Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/2nnaLPHFQ8hiyslx68R3MjlA4kk.roa
File: 2nnaLPHFQ8hiyslx68R3MjlA4kk.roa (raw, json)
Hash identifier: MWuFRI+h2qnfHUYC6eIkrsxaE+on7h/cKAqzlMjw6oI=
Subject key identifier: DA:79:DA:2C:F1:C5:43:C8:62:CA:C9:71:EB:C4:77:32:39:40:E2:49
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FA3
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2nnaLPHFQ8hiyslx68R3MjlA4kk.roa
Signing time: Fri 01 Sep 2023 08:57:19 +0000
ROA not before: Fri 01 Sep 2023 08:57:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 114.30.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4003 (0xfa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DA79DA2CF1C543C862CAC971EBC477323940E249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:a5:18:1b:a5:2f:89:27:23:07:e8:ed:dc:
a9:2b:24:7a:5d:e4:bc:ae:9b:06:09:5b:c2:79:fc:
c5:bf:68:1f:a0:a9:4c:e7:fb:fb:14:76:65:b6:ab:
30:0f:8c:18:cf:7d:26:c1:47:97:e2:36:1c:b7:ac:
1d:dd:bc:0c:54:15:5a:61:d8:68:c5:b7:b9:f9:37:
cf:c9:79:71:69:ba:91:c6:e6:c0:62:b3:8d:0f:c2:
f1:9e:be:33:fa:71:53:5b:51:e2:4e:cc:7e:a2:d5:
5c:ae:0a:22:96:26:d8:a4:da:52:36:42:cf:69:f2:
c9:0a:7a:0d:ba:67:b2:4d:91:2c:28:5e:d4:d8:ab:
82:c6:16:d0:14:d1:e5:3c:0c:e1:ae:e2:f5:11:90:
59:ae:d8:d2:de:e5:05:f6:7a:15:5c:57:80:b3:b1:
2f:9c:f3:90:19:c0:85:8f:69:ab:dc:ea:2b:4f:ba:
73:ef:81:de:b6:58:05:d1:c0:81:a4:c0:52:56:77:
33:96:d3:12:f5:a7:32:e0:8b:ab:cc:80:59:37:a7:
36:91:ab:89:fa:97:cc:ac:d3:64:11:e8:68:6c:53:
60:6b:bf:3c:66:7f:7d:94:7b:a8:17:15:75:ca:fc:
01:f0:98:de:cf:3e:64:8e:27:5b:a6:49:1e:d0:49:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:79:DA:2C:F1:C5:43:C8:62:CA:C9:71:EB:C4:77:32:39:40:E2:49
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2nnaLPHFQ8hiyslx68R3MjlA4kk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.30.44.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:16:28:46:c0:27:c6:38:c5:b0:2a:b4:f9:5b:18:d1:cc:43:
9d:db:2b:23:27:bf:a9:ab:a7:55:b6:92:74:61:46:af:35:43:
29:b8:30:af:48:a0:53:53:b3:22:ae:3e:42:a4:96:b1:b6:1c:
19:e4:17:83:98:c0:28:a5:f7:66:a8:38:f6:47:e7:ef:af:59:
b1:a7:0a:75:38:c0:7d:53:18:91:71:26:ca:e5:fa:ce:49:de:
5b:12:47:8e:57:e7:31:f0:e6:35:1f:8e:ec:47:0d:c4:cb:90:
73:f7:84:ac:ea:a5:57:c5:70:44:e3:81:e7:5a:0c:ab:ed:64:
73:3c:9a:d5:9b:02:e0:49:66:fe:ee:96:a6:28:e2:db:96:1c:
23:9c:3f:f6:47:da:ac:84:bf:8a:12:5e:da:ca:08:20:af:68:
aa:df:f3:2e:97:c4:35:1a:97:2a:43:68:76:f8:b7:56:b1:da:
51:28:c9:9c:a9:1a:69:66:54:34:f7:4c:7e:28:2f:26:82:af:
c6:a7:bc:e7:f7:bd:e8:31:74:1c:74:68:f2:35:fd:d3:86:4f:
04:23:58:55:47:1e:b1:56:32:7b:33:5a:87:b5:14:5b:e2:3d:
4e:c3:de:ae:39:73:f9:05:24:69:e5:63:9e:e4:3d:fa:2a:53:
5c:10:71:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org