Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/DLYJJDSgMragcAxliCs0Ff6-yBw.roa
File: DLYJJDSgMragcAxliCs0Ff6-yBw.roa (raw, json)
Hash identifier: 3BpKr0JmsgkrvkshmsXWtOP04VTeiLFMN+cChT8T1zw=
Subject key identifier: 0C:B6:09:24:34:A0:32:B6:A0:70:0C:65:88:2B:34:15:FE:BE:C8:1C
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 108C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DLYJJDSgMragcAxliCs0Ff6-yBw.roa
Signing time: Thu 30 May 2024 03:29:49 +0000
ROA not before: Thu 30 May 2024 03:29:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 198949
IP address blocks: 203.74.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4236 (0x108c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: May 30 03:29:49 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0CB6092434A032B6A0700C65882B3415FEBEC81C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:93:de:ec:21:88:bb:e6:20:17:a6:2b:db:
e6:13:54:17:3a:96:54:e0:e0:33:d2:09:96:ea:93:
ef:2b:84:f5:35:ee:78:04:22:6b:39:65:ce:b9:4f:
44:37:2b:36:db:01:b0:ac:ad:ab:95:f4:0d:53:6c:
59:f0:9a:66:e3:c3:13:e1:82:f7:91:e2:68:d2:0e:
f8:8b:4c:be:cc:32:a7:5f:5c:99:24:62:eb:f0:3e:
1a:3d:7d:6d:45:c3:2a:d7:f1:cf:29:e0:15:2c:84:
ba:76:a2:4a:3e:ee:c9:fc:91:e7:b0:80:c1:2e:2c:
fd:fd:20:32:19:92:1c:bc:e4:db:39:33:d8:7b:cb:
5e:da:95:66:79:04:d0:2e:96:c4:a6:94:91:01:7e:
81:f2:8d:b8:62:d3:86:5a:af:71:d3:43:08:43:b0:
8c:af:fd:6a:ce:71:ae:4e:cd:00:c4:2d:ca:79:26:
1a:11:15:b6:66:17:44:9e:17:67:06:5d:cd:79:07:
50:60:63:d8:47:e8:3c:40:25:11:47:4f:64:e9:18:
49:00:eb:73:48:6c:55:fc:16:f6:6d:59:97:f1:ab:
3d:f8:c4:58:2f:4e:42:1d:14:25:d9:89:6d:36:15:
c5:1c:3f:eb:e0:d1:8c:6b:9c:b2:a4:f6:f9:06:86:
2e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B6:09:24:34:A0:32:B6:A0:70:0C:65:88:2B:34:15:FE:BE:C8:1C
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DLYJJDSgMragcAxliCs0Ff6-yBw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:7e:d6:ea:2d:c2:8c:6d:5c:19:7d:05:ee:44:ca:11:45:70:
f4:7b:bd:4f:67:ae:00:35:18:b3:99:f0:91:d3:52:3d:6b:0f:
62:80:c5:78:a7:14:e6:83:dd:b5:f4:be:50:c7:ae:e4:a7:61:
2a:af:53:bd:0f:db:6d:3d:50:3d:09:f5:5e:fe:bd:d2:05:4a:
56:20:de:d6:1f:3f:78:99:d5:67:d0:e5:bf:1a:d1:b6:e3:49:
7a:ff:ac:a4:bc:83:0a:d5:68:fc:ab:e8:ea:f0:f4:3a:93:2e:
6d:15:19:a5:48:0c:2d:b1:e4:b9:37:28:99:fa:e8:a3:ac:b8:
c2:3e:60:12:e9:f0:46:75:0f:f1:01:f8:c5:6f:1a:bd:6c:0d:
82:52:2c:af:3a:3c:bf:e7:6d:d1:54:32:61:aa:04:fe:4b:84:
fc:96:0b:1e:1f:07:24:af:aa:60:30:4c:cd:f5:07:06:ae:b2:
5b:4f:b9:51:22:ce:aa:d9:23:38:2f:1f:bd:fd:54:a5:c6:f7:
86:2b:9f:b2:1e:53:e8:b6:90:44:bc:e2:87:aa:9e:ad:36:47:
ee:ea:82:9b:7e:e5:e0:22:eb:86:e3:cb:cb:ca:a5:10:16:9d:
06:32:71:62:f7:97:1a:88:45:22:70:28:b8:90:7c:a6:82:8d:
78:78:4c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org