Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/-Mq-lmuBWfS6bpXvycM1EUbLfys.roa
File: -Mq-lmuBWfS6bpXvycM1EUbLfys.roa (raw, json)
Hash identifier: EA2Hu3CNMtcrVa68WIDM1uyAESuK6K6mDjhdaHMcp7A=
Subject key identifier: F8:CA:BE:96:6B:81:59:F4:BA:6E:95:EF:C9:C3:35:11:46:CB:7F:2B
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F7F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-Mq-lmuBWfS6bpXvycM1EUbLfys.roa
Signing time: Fri 01 Sep 2023 08:57:08 +0000
ROA not before: Fri 01 Sep 2023 08:57:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 211.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3967 (0xf7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F8CABE966B8159F4BA6E95EFC9C3351146CB7F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:44:30:13:30:d3:d2:bf:5f:b7:b9:1f:58:
0c:c4:22:86:54:e7:72:f7:49:e4:d0:32:54:d9:37:
d9:cd:ba:39:50:41:7a:35:6e:c2:e4:52:85:9c:e4:
e7:98:16:73:ae:76:c9:0c:54:64:82:61:08:d9:d3:
7f:1c:33:8e:c7:45:ba:51:76:d0:99:d7:36:50:e3:
50:78:9e:83:fa:60:19:99:54:95:3b:4b:2c:31:a4:
c8:21:bc:1f:a0:d6:cb:9c:10:68:5f:b4:c7:f8:aa:
57:d7:5d:fc:ce:ae:3e:d2:53:91:51:22:aa:41:f7:
02:bd:32:05:13:f5:67:ac:73:39:e2:a7:db:48:2f:
56:34:55:8f:8c:c1:1f:ad:79:99:10:f6:ef:77:65:
b2:c9:09:bf:85:2c:1b:93:4c:f2:bf:42:fb:72:22:
51:b0:5a:5e:e9:dd:7c:1c:84:e7:7b:85:0c:33:dc:
ea:38:11:4c:7b:8b:30:6e:de:9e:4d:ff:b5:d2:41:
4f:d5:3c:30:39:5e:32:a6:f1:c4:a7:ee:d2:1d:5e:
ab:7b:d7:52:d1:87:04:98:49:76:7c:46:39:0a:1f:
87:51:17:c7:23:2e:3f:23:31:9a:3e:48:0e:f9:cb:
0b:d9:21:85:45:da:4b:7e:89:32:d1:3e:b8:39:f0:
78:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CA:BE:96:6B:81:59:F4:BA:6E:95:EF:C9:C3:35:11:46:CB:7F:2B
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-Mq-lmuBWfS6bpXvycM1EUbLfys.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:d6:b0:ee:1a:eb:6a:80:3f:10:28:83:53:85:18:b3:b4:a9:
f3:10:2a:ee:dc:4d:34:1b:9f:19:ae:20:61:9f:c8:49:51:9e:
29:de:78:08:8e:15:be:5d:f8:8e:6b:36:5f:03:64:ff:de:24:
dc:2b:c6:8d:2c:ee:05:cd:89:5f:d4:f7:94:b9:71:82:44:a8:
6d:5c:58:45:36:7d:3f:fa:b9:90:d3:4e:68:00:19:08:5d:c4:
1d:fc:bc:c3:83:81:02:45:26:f3:37:6d:59:6c:03:c6:8a:f9:
c5:40:4d:b4:4c:65:71:c1:bb:cc:d7:57:97:d2:8d:1c:ad:4b:
28:33:7f:94:19:73:a7:24:b4:50:e8:45:3d:52:5d:fa:0c:c0:
0d:09:3c:2c:dd:21:d1:ea:b2:18:27:43:9e:e5:6e:a5:be:e5:
e1:b5:10:c8:d6:c6:c7:22:02:34:0b:63:59:6d:cf:6e:c1:8d:
07:33:6c:25:f3:47:f5:2c:b0:59:74:02:01:97:9c:13:ab:26:
03:67:70:21:61:1e:cf:b4:cc:c5:b2:4a:3f:72:37:83:e1:48:
2b:41:f5:6b:d3:4f:53:58:85:01:1e:e2:72:d7:a7:dc:77:d5:
67:ce:5f:c5:f3:f5:b0:eb:02:85:9e:29:a6:4f:8a:75:cf:cd:
42:b6:b7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org