Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/1RHLc9Y3rdX5Wnb6yV7bgEucPU4.roa
File: 1RHLc9Y3rdX5Wnb6yV7bgEucPU4.roa (raw, json)
Hash identifier: cK48mUzLMhqMIDwBT8BnQuh/6T2A2Qomacvuz3TYP84=
Subject key identifier: D5:11:CB:73:D6:37:AD:D5:F9:5A:76:FA:C9:5E:DB:80:4B:9C:3D:4E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F71
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1RHLc9Y3rdX5Wnb6yV7bgEucPU4.roa
Signing time: Fri 01 Sep 2023 08:57:05 +0000
ROA not before: Fri 01 Sep 2023 08:57:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 220.128.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3953 (0xf71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D511CB73D637ADD5F95A76FAC95EDB804B9C3D4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:17:aa:35:48:51:1a:4c:87:ea:87:4a:66:d4:
96:f9:f6:d7:f5:32:48:54:4c:0c:c2:4a:96:f0:3b:
e8:38:82:d3:bf:a8:d4:8d:4a:03:00:ea:1c:be:9c:
0e:2c:90:e4:49:a9:e4:f3:6c:43:d1:8a:ad:7e:ee:
d2:63:d0:f9:0e:71:9a:f0:ce:1d:f3:bf:22:dc:b7:
a9:e3:70:42:ea:da:86:c2:5b:eb:49:83:54:ce:ab:
96:0d:79:00:14:df:d2:f8:18:c2:aa:ae:f9:1b:cd:
97:ee:02:57:79:b0:63:e9:1a:f1:b2:d7:fd:89:52:
08:f7:30:4c:ff:84:71:08:0d:29:34:c0:cd:a1:c5:
5e:10:05:b9:32:97:da:42:cf:3c:92:75:d5:ef:27:
17:74:1e:98:0d:a9:51:75:b2:44:18:e7:11:28:94:
44:ee:72:84:0e:51:cc:7e:b1:63:0e:6e:59:8c:ea:
55:e1:95:93:de:d3:13:41:b6:6c:74:7e:30:ee:a6:
18:0b:ab:2c:1f:81:4f:b3:cf:60:a5:8d:9e:27:43:
b0:86:26:8a:53:2d:bf:4c:01:47:c7:fc:46:57:f0:
47:aa:f7:d1:3e:1e:af:9e:a7:5f:04:b7:31:e6:c1:
61:4e:84:46:be:71:c3:32:7b:de:d6:20:2a:24:73:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:11:CB:73:D6:37:AD:D5:F9:5A:76:FA:C9:5E:DB:80:4B:9C:3D:4E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1RHLc9Y3rdX5Wnb6yV7bgEucPU4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.67.0/24
Signature Algorithm: sha256WithRSAEncryption
41:fe:37:3e:8b:a4:3b:cd:b6:25:cd:8b:cd:1f:1e:43:29:1b:
52:4f:6f:03:30:ec:e9:70:5f:b0:e8:8a:4f:ec:ff:85:78:66:
40:2a:47:ad:e6:ec:a7:79:57:af:06:4b:f9:dd:ef:89:1d:e9:
72:62:a0:5e:a1:04:52:3c:89:81:6d:05:1e:f5:29:c2:47:80:
68:c2:c9:1e:47:0a:0a:3b:f0:4a:78:92:89:d5:b7:22:f4:25:
66:d3:4e:65:84:48:d6:39:db:45:9d:3e:4a:41:50:35:8f:b2:
0a:74:84:03:68:cd:91:54:d5:0b:f5:4f:71:7a:42:cc:a4:2c:
af:4f:ad:57:e4:56:39:67:62:38:4c:79:9e:ba:fc:66:21:f2:
06:c6:52:32:6e:15:80:c6:5d:77:24:00:f7:1e:a9:ef:27:6e:
08:8b:f8:c4:11:56:fb:1f:ff:55:e8:ba:c4:23:1d:2f:bf:5d:
4f:3c:31:c5:6e:62:8b:bd:9b:39:83:6c:e4:8d:de:89:56:5a:
51:70:53:35:70:f9:92:17:73:73:8c:f3:d5:68:fb:ce:c1:01:
22:1e:cf:e4:ff:39:8a:36:00:63:5e:43:47:fd:77:a2:62:9e:
27:e3:3a:3a:a0:b0:6e:75:63:4c:12:4c:cf:a9:8b:30:71:b3:
a3:5c:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org