Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/-pzF1Vqeo2FUJc79hT8xLNeGU9I.roa
File: -pzF1Vqeo2FUJc79hT8xLNeGU9I.roa (raw, json)
Hash identifier: Oun9dST9i4Kf9pPpggujMjNaDpX/GFlVOKNcRHtML68=
Subject key identifier: FA:9C:C5:D5:5A:9E:A3:61:54:25:CE:FD:85:3F:31:2C:D7:86:53:D2
Certificate issuer: /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Certificate serial: 0C2E
Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-pzF1Vqeo2FUJc79hT8xLNeGU9I.roa
Signing time: Fri 01 Sep 2023 08:57:14 +0000
ROA not before: Fri 01 Sep 2023 08:57:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131660
IP address blocks: 168.95.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3118 (0xc2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Validity
Not Before: Sep 1 08:57:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FA9CC5D55A9EA3615425CEFD853F312CD78653D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:85:90:6d:54:0d:41:d4:b0:49:f1:f1:93:
ff:90:b5:64:7c:2f:ab:d2:40:8f:af:84:4e:47:ec:
4e:10:f6:0b:d3:09:e5:68:7d:a0:9b:04:91:50:07:
b7:c4:f4:98:24:a8:21:e2:b0:9c:08:a7:6f:d0:fe:
34:fe:49:8c:ef:71:16:24:f2:32:0c:e0:a8:17:15:
4c:92:37:b0:84:03:52:8e:b9:90:9a:59:1b:d2:35:
10:66:07:09:3c:1b:51:61:7f:f4:5f:cd:04:fb:1f:
a7:cb:08:c4:cb:0a:d6:93:94:ad:c5:8a:5f:1b:ea:
de:72:ee:a2:6c:8f:ba:c8:76:05:af:4c:84:ef:ef:
cd:88:00:33:74:a3:bd:0b:f6:d0:db:ed:12:12:7c:
7b:8c:92:e6:b1:31:09:0c:4b:e5:33:4c:fd:8f:68:
90:1f:a9:71:4c:1a:48:89:c0:ba:5e:de:51:be:52:
15:27:ea:e4:e1:41:5a:e4:97:d1:f0:21:a4:29:6b:
b7:8f:53:9f:d1:66:78:d3:63:3c:38:a3:97:96:41:
94:11:ca:13:ac:4d:2f:41:8a:ca:94:93:dc:4b:42:
9f:5e:da:52:47:37:1c:41:04:41:cc:78:29:8a:34:
0a:00:07:ce:70:1f:0a:31:cd:e1:cb:04:a2:4c:c9:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9C:C5:D5:5A:9E:A3:61:54:25:CE:FD:85:3F:31:2C:D7:86:53:D2
X509v3 Authority Key Identifier:
keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-pzF1Vqeo2FUJc79hT8xLNeGU9I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
168.95.246.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c7:b6:d5:a4:93:15:e3:60:85:f0:cf:11:24:8b:5f:14:af:
ec:1f:36:64:2c:18:9b:d4:e1:ef:c6:81:47:45:c3:4c:e3:e2:
ab:b2:47:0f:be:e9:c7:e9:86:15:d2:98:91:77:21:1b:63:65:
79:96:6d:fc:7d:57:f3:1d:b3:1d:83:ef:46:0d:28:38:dd:cc:
88:b0:91:ba:fb:57:0b:6f:23:41:3a:22:81:3a:c5:56:26:e5:
16:d0:98:fa:ae:37:64:66:7f:33:22:6c:a4:e8:3b:49:37:82:
c1:8a:0d:9b:79:ec:15:68:9a:70:dd:58:d9:ed:86:b5:f1:58:
64:e3:d0:ad:35:d1:e2:a7:56:66:33:72:02:cb:f1:a0:97:65:
2d:84:12:9f:6c:cd:a9:38:b1:95:3e:e2:bf:87:cf:0f:70:3b:
53:82:dd:c9:73:50:d2:81:cf:c5:50:c2:6d:14:c6:ec:cf:b3:
83:6f:79:15:54:ab:04:b6:cf:48:49:88:76:93:a3:1a:0d:e8:
a7:8b:fe:ca:ae:95:7f:04:90:d9:e4:17:d3:32:e3:db:ac:35:
bf:e9:ab:bf:df:79:51:71:7a:fe:02:e4:05:b4:47:59:70:a0:
28:59:0c:f2:2c:5e:ec:28:ce:06:2c:02:a3:94:3f:a5:d8:eb:
42:8b:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org