Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/HpcaO0N_4L3MgLENs5NUyqmCsfg.roa
File: HpcaO0N_4L3MgLENs5NUyqmCsfg.roa (raw, json)
Hash identifier: KfK12bjunCddTJawovMUm8/3rylYYGgNpQK9FP/Dmjc=
Subject key identifier: 1E:97:1A:3B:43:7F:E0:BD:CC:80:B1:0D:B3:93:54:CA:A9:82:B1:F8
Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Certificate serial: 0B45
Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/HpcaO0N_4L3MgLENs5NUyqmCsfg.roa
Signing time: Fri 01 Sep 2023 08:48:46 +0000
ROA not before: Fri 01 Sep 2023 08:48:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18411
IP address blocks: 61.56.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2885 (0xb45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Validity
Not Before: Sep 1 08:48:46 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1E971A3B437FE0BDCC80B10DB39354CAA982B1F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:ca:f6:37:d7:44:6a:83:48:f9:59:64:fa:
db:05:7c:cf:69:ae:b0:ac:76:b8:00:84:12:02:c5:
07:be:56:fb:5d:e4:53:fe:85:15:57:c2:6b:a7:f4:
7f:ff:d5:f1:20:c4:56:dc:eb:d7:c6:f4:2b:c4:0a:
d5:f9:7b:4b:3f:9a:7c:18:67:7d:84:75:e9:73:59:
b5:57:7a:b1:6e:5a:c3:66:39:c3:36:b4:5f:3a:24:
c7:ad:e6:aa:e3:f7:90:6b:4a:37:79:02:81:c7:b7:
46:24:2c:84:7d:6f:be:7c:c7:21:f7:a5:6e:c5:da:
a8:e7:cf:9c:7a:62:2e:fa:e7:c4:2c:0d:54:8c:f4:
0e:dd:23:40:5e:a4:59:f5:23:73:0a:d3:60:2b:e7:
e2:3a:fa:8d:b8:e0:d8:e3:79:0c:62:f6:d6:da:75:
f9:4d:a7:5a:12:38:6d:02:8e:74:0b:3f:0a:42:16:
c4:10:70:8d:7f:76:fc:98:88:65:a4:6d:20:e3:47:
89:29:8e:80:2c:3c:76:32:93:d8:be:e4:b4:ab:c3:
eb:6a:50:1f:28:37:9d:ee:d4:07:53:b0:4e:04:88:
26:49:a2:51:64:5a:7a:ab:c8:dc:28:ed:09:8b:81:
27:ed:bd:a8:46:72:24:a0:1a:6f:8c:b7:95:9c:60:
f0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:97:1A:3B:43:7F:E0:BD:CC:80:B1:0D:B3:93:54:CA:A9:82:B1:F8
X509v3 Authority Key Identifier:
keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/HpcaO0N_4L3MgLENs5NUyqmCsfg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.16.0/20
Signature Algorithm: sha256WithRSAEncryption
33:0f:c7:51:b3:c6:64:7d:25:c9:fc:fb:8f:7c:fd:87:21:84:
0c:d3:e3:8d:c3:5a:04:18:cc:e4:5f:6a:7e:09:1c:a5:49:a7:
95:93:d8:59:5b:b3:29:27:03:71:0f:3b:b5:9f:7c:2c:4c:d9:
99:68:17:e5:5d:09:69:9d:0c:17:8c:61:fd:33:7f:41:c2:ef:
56:82:1a:ee:eb:4c:7a:2e:e5:34:6a:27:47:39:b6:59:e9:21:
b7:7c:ac:ce:96:89:14:d7:a9:c5:fa:f0:f1:eb:4c:10:3c:f8:
a4:52:33:05:d9:9f:f0:1a:30:4f:fb:47:e0:cd:aa:9a:0d:d0:
8a:de:3f:11:c2:21:4d:68:e0:fb:24:b1:db:93:e8:ef:b2:23:
44:5e:f6:9d:e0:04:e0:33:33:d7:f8:ec:dc:dd:b1:d2:cd:5d:
b4:05:8a:aa:5c:ae:29:47:ac:84:09:27:75:6b:aa:a4:9c:31:
3e:3c:f7:d6:e0:97:c4:a4:c9:b4:46:cc:94:1f:e9:49:60:8e:
3b:10:89:12:ea:2f:ea:3a:dc:1c:38:4a:ac:7a:7c:4f:b4:96:
8f:4f:35:03:3d:59:a0:f2:c1:11:14:cd:a7:c7:0c:9e:a7:50:
28:78:c8:1f:4b:98:64:ea:3d:32:4c:59:70:06:63:cd:44:1c:
7e:2c:9e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org