Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/hVtvFgmJrm5h7buGG5jUFDTXvgE.roa
File: hVtvFgmJrm5h7buGG5jUFDTXvgE.roa (raw, json)
Hash identifier: BQdKGHeuhdJ/PQ+RnNvtwA5HFf6SiF+v/bnPc3Fan44=
Subject key identifier: 85:5B:6F:16:09:89:AE:6E:61:ED:BB:86:1B:98:D4:14:34:D7:BE:01
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 0B92
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/hVtvFgmJrm5h7buGG5jUFDTXvgE.roa
Signing time: Fri 01 Sep 2023 08:35:40 +0000
ROA not before: Fri 01 Sep 2023 08:35:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18046
IP address blocks: 150.107.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2962 (0xb92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Sep 1 08:35:40 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=855B6F160989AE6E61EDBB861B98D41434D7BE01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:19:fc:d7:6c:6a:09:5e:bd:eb:e3:96:66:
bb:29:7a:1f:14:bc:9e:40:fe:70:77:b5:2c:b9:7d:
ae:d1:69:2b:a1:f2:ab:6a:96:f3:63:a6:96:68:2c:
94:a9:69:f4:75:56:14:20:c1:ef:9f:7e:8f:16:2c:
05:d2:43:c7:61:67:24:53:bd:48:2b:3a:24:ab:fd:
cf:62:cd:73:f5:d4:5d:e9:cb:52:68:a8:f7:e5:6c:
1b:f0:d3:6a:f7:7c:c7:98:72:16:62:05:65:ca:f0:
ef:93:0a:f0:87:19:3e:43:97:f7:4e:02:f5:20:c3:
94:e5:38:b3:a0:f5:ee:93:55:6a:12:8c:f6:76:49:
01:1e:9f:82:f5:27:25:49:32:c3:5c:83:80:ba:ab:
ee:f7:08:02:9e:15:80:a5:b1:47:a0:3d:4e:09:4f:
49:b7:df:df:b2:9a:0d:b6:02:28:45:fc:15:3d:7f:
bd:be:af:08:b0:7b:4a:1b:9d:b1:fb:48:9b:6f:a1:
82:9f:a9:bc:60:92:76:69:b9:d0:92:17:d6:6e:04:
91:b6:6d:15:cb:b2:37:66:76:16:5c:39:d4:04:7d:
e4:17:ea:b9:e1:09:25:28:c0:b3:86:6d:0b:fe:7a:
42:c4:06:6d:44:59:9b:7c:44:57:d0:bd:13:db:c2:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5B:6F:16:09:89:AE:6E:61:ED:BB:86:1B:98:D4:14:34:D7:BE:01
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/hVtvFgmJrm5h7buGG5jUFDTXvgE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.107.56.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:b5:8a:42:bc:52:62:3f:c5:7f:02:81:4a:20:07:04:fd:5e:
34:76:58:b2:b7:68:4a:13:f8:37:00:4b:90:55:83:e6:d8:2a:
28:a1:dd:75:45:a4:00:76:1d:10:1a:5c:ab:bb:5d:10:34:e0:
25:98:70:6b:18:8e:e0:75:cb:b7:20:95:73:10:f8:7b:4e:78:
df:55:4b:28:cf:fa:3d:eb:2a:c8:c2:2e:2b:ea:f0:42:2f:90:
fb:0e:8d:98:40:37:85:9e:e6:0b:fd:f3:00:c9:de:cf:fd:df:
a1:99:e4:35:28:36:10:46:c3:02:8f:84:d0:97:54:48:67:13:
1e:3d:b7:07:12:a6:d7:ad:9d:b8:67:de:3f:72:a9:2d:18:24:
b6:33:9b:00:00:0a:b2:06:98:74:0a:cd:fc:63:8b:d1:4e:ff:
90:23:2c:52:e1:99:c3:97:7e:12:20:c7:a4:09:87:6d:40:46:
62:42:ee:47:e0:05:72:eb:69:72:b6:ec:63:97:8c:da:ae:57:
fe:94:47:4d:43:84:34:fd:80:d5:b3:36:ca:81:e4:a5:8e:fb:
65:5b:e4:03:2e:b2:5f:a1:63:0f:5d:b5:c5:08:be:10:ee:14:
04:0b:11:27:f8:7c:88:7a:99:ad:ff:c7:dc:63:49:88:c9:1c:
c3:19:88:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org