Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/APj9htQN9w_1--VZJaFh1FSjGiM.roa
File: APj9htQN9w_1--VZJaFh1FSjGiM.roa (raw, json)
Hash identifier: GftRJUUuF+7jiSbMLLhwmQAi59JIHH1qSqV6gFvL4zQ=
Subject key identifier: 00:F8:FD:86:D4:0D:F7:0F:F5:FB:E5:59:25:A1:61:D4:54:A3:1A:23
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F9B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/APj9htQN9w_1--VZJaFh1FSjGiM.roa
Signing time: Fri 01 Sep 2023 08:57:17 +0000
ROA not before: Fri 01 Sep 2023 08:57:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 20940
IP address blocks: 210.65.144.192/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3995 (0xf9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=00F8FD86D40DF70FF5FBE55925A161D454A31A23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:92:02:d7:d6:03:b2:bd:fb:2d:10:b8:ba:
13:48:93:2f:c1:b8:87:3c:5e:61:28:22:ae:c3:50:
ac:32:e1:63:17:4f:47:70:d7:61:0a:89:52:1d:ec:
39:24:64:85:5a:c4:89:63:14:68:3d:0a:96:dc:54:
54:80:60:31:d2:fc:61:d0:87:26:9c:5a:53:d9:28:
8d:04:ae:d1:64:1a:0d:ac:b6:31:07:32:b7:8d:45:
fb:bf:46:89:95:f0:31:6f:8a:f8:4e:f3:2d:db:12:
4e:e8:7f:93:d3:d4:8b:29:f0:2a:c2:55:73:fe:f0:
08:0a:40:48:38:31:16:d2:31:72:ff:ef:f0:25:f5:
5a:0e:c4:44:14:18:32:fd:e6:a9:79:85:95:70:42:
32:9a:73:5e:98:45:c3:92:17:89:f9:54:74:5f:82:
72:00:32:57:1e:c5:dc:6d:be:cd:c8:aa:06:ef:1f:
91:f2:08:e1:86:16:d6:ab:e7:65:46:d8:36:f7:55:
0c:9e:db:14:af:e5:e8:47:36:3a:94:0a:cc:49:30:
de:ba:2e:56:6f:d3:1b:2e:31:45:bc:9f:e3:37:87:
54:51:69:d5:8d:97:8e:f0:b9:7f:0f:68:89:92:80:
7c:be:f0:b5:81:01:20:d0:7b:d9:ef:30:be:55:30:
58:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F8:FD:86:D4:0D:F7:0F:F5:FB:E5:59:25:A1:61:D4:54:A3:1A:23
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/APj9htQN9w_1--VZJaFh1FSjGiM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.65.144.192/26
Signature Algorithm: sha256WithRSAEncryption
05:af:bc:c4:ba:5e:bc:e8:a6:dd:8d:e3:91:e2:75:05:94:1c:
9e:fb:8c:20:74:c3:c2:fd:22:49:84:8b:78:6a:c9:95:f4:52:
bb:d1:0c:ac:ce:3c:69:d6:e7:fd:11:9a:ee:ed:7d:d9:ba:9f:
cf:61:69:59:b7:39:4c:ae:95:f7:eb:5d:c7:a6:c0:7b:8c:79:
35:ed:ed:9c:cd:31:1b:df:c8:8b:71:80:13:8d:52:9e:57:67:
56:14:ae:3f:ad:54:00:d5:88:d7:7c:fe:2f:92:4c:7d:63:7f:
73:d6:80:49:fd:3c:58:35:2a:0b:aa:17:d7:f1:0e:b9:3e:e2:
a4:1c:55:31:c9:bd:fd:0e:e2:41:05:9f:a6:ec:4a:a6:11:52:
1f:7e:69:c8:0d:db:2d:1f:f6:11:0f:c4:30:d5:b4:e2:a4:38:
7d:ba:ec:f9:16:54:65:9d:a6:fe:02:0b:07:09:97:27:17:90:
37:87:ee:41:d3:70:59:9c:e2:04:d0:2b:29:13:7a:25:b4:db:
73:18:49:03:39:e8:a0:8e:23:a6:8d:cb:f1:5a:f7:fe:a7:cc:
87:df:5a:c3:5e:0c:4f:e7:da:82:76:df:a4:61:5e:91:de:43:
aa:97:97:63:f4:e2:d4:03:4f:ca:65:93:c0:af:ea:f7:d6:c9:
04:33:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org