Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/BDpTJbs-EnhTFz5fnlREboBeB7I.roa
File: BDpTJbs-EnhTFz5fnlREboBeB7I.roa (raw, json)
Hash identifier: HGHEh0iGjI4DMeNoK7+CZhpLELSoUBeadRrw204HZUo=
Subject key identifier: 04:3A:53:25:BB:3E:12:78:53:17:3E:5F:9E:54:44:6E:80:5E:07:B2
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FA8
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/BDpTJbs-EnhTFz5fnlREboBeB7I.roa
Signing time: Fri 01 Sep 2023 08:57:21 +0000
ROA not before: Fri 01 Sep 2023 08:57:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 122.120.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4008 (0xfa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=043A5325BB3E127853173E5F9E54446E805E07B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:72:b8:b3:fe:72:c2:3f:cd:71:d8:a5:c1:
c5:33:29:7f:ba:9e:c0:f5:96:77:fb:02:d5:99:10:
38:e3:9f:6e:77:13:89:f1:a3:9b:97:37:6f:c3:6c:
93:0e:ae:6f:73:a7:2a:e4:60:a0:1c:f9:6a:29:f8:
69:9c:3d:e1:b3:7e:9e:9b:6a:b5:3f:eb:95:87:3c:
64:e7:47:77:86:ea:95:fb:32:a6:e4:d1:70:c0:81:
ee:56:be:ef:5d:34:84:8c:3f:94:89:0f:aa:86:40:
bd:99:ca:05:6a:9c:09:f2:31:04:11:05:82:b5:09:
36:43:fb:6d:56:50:c5:bc:4e:1e:41:84:86:b7:ba:
47:39:bf:b6:b2:a1:37:d5:00:1a:c6:19:e5:87:95:
61:b0:73:59:08:f4:1c:ac:c7:32:8f:e5:b2:8b:76:
2f:1a:d0:83:2a:1b:b2:22:86:f7:27:2a:0c:f3:32:
a7:41:be:1b:9d:a4:f9:cd:da:c9:dc:33:7b:2d:3c:
6a:fc:75:a9:da:d7:20:5d:b1:2c:11:34:a6:c8:3c:
ce:d0:4b:81:18:0e:e8:73:64:6b:aa:48:f2:61:0e:
25:29:08:78:22:92:0e:e8:d2:99:5e:4b:0f:d5:80:
28:d8:64:b6:19:4e:d2:12:93:cc:19:19:09:a7:b5:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3A:53:25:BB:3E:12:78:53:17:3E:5F:9E:54:44:6E:80:5E:07:B2
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/BDpTJbs-EnhTFz5fnlREboBeB7I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.120.0.0/13
Signature Algorithm: sha256WithRSAEncryption
9b:bc:62:6a:03:2d:12:77:75:c6:4a:6a:ac:aa:b5:20:31:ba:
2c:50:76:2f:48:c1:e1:54:26:9f:fa:f7:72:3b:59:de:16:55:
f5:f0:83:68:a0:79:f5:d4:62:7c:9b:d0:7c:38:fc:5a:5e:58:
f0:a1:9c:ca:35:75:be:8f:b3:8d:c4:b0:97:fe:04:3c:20:2c:
8a:b5:96:95:a8:2b:ee:0a:67:e8:53:c3:c8:88:2f:20:df:9b:
a6:0c:e0:41:ae:8f:4d:4a:1f:a8:6c:7c:41:9a:d7:4e:10:48:
a5:51:d6:eb:dd:56:ff:0f:a9:91:96:1c:87:a4:04:29:50:be:
d7:a7:29:0b:70:63:c3:9b:32:eb:b1:2b:75:1d:58:54:a2:57:
2e:d3:f8:96:e0:6d:bd:17:d3:24:b4:a9:0e:dd:30:b4:1b:e1:
ff:29:02:1e:ea:c8:21:a4:08:0e:47:fc:f3:d8:90:17:75:39:
75:16:df:e1:7f:76:0c:bf:c9:84:e5:a0:77:f5:fa:d4:2b:54:
d1:07:2d:8f:7a:b0:fb:44:90:14:8c:33:91:a3:0e:81:f3:7c:
aa:e7:56:a0:9b:b9:78:6b:b2:a7:b6:82:12:1e:2f:06:f8:4a:
6a:0c:6e:6c:6f:cb:17:fc:7c:6f:7b:48:be:c6:92:0f:20:ff:
ff:74:b4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org