Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/78pXuE01AB8Jp4DlIdzD0ZShSAA.roa
File: 78pXuE01AB8Jp4DlIdzD0ZShSAA.roa (raw, json)
Hash identifier: /QQt+5xUIWc/IO1c0c8+F6xObcTMrpvuMBmQBQpBt/A=
Subject key identifier: EF:CA:57:B8:4D:35:00:1F:09:A7:80:E5:21:DC:C3:D1:94:A1:48:00
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F5E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/78pXuE01AB8Jp4DlIdzD0ZShSAA.roa
Signing time: Fri 01 Sep 2023 08:56:59 +0000
ROA not before: Fri 01 Sep 2023 08:56:59 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 220.128.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3934 (0xf5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:59 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EFCA57B84D35001F09A780E521DCC3D194A14800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:77:f3:92:b2:0d:47:5d:05:94:0d:c8:49:
2e:27:25:ff:20:8a:5f:e5:97:20:64:af:11:d9:c5:
57:db:91:a8:bb:b8:46:64:21:d1:b9:e5:7b:51:e6:
92:2e:88:ce:61:01:63:5e:e8:61:95:75:55:3a:ae:
8c:8b:b2:a9:0d:94:fb:76:65:d4:34:7c:ed:95:61:
8f:99:fa:12:2d:29:29:30:d6:89:4f:63:5d:44:dc:
de:de:8f:db:c5:58:e9:e6:48:f2:41:18:09:e6:fd:
71:cc:5f:28:b7:4c:0a:10:92:80:72:f8:21:8d:90:
f8:27:71:60:28:84:6d:bf:fa:50:b5:6e:38:89:07:
1f:9f:6e:08:12:90:81:c8:3d:f9:0c:f7:0b:c9:aa:
e9:12:5c:e1:0a:ff:75:83:af:a6:40:71:f4:d8:d8:
11:1d:22:b7:2d:4f:75:c1:c0:ec:3e:5a:c1:80:b8:
38:c0:d1:f0:e2:ff:c6:5a:3c:b7:87:ac:68:ba:7e:
6a:c8:40:8b:83:90:0f:45:9f:d8:c0:c5:b8:25:d0:
cb:f5:1d:cd:c9:1d:83:a5:2b:f1:b6:64:87:7c:e5:
7d:7f:81:ef:5b:c5:87:7f:9d:db:6c:fc:48:97:73:
ee:9f:fc:47:68:f1:d8:39:b0:41:90:1a:6f:8b:16:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CA:57:B8:4D:35:00:1F:09:A7:80:E5:21:DC:C3:D1:94:A1:48:00
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/78pXuE01AB8Jp4DlIdzD0ZShSAA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.72.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e0:a0:af:8a:82:8b:33:2f:d7:56:e3:61:7f:98:31:f6:15:
e5:4b:84:b3:51:66:5d:bb:ec:ff:85:61:c4:c9:00:07:62:7f:
00:ae:bf:6a:81:62:a2:54:7c:54:72:a9:e2:f1:4f:47:b1:d1:
80:9b:d9:9d:e7:86:6f:0a:6a:5c:b1:ba:db:bc:c9:1a:d7:d1:
6f:ff:67:df:a1:b5:0e:ca:5a:46:87:37:08:b0:78:4d:e8:4b:
0d:df:a2:ae:d5:17:01:42:ed:d6:bf:a4:77:d6:aa:d8:c6:3b:
d8:23:48:48:6e:67:ea:06:94:22:56:c6:9c:1a:07:cc:64:85:
e1:32:57:d1:fe:44:37:04:46:41:18:af:b1:24:95:cc:72:59:
4a:14:57:cd:45:db:9e:4c:4d:05:54:2a:fb:a2:27:8d:52:36:
85:3f:c8:b1:c1:39:6e:6f:5e:cd:03:74:8e:2c:84:e3:32:ef:
b1:ca:b2:4c:15:9e:97:f1:fa:44:44:73:41:f4:d7:3c:b9:41:
20:82:01:a3:b9:f7:5d:8f:d8:fd:79:a1:12:ac:0b:ff:57:02:
6e:d6:f8:44:5a:82:32:82:4c:ac:02:70:94:67:5d:fc:b4:cc:
77:f1:72:a2:4c:e7:83:7e:bb:df:9c:66:42:a2:db:d0:36:41:
0b:42:18:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org