Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/xpLOHPpTklnkH1zHxzhzgicW_uA.roa
File: xpLOHPpTklnkH1zHxzhzgicW_uA.roa (raw, json)
Hash identifier: 4tCLAFFJkFVzhoiuCuP4oyFz4sWJwmkWFKBjFErXbwE=
Subject key identifier: C6:92:CE:1C:FA:53:92:59:E4:1F:5C:C7:C7:38:73:82:27:16:FE:E0
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0961
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/xpLOHPpTklnkH1zHxzhzgicW_uA.roa
Signing time: Tue 29 Sep 2020 10:01:46 +0000
ROA not before: Tue 29 Sep 2020 10:01:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 101.136.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2401 (0x961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C692CE1CFA539259E41F5CC7C73873822716FEE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:90:32:71:98:17:6c:8f:4e:80:5b:25:80:
72:4c:1b:1d:be:f6:05:b0:a8:32:b9:51:86:6e:95:
a5:8e:41:44:54:c4:e5:56:be:76:5c:5e:b1:06:c1:
82:aa:a5:c6:0a:33:b1:d1:84:4b:7c:12:b2:17:d8:
03:13:08:cf:db:70:9c:6e:79:4f:41:31:39:ca:6d:
38:75:28:4e:1a:6f:cc:bd:8f:dd:1a:7a:30:ba:e9:
e0:82:13:9e:99:3b:83:ed:21:7d:8b:db:5c:18:0e:
60:4f:75:54:51:a5:54:d5:b0:2f:8d:f5:b2:61:87:
3c:5c:97:83:16:a5:a8:93:6a:63:de:a5:01:96:78:
b0:29:41:80:16:16:8a:d5:52:3f:16:19:79:0a:3c:
d9:f1:05:55:6b:32:fa:a3:dd:c5:e4:ec:c7:4a:f0:
a3:e2:98:4c:41:4e:3d:c8:92:a6:5c:df:14:23:9a:
a6:54:b1:d3:11:84:2c:a4:da:fa:8d:36:8e:09:5e:
01:28:c6:d2:cf:32:8f:a8:0f:63:3a:14:7f:ea:75:
00:54:cb:8c:50:05:fb:4b:e9:8a:98:72:36:1f:32:
ab:e2:cd:e3:f8:c1:48:f6:e6:a2:3f:32:24:1a:c5:
04:27:5a:53:8a:c6:fe:d0:ab:88:59:2c:3f:98:77:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:92:CE:1C:FA:53:92:59:E4:1F:5C:C7:C7:38:73:82:27:16:FE:E0
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/xpLOHPpTklnkH1zHxzhzgicW_uA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.136.0.0/14
Signature Algorithm: sha256WithRSAEncryption
aa:5f:3a:ea:60:cb:44:9d:7e:d7:a7:a4:e2:e5:c2:cd:1e:eb:
b1:32:60:d6:cb:76:ae:eb:16:a2:7c:d9:a3:db:66:45:c9:6e:
cb:74:4f:ad:20:72:10:7e:d4:7b:d8:ad:da:16:71:98:b0:fa:
e1:dc:80:28:fa:47:e1:5b:d7:b9:57:f4:72:e5:98:7a:79:cd:
57:2d:8d:24:43:fe:55:61:25:24:fb:bc:39:87:98:be:15:ba:
62:c8:82:a0:6d:cf:93:81:c4:aa:96:e0:60:8f:5b:4d:1d:09:
ce:ea:39:fa:a7:76:5d:8c:1b:83:d4:f1:8e:bf:64:b8:d5:ad:
5a:b3:24:2c:1f:be:aa:eb:95:9d:dd:52:77:85:1d:7b:1e:e6:
a6:46:b5:38:77:22:99:e1:b5:8a:c2:a6:db:13:3d:80:4f:f5:
88:5f:dc:5d:44:1a:b6:b8:b4:62:74:d1:5a:7f:60:c7:93:f9:
f4:63:6e:2f:f0:73:11:fb:3d:fc:5a:4d:b2:ef:b3:58:35:82:
3b:3d:d8:1b:d0:00:86:10:e8:e8:ed:f7:8e:f5:41:74:a0:d7:
4e:fe:7f:74:63:44:64:79:54:95:44:e8:70:58:5d:d3:51:26:
a7:6b:06:71:a5:07:c4:1e:5f:ef:ce:a8:96:c4:ce:0e:95:48:
b7:8b:34:83
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMDA5Mjkx
MDAxNDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEM2OTJDRTFDRkE1Mzky
NTlFNDFGNUNDN0M3Mzg3MzgyMjcxNkZFRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC285AycZgXbI9OgFslgHJMGx2+9gWwqDK5UYZulaWOQURUxOVW
vnZcXrEGwYKqpcYKM7HRhEt8ErIX2AMTCM/bcJxueU9BMTnKbTh1KE4ab8y9j90a
ejC66eCCE56ZO4PtIX2L21wYDmBPdVRRpVTVsC+N9bJhhzxcl4MWpaiTamPepQGW
eLApQYAWForVUj8WGXkKPNnxBVVrMvqj3cXk7MdK8KPimExBTj3IkqZc3xQjmqZU
sdMRhCyk2vqNNo4JXgEoxtLPMo+oD2M6FH/qdQBUy4xQBftL6YqYcjYfMqvizeP4
wUj25qI/MiQaxQQnWlOKxv7Qq4hZLD+Yd2j7AgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUxpLOHPpTklnkH1zHxzhzgicW/uAwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wveHBMT0hQcFRrbG5rSDF6SHh6aHpn
aWNXX3VBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAmWIMA0G
CSqGSIb3DQEBCwUAA4IBAQCqXzrqYMtEnX7Xp6Ti5cLNHuuxMmDWy3au6xaifNmj
22ZFyW7LdE+tIHIQftR72K3aFnGYsPrh3IAo+kfhW9e5V/Ry5Zh6ec1XLY0kQ/5V
YSUk+7w5h5i+FbpiyIKgbc+TgcSqluBgj1tNHQnO6jn6p3ZdjBuD1PGOv2S41a1a
syQsH76q65Wd3VJ3hR17HuamRrU4dyKZ4bWKwqbbEz2AT/WIX9xdRBq2uLRidNFa
f2DHk/n0Y24v8HMR+z38Wk2y77NYNYI7Pdgb0ACGEOjo7feO9UF0oNdO/n90Y0Rk
eVSVROhwWF3TUSanawZxpQfEHl/vzqiWxM4OlUi3izSD
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org