Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Bh5qD5Ff2ZvoSxcbYM9-WBre0xs.roa
File: Bh5qD5Ff2ZvoSxcbYM9-WBre0xs.roa (raw, json)
Hash identifier: ssr8XqZ8M0g+TxZuo9b2HDagH13QuqQlvK2M26blPZ8=
Subject key identifier: 06:1E:6A:0F:91:5F:D9:9B:E8:4B:17:1B:60:CF:7E:58:1A:DE:D3:1B
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FCC
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Bh5qD5Ff2ZvoSxcbYM9-WBre0xs.roa
Signing time: Fri 01 Sep 2023 08:57:30 +0000
ROA not before: Fri 01 Sep 2023 08:57:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 23675
IP address blocks: 203.66.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4044 (0xfcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=061E6A0F915FD99BE84B171B60CF7E581ADED31B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:02:31:17:5b:e6:20:37:d0:0b:46:bd:6f:
05:ef:c9:d8:4c:95:e5:94:4c:1e:22:0d:f1:f2:65:
22:65:51:9a:56:19:c7:0c:63:8c:61:1d:b6:bb:43:
8a:66:00:52:46:be:58:4a:4e:20:a7:3d:46:49:55:
21:54:34:67:19:bf:01:3d:57:5e:29:d9:c1:fc:8f:
68:1b:c4:7a:e1:11:5e:64:8d:13:04:21:43:7b:bc:
8e:1e:75:73:55:b7:87:69:81:6c:85:4f:39:12:dd:
cf:9b:3f:cf:82:e9:b9:1f:29:1e:3b:cd:bd:50:67:
29:d6:46:bd:c0:11:7f:bb:6a:44:a1:31:5e:b6:24:
62:2a:a9:63:e1:5b:36:ba:9d:47:77:bb:54:a8:5f:
22:47:a0:0f:a9:95:69:d2:23:aa:c6:de:14:eb:de:
99:63:e4:fc:00:db:e2:09:72:98:b2:d5:28:05:dd:
43:06:0f:49:2d:17:af:69:75:90:87:08:b6:66:ad:
ca:fc:12:0c:c2:9a:2c:6a:6f:a3:b6:f0:25:91:00:
d9:d3:c7:dc:fe:c5:3a:bd:ab:24:f3:16:e9:fb:60:
d5:8d:87:f2:f5:af:25:47:72:50:58:e5:a2:16:55:
1f:5e:5d:37:1d:99:40:b2:9c:f7:b9:6b:ae:69:7e:
4c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1E:6A:0F:91:5F:D9:9B:E8:4B:17:1B:60:CF:7E:58:1A:DE:D3:1B
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Bh5qD5Ff2ZvoSxcbYM9-WBre0xs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.66.101.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:0c:dc:14:69:b9:e2:a6:bf:a0:0c:35:73:85:91:67:84:77:
51:2d:97:16:31:76:e8:81:fe:ec:ea:cf:ab:c1:8a:38:11:ff:
7c:78:c2:53:d1:1f:d8:96:61:80:c1:1f:b8:c8:f7:23:b7:57:
e1:15:20:38:51:c3:45:75:58:e6:86:5d:61:d1:9f:a8:b6:af:
db:0f:1b:b2:a3:05:24:38:c2:95:0f:1f:b5:f1:07:53:e0:5d:
ee:5d:e6:d2:e9:b4:c6:4e:3a:c8:ee:84:84:5f:4b:35:0d:13:
9a:9b:ec:c6:84:53:48:bc:6c:40:a9:b2:41:de:14:89:01:a7:
b3:5d:05:67:cd:fa:62:30:da:b1:18:46:4a:4c:31:e4:4e:2f:
9f:1d:3b:a1:dc:10:57:c2:27:cb:fe:9b:f5:18:72:ec:d3:a9:
87:30:2c:0c:b0:5e:b4:fa:d5:1f:92:29:30:10:03:a6:09:80:
96:de:d6:24:42:bb:56:6c:2e:ca:0a:e0:30:98:47:87:32:f6:
f2:27:6a:98:1c:0d:66:ae:2b:90:b4:2f:6d:ce:ec:35:db:db:
b1:77:3f:a2:5f:cb:aa:ea:7d:c5:8a:2e:8f:74:4b:76:eb:8d:
11:bf:b2:83:12:04:99:38:69:e8:3f:28:f4:ed:e2:d1:aa:9f:
b3:53:b8:57
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICD8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU3MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA2MUU2QTBGOTE1RkQ5
OUJFODRCMTcxQjYwQ0Y3RTU4MUFERUQzMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKpAIxF1vmIDfQC0a9bwXvydhMleWUTB4iDfHyZSJlUZpWGccM
Y4xhHba7Q4pmAFJGvlhKTiCnPUZJVSFUNGcZvwE9V14p2cH8j2gbxHrhEV5kjRME
IUN7vI4edXNVt4dpgWyFTzkS3c+bP8+C6bkfKR47zb1QZynWRr3AEX+7akShMV62
JGIqqWPhWza6nUd3u1SoXyJHoA+plWnSI6rG3hTr3plj5PwA2+IJcpiy1SgF3UMG
D0ktF69pdZCHCLZmrcr8EgzCmixqb6O28CWRANnTx9z+xTq9qyTzFun7YNWNh/L1
ryVHclBY5aIWVR9eXTcdmUCynPe5a65pfkyDAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUBh5qD5Ff2ZvoSxcbYM9+WBre0xswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9CaDVxRDVGZjJadm9TeGNiWU05
LVdCcmUweHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0Jl
MA0GCSqGSIb3DQEBCwUAA4IBAQBqDNwUabnipr+gDDVzhZFnhHdRLZcWMXbogf7s
6s+rwYo4Ef98eMJT0R/YlmGAwR+4yPcjt1fhFSA4UcNFdVjmhl1h0Z+otq/bDxuy
owUkOMKVDx+18QdT4F3uXebS6bTGTjrI7oSEX0s1DROam+zGhFNIvGxAqbJB3hSJ
AaezXQVnzfpiMNqxGEZKTDHkTi+fHTuh3BBXwifL/pv1GHLs06mHMCwMsF60+tUf
kikwEAOmCYCW3tYkQrtWbC7KCuAwmEeHMvbyJ2qYHA1mriuQtC9tzuw129uxdz+i
X8uq6n3Fii6PdEt2640Rv7KDEgSZOGnoPyj07eLRqp+zU7hX
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org