Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/9BVRsLhcUtSfeEZOjW2-nAPNpuE.roa
File: 9BVRsLhcUtSfeEZOjW2-nAPNpuE.roa (raw, json)
Hash identifier: FeXQkJGBYbhJ7nHREprhdc07jNY03dxOyCUql7s1a9Y=
Subject key identifier: F4:15:51:B0:B8:5C:52:D4:9F:78:46:4E:8D:6D:BE:9C:03:CD:A6:E1
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F92
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9BVRsLhcUtSfeEZOjW2-nAPNpuE.roa
Signing time: Fri 01 Sep 2023 08:57:14 +0000
ROA not before: Fri 01 Sep 2023 08:57:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 20940
IP address blocks: 203.74.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3986 (0xf92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F41551B0B85C52D49F78464E8D6DBE9C03CDA6E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:29:da:c4:68:33:78:1e:de:69:3a:57:e5:
6e:6a:8a:3c:4a:46:a5:d9:b2:1a:94:5b:46:24:8c:
3f:81:c0:10:d1:e8:5d:da:0d:2a:fa:4e:51:9a:91:
8b:10:91:02:68:08:4f:fa:4e:86:dd:57:c8:e9:0e:
96:cc:8d:83:d9:be:8d:d9:d5:a4:fc:00:b0:03:c7:
c4:2d:cd:85:1e:1a:35:aa:3d:17:19:10:eb:ae:b7:
f3:e9:34:ce:a3:18:bc:86:ad:76:c8:98:5c:e0:c8:
ec:5b:59:45:1c:24:b2:1a:12:be:39:26:d7:96:78:
0c:9b:0d:d7:eb:7c:85:98:91:01:f4:d2:8b:b0:96:
ae:2b:81:ae:ce:b2:ae:9a:57:9a:2c:8f:44:6e:25:
aa:a3:2a:73:64:ea:ea:da:61:b1:1c:59:57:76:0e:
c1:98:0c:d7:41:51:2f:01:fc:97:8f:5e:f5:75:f5:
73:18:39:16:07:d8:64:57:79:66:ac:05:75:8a:6f:
21:d5:a3:81:3d:40:3a:ee:97:cd:92:e8:6b:c5:e5:
ba:d1:43:72:7e:49:41:30:fe:34:7c:6c:a6:e4:f6:
18:c1:ea:dc:f1:65:80:ad:84:d9:db:b4:3c:a5:ef:
c9:75:9b:b0:b5:28:c7:5b:aa:9e:0f:0f:66:29:99:
3a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:15:51:B0:B8:5C:52:D4:9F:78:46:4E:8D:6D:BE:9C:03:CD:A6:E1
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9BVRsLhcUtSfeEZOjW2-nAPNpuE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:5b:3e:33:0f:b4:0f:0b:5e:c8:4b:3f:35:3d:c5:6e:31:93:
18:ec:cf:8f:b6:c3:9a:04:8c:e5:95:67:ce:1c:e3:34:84:14:
31:ec:1f:92:e4:e0:c1:9d:d7:80:0c:5c:a6:a9:20:96:f7:59:
f3:1e:8f:14:1f:5a:21:1e:84:5e:d3:66:b2:b1:77:ea:83:d5:
33:5a:84:37:ed:95:1e:5d:6f:03:34:a8:98:fd:68:56:71:ef:
f5:f1:d4:99:65:43:5b:28:c5:d8:88:64:79:28:72:2e:57:c2:
9a:bb:11:34:55:ea:8c:7f:1d:11:5d:cb:b7:38:aa:2e:78:f1:
19:9e:ff:a2:dd:bc:21:ad:e7:35:0f:a2:ee:13:ee:1f:f8:30:
e2:6e:7b:a2:ce:cf:83:49:3a:55:c4:a5:a7:5e:7e:55:a4:bb:
c1:63:73:7a:72:93:d8:5e:64:d2:7f:f8:06:5a:ee:82:96:1e:
13:2b:41:dd:f0:a3:10:81:a7:56:c2:82:bd:5b:d8:91:aa:2f:
ee:75:28:72:75:42:96:03:cc:35:93:6f:47:d6:18:ea:70:47:
08:8e:54:d7:d7:72:33:5a:7e:a7:be:ee:7b:4b:c0:5e:2c:b2:
c4:09:56:af:bb:5a:3b:19:d4:5a:f1:11:03:f3:29:8f:6c:c0:
49:c0:51:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org