Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/-OyjTZcZDATrQ2A-1rr4j_aiPGg.roa
File: -OyjTZcZDATrQ2A-1rr4j_aiPGg.roa (raw, json)
Hash identifier: ecvU711bMVYNRSzvPXAxDDEdROQnsExEj8/LsoGZqhg=
Subject key identifier: F8:EC:A3:4D:97:19:0C:04:EB:43:60:3E:D6:BA:F8:8F:F6:A2:3C:68
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FB4
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-OyjTZcZDATrQ2A-1rr4j_aiPGg.roa
Signing time: Fri 01 Sep 2023 08:57:23 +0000
ROA not before: Fri 01 Sep 2023 08:57:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 60.250.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4020 (0xfb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F8ECA34D97190C04EB43603ED6BAF88FF6A23C68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:5e:98:74:34:84:55:b9:76:db:cd:c0:e5:
00:6c:6b:8a:54:92:dc:7a:34:e3:a0:cb:74:7f:3f:
51:ba:37:ac:48:c0:5c:c6:9e:d7:16:82:88:8b:b1:
44:f2:6f:49:1f:2c:7d:d1:37:ed:ad:5c:b0:7c:38:
13:89:7c:b5:2a:fb:4f:cb:8e:91:0a:ff:57:a6:66:
a0:3b:d9:2b:4e:95:b6:ed:b0:93:01:ad:da:cc:fd:
c4:12:f1:c3:77:46:58:5b:1a:7b:6a:df:31:dc:0f:
fc:b5:04:7d:6b:15:3f:68:be:44:9f:ac:a3:a5:c7:
a7:a3:81:56:6d:2d:6a:06:5c:3a:27:fe:4e:70:b7:
ad:1c:ed:1b:78:95:fe:eb:77:b7:8c:a6:59:a2:f2:
19:c3:ef:78:43:ab:4e:4a:90:78:35:aa:4d:f9:21:
bb:e8:25:c6:5f:47:b1:7d:fc:c8:d0:dc:a4:39:b9:
f8:42:68:4e:36:ea:42:16:d8:76:a0:17:07:35:1a:
db:9d:8a:b5:64:c1:0f:1c:7e:4d:ea:51:0e:1f:24:
4f:50:5c:36:ef:5a:11:97:cd:6f:fd:f8:72:a7:ee:
70:b9:4d:83:de:98:ef:f7:35:42:71:78:ea:3b:ab:
7d:e3:75:bb:fd:72:02:ca:f7:71:69:6e:c9:32:4f:
20:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EC:A3:4D:97:19:0C:04:EB:43:60:3E:D6:BA:F8:8F:F6:A2:3C:68
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-OyjTZcZDATrQ2A-1rr4j_aiPGg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.250.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2b:db:23:71:9c:5b:81:8f:43:97:bb:5c:07:8f:70:11:e0:1f:
e0:f2:2d:93:12:0f:9d:16:2b:98:28:60:38:3a:e3:60:1c:0d:
a3:11:30:92:ef:09:44:a5:ea:aa:59:34:d2:72:8d:3a:5f:dd:
b0:70:90:39:93:c8:1d:c8:eb:48:1f:be:e7:f8:b7:ed:5b:af:
63:b0:5a:2e:b7:45:98:d4:69:5d:29:93:c9:f9:d1:c1:90:29:
07:85:51:62:d3:43:04:8b:84:60:62:f4:16:09:0e:9c:85:1a:
75:6c:fc:93:95:dc:79:f9:9c:2b:7b:d3:42:7c:02:b6:81:a9:
3f:b8:f1:f9:ea:c3:a6:43:6b:cd:bc:52:0f:4b:3f:86:28:fc:
a7:f9:34:48:30:ef:a7:13:50:3f:dc:2d:96:40:84:ce:05:fb:
bd:c6:df:41:1e:f8:fb:2e:69:e1:5b:b7:48:f2:76:1a:db:ca:
b4:e7:24:cc:d2:20:f1:80:fc:2f:06:32:cb:64:29:47:f5:36:
c8:ea:d6:3d:d4:88:f1:c0:10:34:87:6f:26:25:59:02:1a:9f:
75:93:db:dc:61:74:f1:4f:da:2e:1e:18:fc:12:eb:0e:9c:6c:
76:8d:21:3c:20:fb:59:4a:d1:a4:fc:0a:da:d4:6d:d1:06:06:
66:fb:cd:c7
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICD7QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU3MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY4RUNBMzREOTcxOTBD
MDRFQjQzNjAzRUQ2QkFGODhGRjZBMjNDNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7LV6YdDSEVbl2283A5QBsa4pUktx6NOOgy3R/P1G6N6xIwFzG
ntcWgoiLsUTyb0kfLH3RN+2tXLB8OBOJfLUq+0/LjpEK/1emZqA72StOlbbtsJMB
rdrM/cQS8cN3RlhbGntq3zHcD/y1BH1rFT9ovkSfrKOlx6ejgVZtLWoGXDon/k5w
t60c7Rt4lf7rd7eMplmi8hnD73hDq05KkHg1qk35IbvoJcZfR7F9/MjQ3KQ5ufhC
aE426kIW2HagFwc1GtudirVkwQ8cfk3qUQ4fJE9QXDbvWhGXzW/9+HKn7nC5TYPe
mO/3NUJxeOo7q33jdbv9cgLK93FpbskyTyBJAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQU+OyjTZcZDATrQ2A+1rr4j/aiPGgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8tT3lqVFpjWkRBVHJRMkEtMXJy
NGpfYWlQR2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBPPow
DQYJKoZIhvcNAQELBQADggEBACvbI3GcW4GPQ5e7XAePcBHgH+DyLZMSD50WK5go
YDg642AcDaMRMJLvCUSl6qpZNNJyjTpf3bBwkDmTyB3I60gfvuf4t+1br2OwWi63
RZjUaV0pk8n50cGQKQeFUWLTQwSLhGBi9BYJDpyFGnVs/JOV3Hn5nCt700J8AraB
qT+48fnqw6ZDa828Ug9LP4Yo/Kf5NEgw76cTUD/cLZZAhM4F+73G30Ee+PsuaeFb
t0jydhrbyrTnJMzSIPGA/C8GMstkKUf1Nsjq1j3UiPHAEDSHbyYlWQIan3WT29xh
dPFP2i4eGPwS6w6cbHaNITwg+1lK0aT8CtrUbdEGBmb7zcc=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org