Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/wjvA86mXPrPo3CpZvDHqfGn1aL0.roa
File: wjvA86mXPrPo3CpZvDHqfGn1aL0.roa (raw, json)
Hash identifier: uk6nUA2HzSA5B8hbH67Ox27iJTzLUvbQepgK3UsqMuo=
Subject key identifier: C2:3B:C0:F3:A9:97:3E:B3:E8:DC:2A:59:BC:31:EA:7C:69:F5:68:BD
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E1F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wjvA86mXPrPo3CpZvDHqfGn1aL0.roa
Signing time: Wed 29 Sep 2021 02:40:00 +0000
ROA not before: Wed 29 Sep 2021 02:40:00 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7539
IP address blocks: 210.200.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3615 (0xe1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:40:00 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C23BC0F3A9973EB3E8DC2A59BC31EA7C69F568BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4b:4b:57:34:06:4f:cf:8b:b9:38:45:50:71:
17:43:12:3f:99:e4:d5:4a:07:52:6c:fd:c6:45:d3:
c6:a4:b5:19:fc:c2:9b:b8:25:31:5c:c9:db:0c:c5:
76:36:2b:94:54:27:65:ab:e7:8c:fc:c9:1f:e5:eb:
e8:7e:0c:f1:80:d5:9b:41:12:4f:be:70:d3:d3:8c:
73:dd:48:73:92:55:ab:b0:26:a3:6d:4b:d9:f3:fd:
53:74:c8:87:a7:b3:80:3c:89:56:4e:35:76:07:d5:
3e:e3:c5:4b:5e:6a:55:ec:80:7c:c0:68:59:fa:e4:
b2:67:a0:31:72:57:4d:6d:40:49:63:05:67:21:be:
72:ff:86:93:0a:8f:43:42:0c:08:e1:4d:d3:90:bf:
28:fc:07:9b:aa:1c:ea:28:c8:be:45:f7:7f:43:17:
c5:df:93:c8:2c:e1:f3:a0:e4:3c:20:b9:cd:40:b6:
13:0a:74:b0:13:8a:86:9d:c6:8d:8b:d0:be:3e:88:
33:f0:2f:9b:23:4a:8c:47:70:a0:39:d4:a1:d7:8e:
7b:0b:83:fe:33:87:4b:2d:d0:13:29:85:cb:6c:dc:
0d:b2:5a:ad:a9:89:81:54:70:6f:18:71:61:7f:4e:
d5:89:a3:0c:a5:30:fa:9f:14:19:fb:86:08:b9:60:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3B:C0:F3:A9:97:3E:B3:E8:DC:2A:59:BC:31:EA:7C:69:F5:68:BD
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wjvA86mXPrPo3CpZvDHqfGn1aL0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.32.0/20
Signature Algorithm: sha256WithRSAEncryption
79:e9:e7:bd:ab:43:b9:f8:97:78:ee:79:2b:8f:da:ff:23:a1:
a9:13:95:2a:62:87:2b:80:d6:5f:88:59:5c:97:ba:dc:02:96:
21:17:ca:71:62:8c:c1:10:fa:c2:7e:26:d8:6f:a6:ef:db:ee:
5f:01:48:53:71:92:80:97:16:f7:9a:a9:12:5b:5c:3f:35:a4:
36:a4:18:6d:55:ee:00:61:f6:4d:2e:30:78:a8:75:af:f0:0e:
a6:e6:73:51:6f:05:37:b6:42:fe:68:b4:bb:df:f7:0d:ba:11:
91:2b:aa:8e:83:5d:66:8f:ba:34:bf:9e:6f:ba:d2:9e:5a:6a:
62:37:5d:f2:e8:5d:47:12:91:d4:25:ca:fd:55:2a:1f:d0:cc:
f1:d4:28:31:ed:de:48:c5:1a:4e:42:9c:e6:80:52:22:78:02:
f2:85:40:8f:ea:ac:c8:d5:cd:cf:ee:be:b0:a6:3b:bf:9f:38:
cb:5b:dd:9c:9a:82:bf:88:58:ed:de:01:f7:d1:57:fd:05:ca:
5c:20:e6:47:64:1d:95:ce:95:92:6c:f5:3a:90:c7:e8:22:92:
c4:7b:6f:ed:d6:29:df:46:23:bf:df:f4:2c:b0:0e:a9:29:db:
b4:5a:41:0f:07:8f:23:78:f1:78:34:98:58:3d:7a:e0:3e:30:
fb:e8:01:cd
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDh8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTA5Mjkw
MjQwMDBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEMyM0JDMEYzQTk5NzNF
QjNFOERDMkE1OUJDMzFFQTdDNjlGNTY4QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQS0tXNAZPz4u5OEVQcRdDEj+Z5NVKB1Js/cZF08aktRn8wpu4
JTFcydsMxXY2K5RUJ2Wr54z8yR/l6+h+DPGA1ZtBEk++cNPTjHPdSHOSVauwJqNt
S9nz/VN0yIens4A8iVZONXYH1T7jxUtealXsgHzAaFn65LJnoDFyV01tQEljBWch
vnL/hpMKj0NCDAjhTdOQvyj8B5uqHOooyL5F939DF8Xfk8gs4fOg5Dwguc1AthMK
dLATioadxo2L0L4+iDPwL5sjSoxHcKA51KHXjnsLg/4zh0st0BMphcts3A2yWq2p
iYFUcG8YcWF/TtWJowylMPqfFBn7hgi5YOupAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUwjvA86mXPrPo3CpZvDHqfGn1aL0wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvd2p2QTg2bVhQclBvM0NwWnZESHFm
R24xYUwwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNLIIDAN
BgkqhkiG9w0BAQsFAAOCAQEAeennvatDufiXeO55K4/a/yOhqROVKmKHK4DWX4hZ
XJe63AKWIRfKcWKMwRD6wn4m2G+m79vuXwFIU3GSgJcW95qpEltcPzWkNqQYbVXu
AGH2TS4weKh1r/AOpuZzUW8FN7ZC/mi0u9/3DboRkSuqjoNdZo+6NL+eb7rSnlpq
Yjdd8uhdRxKR1CXK/VUqH9DM8dQoMe3eSMUaTkKc5oBSIngC8oVAj+qsyNXNz+6+
sKY7v584y1vdnJqCv4hY7d4B99FX/QXKXCDmR2Qdlc6Vkmz1OpDH6CKSxHtv7dYp
30Yjv9/0LLAOqSnbtFpBDwePI3jxeDSYWD164D4w++gBzQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org