Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/1sbyOEPWNgMQgQSHtuhPbs1I7BY.roa
File: 1sbyOEPWNgMQgQSHtuhPbs1I7BY.roa (raw, json)
Hash identifier: sWuh/BrZmIv6ZcrQvBOYRWuVoAd608KJ8DblP9m5bkE=
Subject key identifier: D6:C6:F2:38:43:D6:36:03:10:81:04:87:B6:E8:4F:6E:CD:48:EC:16
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F7C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1sbyOEPWNgMQgQSHtuhPbs1I7BY.roa
Signing time: Fri 01 Sep 2023 08:57:07 +0000
ROA not before: Fri 01 Sep 2023 08:57:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 21859
IP address blocks: 210.61.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3964 (0xf7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D6C6F23843D6360310810487B6E84F6ECD48EC16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:96:95:71:33:58:f3:5e:e6:fb:89:0a:36:
a3:fc:76:c1:50:9d:58:53:2f:ab:ff:32:e7:22:a5:
74:7f:ad:f0:f2:44:05:89:32:52:9a:9c:69:e1:f9:
3d:56:0b:59:bd:6a:4d:8f:70:fb:a5:78:58:32:87:
d0:7e:a0:f1:8b:d3:d3:bd:0a:1e:d9:4c:76:38:1b:
57:c9:be:9a:ae:57:0c:43:1c:b7:9c:2c:91:25:ac:
be:45:87:1f:49:68:79:7b:55:87:30:bd:a6:e4:45:
60:b1:e4:74:a1:a1:8f:c6:b5:fb:6d:50:f2:01:0c:
0b:d9:22:68:a9:d1:31:a6:82:f7:ba:8b:92:f4:57:
c1:49:48:70:ad:92:90:06:31:25:51:b7:46:22:26:
04:3a:29:77:a2:0f:60:c4:b7:4c:ed:88:7d:50:33:
c9:cd:b4:63:be:26:42:29:b7:d9:d5:9c:ed:3b:88:
ed:b7:de:a8:87:1d:ca:af:65:da:c3:67:15:1f:2a:
b3:ef:65:ae:b5:25:98:64:ba:1c:93:81:6f:ec:af:
c5:1f:89:96:18:b4:fe:da:17:c6:ab:45:31:ff:87:
74:ba:ec:ea:b9:25:15:a9:f5:9c:a2:d8:17:21:ee:
00:22:f1:c4:d7:e3:45:0d:61:39:17:f8:4c:5c:43:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C6:F2:38:43:D6:36:03:10:81:04:87:B6:E8:4F:6E:CD:48:EC:16
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1sbyOEPWNgMQgQSHtuhPbs1I7BY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.201.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8e:aa:06:2b:6a:54:c4:be:68:11:3d:4d:a3:82:0b:42:e1:
f6:1c:40:84:3f:73:7e:16:b4:19:d3:ef:f7:5a:36:4d:77:53:
8f:1c:57:52:b2:b2:0c:ce:cf:c0:9c:15:d7:51:a9:05:58:af:
2e:54:7e:a1:57:c2:df:47:d6:8f:91:51:c9:7c:a1:cd:a0:ed:
f8:16:ae:fe:b3:aa:5e:c6:e5:59:cd:9a:87:e3:93:ca:4a:e4:
d7:ce:25:b9:d0:ce:20:f2:15:92:bb:40:80:55:e2:e0:7b:5a:
7b:62:6a:66:3c:ba:88:8e:88:de:39:3c:04:a3:c3:9d:69:a8:
79:df:7f:50:2c:ab:1a:2f:70:39:47:1f:b7:d6:c7:bc:e5:33:
56:a1:79:0c:75:f8:54:f6:95:de:69:cc:b9:3a:96:44:0e:d2:
d2:51:2c:6f:8e:7a:66:2b:42:de:f7:6f:33:93:4e:59:85:f0:
11:a7:40:b6:4b:cd:5c:98:48:48:59:b6:4d:e5:0c:83:63:48:
1b:5c:77:0c:4d:48:d8:51:e6:5b:ec:88:52:48:4d:2f:cd:f0:
13:6c:d0:d8:2f:d6:4c:86:58:70:43:93:d0:02:f3:de:11:15:
60:d6:68:b7:18:0c:8e:9d:81:34:8d:72:c6:de:41:35:d7:06:
f8:b6:2a:5b
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICD3wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU3MDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ2QzZGMjM4NDNENjM2
MDMxMDgxMDQ4N0I2RTg0RjZFQ0Q0OEVDMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvUZaVcTNY817m+4kKNqP8dsFQnVhTL6v/MucipXR/rfDyRAWJ
MlKanGnh+T1WC1m9ak2PcPuleFgyh9B+oPGL09O9Ch7ZTHY4G1fJvpquVwxDHLec
LJElrL5Fhx9JaHl7VYcwvabkRWCx5HShoY/GtfttUPIBDAvZImip0TGmgve6i5L0
V8FJSHCtkpAGMSVRt0YiJgQ6KXeiD2DEt0ztiH1QM8nNtGO+JkIpt9nVnO07iO23
3qiHHcqvZdrDZxUfKrPvZa61JZhkuhyTgW/sr8UfiZYYtP7aF8arRTH/h3S67Oq5
JRWp9Zyi2Bch7gAi8cTX40UNYTkX+ExcQx21AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU1sbyOEPWNgMQgQSHtuhPbs1I7BYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8xc2J5T0VQV05nTVFnUVNIdHVo
UGJzMUk3Qlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j3J
MA0GCSqGSIb3DQEBCwUAA4IBAQB+jqoGK2pUxL5oET1No4ILQuH2HECEP3N+FrQZ
0+/3WjZNd1OPHFdSsrIMzs/AnBXXUakFWK8uVH6hV8LfR9aPkVHJfKHNoO34Fq7+
s6pexuVZzZqH45PKSuTXziW50M4g8hWSu0CAVeLge1p7YmpmPLqIjojeOTwEo8Od
aah5339QLKsaL3A5Rx+31se85TNWoXkMdfhU9pXeacy5OpZEDtLSUSxvjnpmK0Le
928zk05ZhfARp0C2S81cmEhIWbZN5QyDY0gbXHcMTUjYUeZb7IhSSE0vzfATbNDY
L9ZMhlhwQ5PQAvPeERVg1mi3GAyOnYE0jXLG3kE11wb4tipb
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org