Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/x_ibVybyT3spj2RzV_g8Iihsnxc.roa
File: x_ibVybyT3spj2RzV_g8Iihsnxc.roa (raw, json)
Hash identifier: I3ZSiGPfofZF5SpwXwH0hvRo/DottDvPDQ6CGZ/3pqA=
Subject key identifier: C7:F8:9B:57:26:F2:4F:7B:29:8F:64:73:57:F8:3C:22:28:6C:9F:17
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0CA3
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/x_ibVybyT3spj2RzV_g8Iihsnxc.roa
Signing time: Sun 07 Feb 2021 11:48:38 +0000
ROA not before: Sun 07 Feb 2021 11:48:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 60.244.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3235 (0xca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:48:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C7F89B5726F24F7B298F647357F83C22286C9F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:8f:f2:d7:d3:5d:70:1d:7b:20:cc:82:e9:
95:d9:26:1d:3b:b9:8f:ba:12:fa:e8:ad:02:9c:bd:
61:b8:5e:be:2c:a0:f2:67:69:5e:b6:0e:53:90:e4:
d2:1b:b7:f2:2e:1b:9d:60:2c:b9:27:50:ba:23:95:
75:e5:9e:ab:e8:30:8e:2c:ec:a5:bc:e1:16:5a:26:
63:02:4c:b9:68:ff:52:88:da:9c:e6:e3:bc:be:54:
a8:fc:39:14:f4:cd:cc:f2:d8:a4:0d:1f:bd:ba:39:
f1:1d:04:ef:a8:bd:3d:f7:8b:2b:07:d3:b3:8b:87:
a6:40:96:b0:1f:dd:26:2c:d7:d5:cd:88:77:bc:2c:
48:15:97:16:a8:8a:94:21:1d:40:83:61:39:e9:4a:
15:28:1b:71:8d:5e:35:5d:ec:3c:30:ab:88:9a:fa:
be:0c:88:37:28:a7:f1:08:a4:15:64:c3:ce:b8:db:
ac:fe:f6:ad:4a:ce:37:54:2b:ee:4f:24:65:40:5d:
ec:b1:d3:05:f5:70:0d:31:c7:10:95:ec:7f:ef:e4:
ed:29:97:4a:b8:ca:66:6c:90:66:54:3a:ba:b6:63:
8d:07:66:bb:8f:90:9e:8a:cf:36:45:3c:aa:8d:cf:
d3:e8:18:5c:ca:e1:34:b0:56:d2:0f:a1:95:3c:9e:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F8:9B:57:26:F2:4F:7B:29:8F:64:73:57:F8:3C:22:28:6C:9F:17
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/x_ibVybyT3spj2RzV_g8Iihsnxc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:36:98:e7:57:01:e0:ee:20:95:a4:48:0a:b8:36:a1:89:34:
c9:68:40:54:2f:75:c9:ad:0b:78:c4:8c:94:4a:e0:f0:c3:f5:
e0:30:42:b7:e7:00:eb:0d:9f:4e:d6:96:3f:6a:90:00:f3:48:
b2:ac:08:45:66:bd:e9:72:e5:23:be:25:9b:32:16:00:fe:92:
55:ff:b9:5e:49:02:35:aa:ae:66:a4:62:da:f4:90:04:db:b9:
67:12:ea:2f:e5:95:5a:74:8c:d9:cd:ef:22:28:29:fc:34:22:
a9:06:a7:68:84:2c:0f:5b:d2:42:31:2b:31:57:56:11:ae:be:
54:db:e9:a6:9b:9e:ad:dd:b9:a0:df:36:6c:32:2f:0a:a2:36:
75:85:cb:e9:e1:4e:f9:b8:3a:18:87:89:88:3c:0d:60:fd:b1:
5e:53:5c:c1:16:8e:56:e0:c3:23:f4:73:30:9b:f0:85:f0:37:
46:98:af:e6:29:d7:bf:74:d2:96:7c:91:bb:d5:1e:0a:d9:f9:
c3:40:37:b3:a9:55:86:b2:3c:76:47:88:98:f7:8f:10:a2:df:
75:98:04:43:c9:f1:98:36:c9:09:09:9d:a3:53:e9:9d:a1:e2:
d9:d3:43:46:67:f3:af:01:3f:f4:10:8c:c9:10:ca:f0:f6:dd:
54:06:34:22
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTAyMDcx
MTQ4MzhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEM3Rjg5QjU3MjZGMjRG
N0IyOThGNjQ3MzU3RjgzQzIyMjg2QzlGMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDURo/y19NdcB17IMyC6ZXZJh07uY+6EvrorQKcvWG4Xr4soPJn
aV62DlOQ5NIbt/IuG51gLLknULojlXXlnqvoMI4s7KW84RZaJmMCTLlo/1KI2pzm
47y+VKj8ORT0zczy2KQNH726OfEdBO+ovT33iysH07OLh6ZAlrAf3SYs19XNiHe8
LEgVlxaoipQhHUCDYTnpShUoG3GNXjVd7Dwwq4ia+r4MiDcop/EIpBVkw86426z+
9q1KzjdUK+5PJGVAXeyx0wX1cA0xxxCV7H/v5O0pl0q4ymZskGZUOrq2Y40HZruP
kJ6KzzZFPKqNz9PoGFzK4TSwVtIPoZU8nmCPAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUx/ibVybyT3spj2RzV/g8IihsnxcwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wveF9pYlZ5YnlUM3NwajJSelZfZzhJ
aWhzbnhjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADz0MA0G
CSqGSIb3DQEBCwUAA4IBAQCINpjnVwHg7iCVpEgKuDahiTTJaEBUL3XJrQt4xIyU
SuDww/XgMEK35wDrDZ9O1pY/apAA80iyrAhFZr3pcuUjviWbMhYA/pJV/7leSQI1
qq5mpGLa9JAE27lnEuov5ZVadIzZze8iKCn8NCKpBqdohCwPW9JCMSsxV1YRrr5U
2+mmm56t3bmg3zZsMi8KojZ1hcvp4U75uDoYh4mIPA1g/bFeU1zBFo5W4MMj9HMw
m/CF8DdGmK/mKde/dNKWfJG71R4K2fnDQDezqVWGsjx2R4iY948Qot91mARDyfGY
NskJCZ2jU+mdoeLZ00NGZ/OvAT/0EIzJEMrw9t1UBjQi
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org