Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/AI0oCeEK87-cDibYR2vwnIdMXj4.roa
File: AI0oCeEK87-cDibYR2vwnIdMXj4.roa (raw, json)
Hash identifier: OHlBbcAZs7ExL3LQ5miGbu2Oq28L6mWNh3n0rRfmZBo=
Subject key identifier: 00:8D:28:09:E1:0A:F3:BF:9C:0E:26:D8:47:6B:F0:9C:87:4C:5E:3E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FD1
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AI0oCeEK87-cDibYR2vwnIdMXj4.roa
Signing time: Fri 01 Sep 2023 08:57:31 +0000
ROA not before: Fri 01 Sep 2023 08:57:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 211.75.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4049 (0xfd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=008D2809E10AF3BF9C0E26D8476BF09C874C5E3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:01:ed:b0:72:cc:53:36:b0:1f:17:8c:1a:
0b:18:45:82:0e:9d:43:76:56:02:8b:8b:6f:2e:8d:
4b:76:51:78:5c:d2:b4:79:2f:d1:b9:90:4e:52:28:
72:8e:a9:b5:20:c2:a6:b1:0b:fd:25:e9:98:46:35:
03:ff:f1:d2:7b:36:ba:42:b0:2a:2a:07:7d:16:c2:
50:a3:6d:cc:a5:b8:6d:fc:24:59:5e:55:9b:a4:0f:
25:10:8e:17:0c:ef:cf:81:b9:7d:50:cc:10:87:a0:
dd:f9:79:e3:7d:e4:77:f8:e7:de:9e:91:87:3c:c6:
b1:fb:f1:0b:fe:e6:f8:31:bb:03:8a:59:b8:14:8f:
a4:05:ca:08:a2:08:ea:a4:56:a3:fb:39:9d:8f:4d:
90:27:dd:d9:7b:98:20:97:d7:95:6f:a7:18:64:76:
3a:10:0b:ef:2e:a6:ee:7d:8c:d7:85:e8:08:ca:c0:
87:ba:13:d3:e9:96:00:06:a1:6e:f1:02:d1:c3:6b:
5a:8b:b8:11:16:0c:15:13:af:4f:56:88:a0:02:97:
50:88:2b:0e:1c:a8:eb:08:b3:85:74:1e:2a:8c:72:
0c:da:2c:6d:f2:49:a4:10:34:ef:9a:42:92:2a:9f:
3a:6c:d2:07:a0:50:39:80:9f:0b:46:f1:76:70:db:
a1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8D:28:09:E1:0A:F3:BF:9C:0E:26:D8:47:6B:F0:9C:87:4C:5E:3E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AI0oCeEK87-cDibYR2vwnIdMXj4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:c9:ad:4c:8a:eb:59:33:94:f2:44:61:fe:3a:e2:d9:b4:a4:
94:d1:01:d0:62:46:28:01:45:6a:f7:21:0a:ba:32:b2:9c:dd:
ad:7c:49:b4:45:98:5b:c1:9a:d7:57:11:ff:90:a6:6c:74:67:
e5:90:98:d6:58:b1:ce:3b:af:1c:da:73:a5:37:31:01:c4:46:
a1:22:83:f6:c5:64:af:3b:45:17:c8:94:52:de:17:32:8d:4c:
0e:64:0d:ed:0d:82:43:80:d5:e3:b0:9e:c1:1e:3e:4e:e8:b5:
bf:0e:49:ae:ce:52:a3:fc:d6:5e:49:ae:3c:68:ef:e3:8f:20:
40:ce:ba:82:78:33:45:c5:be:8f:c2:9e:9e:f3:e4:db:e6:87:
c6:92:af:6f:6b:be:a0:62:21:24:b5:4f:a7:cd:cf:16:9e:fb:
fd:40:02:6c:a1:8e:4e:50:74:16:41:31:06:1e:9b:4e:4d:67:
e9:2a:4d:64:9d:5d:a9:21:35:44:78:0f:00:a3:2b:d0:6d:7b:
cb:29:bd:f8:f5:c4:cd:a7:b3:e0:a1:06:4f:1a:3f:b8:f9:d9:
7e:63:31:70:4f:4d:da:ff:89:e6:2b:42:88:79:16:b8:04:46:
47:a2:38:f5:b1:83:78:4b:38:3d:59:71:9e:1d:e2:79:cf:76:
14:b3:c6:b3
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICD9EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU3MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAwOEQyODA5RTEwQUYz
QkY5QzBFMjZEODQ3NkJGMDlDODc0QzVFM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC35gHtsHLMUzawHxeMGgsYRYIOnUN2VgKLi28ujUt2UXhc0rR5
L9G5kE5SKHKOqbUgwqaxC/0l6ZhGNQP/8dJ7NrpCsCoqB30WwlCjbcyluG38JFle
VZukDyUQjhcM78+BuX1QzBCHoN35eeN95Hf4596ekYc8xrH78Qv+5vgxuwOKWbgU
j6QFygiiCOqkVqP7OZ2PTZAn3dl7mCCX15VvpxhkdjoQC+8upu59jNeF6AjKwIe6
E9PplgAGoW7xAtHDa1qLuBEWDBUTr09WiKACl1CIKw4cqOsIs4V0HiqMcgzaLG3y
SaQQNO+aQpIqnzps0gegUDmAnwtG8XZw26ETAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUAI0oCeEK87+cDibYR2vwnIdMXj4wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9BSTBvQ2VFSzg3LWNEaWJZUjJ2
d25JZE1YajQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA00sw
DQYJKoZIhvcNAQELBQADggEBALXJrUyK61kzlPJEYf464tm0pJTRAdBiRigBRWr3
IQq6MrKc3a18SbRFmFvBmtdXEf+Qpmx0Z+WQmNZYsc47rxzac6U3MQHERqEig/bF
ZK87RRfIlFLeFzKNTA5kDe0NgkOA1eOwnsEePk7otb8OSa7OUqP81l5Jrjxo7+OP
IEDOuoJ4M0XFvo/Cnp7z5Nvmh8aSr29rvqBiISS1T6fNzxae+/1AAmyhjk5QdBZB
MQYem05NZ+kqTWSdXakhNUR4DwCjK9Bte8spvfj1xM2ns+ChBk8aP7j52X5jMXBP
Tdr/ieYrQoh5FrgERkeiOPWxg3hLOD1ZcZ4d4nnPdhSzxrM=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org