Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/EwlVz7z9SHXMWFVBk-mvNgr8CYo.roa
File: EwlVz7z9SHXMWFVBk-mvNgr8CYo.roa (raw, json)
Hash identifier: Jn3wkJWKSRka1pxVnz3x9yxCST3lR9URcREnIhKXST8=
Subject key identifier: 13:09:55:CF:BC:FD:48:75:CC:58:55:41:93:E9:AF:36:0A:FC:09:8A
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F8B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/EwlVz7z9SHXMWFVBk-mvNgr8CYo.roa
Signing time: Fri 01 Sep 2023 08:57:11 +0000
ROA not before: Fri 01 Sep 2023 08:57:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 203.75.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3979 (0xf8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=130955CFBCFD4875CC58554193E9AF360AFC098A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:24:9d:ec:ee:32:4d:e7:50:5f:e5:5b:31:
4b:14:8f:ab:d5:80:3b:48:a8:39:e2:a2:00:06:f3:
28:62:33:9f:76:ac:83:96:fb:6d:72:75:e7:a2:0f:
43:3a:75:3c:55:92:04:6f:a3:fc:0e:3c:6e:c0:d0:
1d:f3:f9:9b:bf:47:c4:75:b3:af:f5:3c:59:5e:70:
f1:23:cb:bf:fd:29:4c:ab:d9:15:c3:0b:00:53:c1:
1b:e5:71:85:7c:68:03:2b:eb:57:ac:39:0d:3d:ae:
de:3b:10:2f:9e:7f:0b:3c:2b:94:69:fb:6d:47:8d:
43:4d:70:12:0e:19:19:6f:38:c9:28:a6:ee:f2:df:
e0:10:e9:fd:eb:1b:94:6e:f7:b7:27:69:3d:c6:02:
10:6c:d7:d0:dd:92:e3:0e:6b:dd:db:72:47:65:ae:
b9:0e:8f:37:57:71:28:a6:d1:af:4e:b9:2e:55:3d:
8a:5d:9a:9c:ba:c4:69:56:9d:db:7e:75:32:d2:99:
da:65:32:1d:b7:43:ec:c5:73:fd:d1:78:89:4c:a8:
07:90:52:1a:40:d6:96:06:3f:a1:53:27:a6:7b:0c:
62:3e:7b:d8:14:fb:f6:40:16:93:df:a1:7b:92:9a:
a4:d0:b4:88:68:d3:f1:55:02:b2:74:3c:08:fb:75:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:09:55:CF:BC:FD:48:75:CC:58:55:41:93:E9:AF:36:0A:FC:09:8A
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/EwlVz7z9SHXMWFVBk-mvNgr8CYo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:07:a8:a4:58:a4:19:d6:2f:61:24:57:6c:e9:fb:58:8e:f4:
9d:63:02:9b:06:46:1f:80:f3:80:90:4f:d6:5f:73:5b:6d:19:
13:6f:fa:5f:50:bf:97:49:5e:18:db:e8:9c:b8:59:0d:d6:0f:
b4:6d:0c:d7:67:51:5b:fe:b1:b2:d3:20:20:a6:ff:1b:5e:cf:
be:5b:54:81:12:a0:b2:b7:16:9a:ce:f4:99:db:1c:8b:48:e9:
90:08:09:f9:09:14:f6:dc:f9:70:14:6b:e6:98:73:7a:da:22:
f8:5b:96:61:f4:c1:0a:63:cf:3a:1b:df:b8:04:56:57:d6:4c:
02:79:07:60:db:9f:30:ce:96:e0:d4:94:ab:8c:92:3c:11:e3:
6d:ab:ff:47:52:15:56:a8:ac:b2:ee:3c:b2:91:b4:13:a9:48:
66:b9:d0:53:c3:36:56:57:a1:7f:85:ce:18:37:32:e1:e4:e3:
c8:bd:8b:14:8d:e9:bc:bf:eb:f5:5a:e5:ff:4e:f9:de:ed:80:
e8:57:fa:fd:5d:52:4f:d4:4a:b8:6a:a2:05:87:dc:02:ee:bd:
3d:ea:10:9a:c6:2a:2d:49:32:e6:1a:85:ae:c8:0d:23:a0:d6:
e3:20:68:5b:a6:ff:78:97:f9:14:64:65:70:bd:e2:33:79:c2:
7d:1f:3c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org