:2d:c4:b4:fd:83:5b:81:ed:c1:cb:96:44:3b:a4:38:
ec:af:9a:3e:c9:59:e3:83:d2:4f:e4:4a:e5:74:57:62:15:ce:
2c:ea:eb:9f:82:de:54:40:37:b9:71:fa:77:5c:84:3d:db:f2:
31:31:6d:98:d0:80:d9:03:e6:00:31:60:75:0e:54:76:36:11:
15:73:0f:cc:73:31:62:11:5c:2d:6c:55:54:26:31:5d:c8:14:
3e:a1:07:a8:63:56:53:06:a1:52:bf:48:9a:5e:d2:92:81:b5:
da:02:f8:90:0a:92:3f:d3:0e:e0:92:21:09:4c:26:27:d4:5a:
a6:dc:37:02:d4:e8:27:ab:eb:a7:fe:45:2f:eb:27:b4:80:3c:
af:5d:57:f0:f4:5e:ac:97:ce:e6:98:13:3d:60:c5:21:4c:59:
8c:5a:df:04:08:bf:87:ae:f4:55:a0:b6:fe:4f:71:38:48:ee:
2a:b4:bc:0e:07:ad:8c:84:3b:20:89:69:c3:4c:ac:fd:10:66:
9e:7a:dd:ee
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICEHkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA1MTYw
ODM2MTVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEMwRTE5ODZENUMxOUQ4
MjA2OTVGMzUyQ0Y1MzUwQkJGMDlFNDA0RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYPFCqebKlClalA5ZOMaTpIvmYEfPxMhrSDcxq/tUxmfUO5b0S
M4xi7+HZoYhoiFqs5b9nfBvTLOG+BdUqpHhGbDgPSzlVGsGCDE2xJCoaFQnk3Lts
MWAZsP6nTKwxCFQJNU2TpTYyShF7ToWQbLzKbzI0I832Ozsjw28xWBNffYXRZqoR
69FWmoIEH/zAanHmx3ia52slvk+qRUoKyrhalgp9mrmVeZcptb+dbRfnNm3lrBF8
4Vuuv5ZFMPKrDsEj4SdbgJmqQ5kLsVU2U22gDVJ64ip2U+on87b5MjbMx/rt8RnN
edJDbaawl5NSD9Ws33RrJunxLzPYP653te+9AgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUwOGYbVwZ2CBpXzUs9TULvwnkBP4wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvd09HWWJWd1oyQ0JwWHpVczlUVUx2
d25rQlA0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANoiMA0G
CSqGSIb3DQEBCwUAA4IBAQBEoH1MABbZTuCz0gdx34PaYekOmWzSV4+0/Gwr4Qqo
T7iUdc0idHp3WBFtwTiVOUX3DWu+gU7WIA0txLT9g1uB7cHLlkQ7pDjsr5o+yVnj
g9JP5ErldFdiFc4s6uufgt5UQDe5cfp3XIQ92/IxMW2Y0IDZA+YAMWB1DlR2NhEV
cw/MczFiEVwtbFVUJjFdyBQ+oQeoY1ZTBqFSv0iaXtKSgbXaAviQCpI/0w7gkiEJ
TCYn1Fqm3DcC1Ognq+un/kUv6ye0gDyvXVfw9F6sl87mmBM9YMUhTFmMWt8ECL+H
rvRVoLb+T3E4SO4qtLwOB62MhDsgiWnDTKz9EGaeet3u
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org