Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/wyINMi1AVdTKqEu1DwH_pf1wyAU.roa
File: wyINMi1AVdTKqEu1DwH_pf1wyAU.roa (raw, json)
Hash identifier: P3H1voX0qzdm+RmdIcNh9sm9DjtjdjcPNj/5bG54io0=
Subject key identifier: C3:22:0D:32:2D:40:55:D4:CA:A8:4B:B5:0F:01:FF:A5:FD:70:C8:05
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0950
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wyINMi1AVdTKqEu1DwH_pf1wyAU.roa
Signing time: Tue 29 Sep 2020 10:01:42 +0000
ROA not before: Tue 29 Sep 2020 10:01:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 60.244.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2384 (0x950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C3220D322D4055D4CAA84BB50F01FFA5FD70C805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:1c:9d:4f:0a:dc:d2:d3:93:81:40:73:a1:
e4:c2:18:57:db:ac:8e:67:e8:c4:d6:8f:07:fe:34:
77:41:df:0b:7e:48:a6:e8:7b:6b:87:f1:2b:28:dd:
ac:d5:e3:47:00:90:55:90:d7:0b:11:80:30:2f:e5:
65:c8:26:08:44:87:81:34:ff:41:60:cf:31:c3:a4:
99:d6:f4:03:5e:a5:f2:f4:ca:3d:10:d5:45:8a:01:
48:2f:b7:44:2c:6b:84:a8:6c:30:4d:44:b9:79:5c:
3d:a0:2b:1b:1c:dd:a8:65:54:bd:5c:5f:dc:10:73:
38:d1:05:7f:8e:a8:7b:85:28:d4:1a:25:ce:30:b2:
24:c1:59:20:79:2a:a2:44:74:3e:7a:6b:31:50:df:
ee:d6:80:fc:1f:a4:88:37:ef:1c:48:e8:9a:1f:9d:
63:c0:93:38:42:c4:6b:21:4d:a1:bf:b9:86:5e:40:
73:89:dd:5d:32:3b:30:f1:be:0d:8a:cb:95:6e:6c:
ff:2b:d4:9d:80:22:fb:53:b6:4d:3b:3d:38:13:11:
ba:a8:16:d0:c0:2b:e7:84:3e:44:8c:00:0d:ba:bc:
d9:46:95:74:01:5c:ae:cb:ab:64:7c:98:e8:f8:9c:
a8:9c:4f:0f:ea:6e:1f:29:d8:2c:27:e2:b2:07:92:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:22:0D:32:2D:40:55:D4:CA:A8:4B:B5:0F:01:FF:A5:FD:70:C8:05
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wyINMi1AVdTKqEu1DwH_pf1wyAU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3d:e9:16:94:23:34:77:e8:b2:12:cd:14:eb:65:b1:44:15:b0:
49:24:ef:7b:c4:4c:9a:d6:03:29:3e:ee:42:25:27:dc:00:1c:
82:a7:65:d9:2c:6f:73:99:78:11:16:16:3b:f3:79:a7:08:04:
3d:1b:65:76:89:ff:d4:6c:44:ac:83:05:5d:eb:38:22:29:4d:
48:a6:e7:5f:a1:0b:33:56:31:3b:a6:e0:89:a7:05:00:ac:29:
88:c4:da:26:e0:f1:7b:36:59:9f:51:cd:60:92:21:d1:57:a2:
4e:54:43:cb:5f:5b:27:e3:d9:d5:fb:01:c2:58:eb:c0:17:84:
78:a4:ce:ee:41:fb:88:ef:d0:62:75:92:3d:72:a6:e3:ee:6f:
c4:f8:7d:43:df:dc:35:8c:ca:85:23:2e:0a:ba:17:7d:19:56:
c3:d6:8c:df:85:ee:4b:77:c4:e5:5f:e4:33:2d:8a:56:ca:a7:
99:cf:f6:43:01:13:13:4a:80:61:56:88:3e:ea:27:13:af:13:
7a:7f:d8:f0:b4:ad:c6:93:6a:a6:7a:bb:5c:b9:90:9c:91:a0:
00:8d:d8:39:19:44:f7:d4:b1:f0:fd:b0:dc:e4:07:fd:45:cd:
0f:b9:4a:11:8f:fc:f6:e9:f4:ea:8b:24:3c:de:fc:6e:82:31:
24:48:5c:bb
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCVAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMDA5Mjkx
MDAxNDJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEMzMjIwRDMyMkQ0MDU1
RDRDQUE4NEJCNTBGMDFGRkE1RkQ3MEM4MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIbRydTwrc0tOTgUBzoeTCGFfbrI5n6MTWjwf+NHdB3wt+SKbo
e2uH8Sso3azV40cAkFWQ1wsRgDAv5WXIJghEh4E0/0FgzzHDpJnW9ANepfL0yj0Q
1UWKAUgvt0Qsa4SobDBNRLl5XD2gKxsc3ahlVL1cX9wQczjRBX+OqHuFKNQaJc4w
siTBWSB5KqJEdD56azFQ3+7WgPwfpIg37xxI6JofnWPAkzhCxGshTaG/uYZeQHOJ
3V0yOzDxvg2Ky5VubP8r1J2AIvtTtk07PTgTEbqoFtDAK+eEPkSMAA26vNlGlXQB
XK7Lq2R8mOj4nKicTw/qbh8p2Cwn4rIHkh2/AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUwyINMi1AVdTKqEu1DwH/pf1wyAUwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvd3lJTk1pMUFWZFRLcUV1MUR3SF9w
ZjF3eUFVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzz0gDAN
BgkqhkiG9w0BAQsFAAOCAQEAPekWlCM0d+iyEs0U62WxRBWwSSTve8RMmtYDKT7u
QiUn3AAcgqdl2Sxvc5l4ERYWO/N5pwgEPRtldon/1GxErIMFXes4IilNSKbnX6EL
M1YxO6bgiacFAKwpiMTaJuDxezZZn1HNYJIh0VeiTlRDy19bJ+PZ1fsBwljrwBeE
eKTO7kH7iO/QYnWSPXKm4+5vxPh9Q9/cNYzKhSMuCroXfRlWw9aM34XuS3fE5V/k
My2KVsqnmc/2QwETE0qAYVaIPuonE68Ten/Y8LStxpNqpnq7XLmQnJGgAI3YORlE
99Sx8P2w3OQH/UXND7lKEY/89un06oskPN78boIxJEhcuw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org