Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/FP5MbaD_p4DFMq98KSMf2my7hxk.roa
File: FP5MbaD_p4DFMq98KSMf2my7hxk.roa (raw, json)
Hash identifier: T3fgzlm4/FJ+1r9RjbzsDbqa6X3jf650UTeWlnSbbfk=
Subject key identifier: 14:FE:4C:6D:A0:FF:A7:80:C5:32:AF:7C:29:23:1F:DA:6C:BB:87:19
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FAB
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FP5MbaD_p4DFMq98KSMf2my7hxk.roa
Signing time: Fri 01 Sep 2023 08:57:22 +0000
ROA not before: Fri 01 Sep 2023 08:57:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17421
IP address blocks: 111.80.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4011 (0xfab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=14FE4C6DA0FFA780C532AF7C29231FDA6CBB8719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:f6:6e:5e:6e:43:79:1d:de:d6:9e:c8:c9:
ea:1c:65:c6:9f:ca:29:b9:40:98:60:dd:de:3d:8e:
9a:ec:f8:f5:86:90:a6:4b:ab:a4:4b:8e:af:90:82:
06:23:5a:ea:11:98:f2:20:bf:e0:30:3c:be:7a:a2:
73:8b:a3:4c:96:6b:5a:ad:0c:c5:e8:ba:1c:4b:05:
41:63:6d:06:21:2c:82:50:4e:cb:7e:7f:94:72:c7:
e5:9f:f0:10:11:e5:ef:7b:af:20:e9:3e:00:c3:02:
6b:98:7b:3f:fd:cc:f7:6b:37:5c:19:f6:39:b9:17:
ab:c8:fc:af:73:43:df:a5:89:1e:9d:50:97:a9:1a:
14:02:f0:8a:68:dd:31:73:e0:3c:ad:2e:98:52:47:
59:f7:70:c5:bd:ed:7a:71:ba:ac:c4:d7:4c:98:87:
06:6d:07:90:48:ab:f3:b2:55:c3:5b:b7:56:c6:f0:
a7:f1:40:f0:4e:90:f5:1d:9a:15:8d:c0:9c:3e:07:
5a:3b:c0:60:53:a8:23:59:33:12:65:44:37:b1:ca:
2f:de:2c:e3:b8:4c:ef:4a:0c:77:18:08:4d:42:4e:
65:ed:25:e5:fd:be:ed:58:b2:72:19:e8:e7:e2:0b:
7e:af:c9:a7:22:1c:98:f9:cd:ce:9b:be:5d:61:b9:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FE:4C:6D:A0:FF:A7:80:C5:32:AF:7C:29:23:1F:DA:6C:BB:87:19
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FP5MbaD_p4DFMq98KSMf2my7hxk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.80.0.0/14
Signature Algorithm: sha256WithRSAEncryption
40:26:ab:19:07:3d:94:9d:c7:c3:3d:54:47:42:a7:8e:35:6d:
d5:da:15:ee:10:db:35:cc:f0:62:f6:d1:69:48:d4:9c:70:72:
52:48:8e:e6:fb:15:03:2e:27:4f:bf:7e:57:a4:77:89:59:08:
3a:4a:96:36:28:42:1c:47:01:16:ea:97:ec:49:ec:57:a2:3f:
87:05:39:51:49:29:86:b9:4d:fd:6a:4a:e7:48:16:53:c9:4b:
67:03:fd:64:97:c3:f9:d9:18:ce:fb:fd:1f:7f:bf:6f:0a:25:
28:74:01:08:41:02:f1:74:9d:81:d4:54:eb:5b:57:43:4e:89:
f4:61:ed:fe:c5:89:8c:96:b5:34:f3:1f:3c:ce:f5:e2:d7:0c:
7f:39:c9:96:8a:dd:97:97:a6:f7:13:a5:c2:12:1f:e3:21:d7:
fc:8c:00:5f:84:01:fd:9f:68:b8:b7:5e:c6:69:0b:12:07:43:
69:78:16:4e:5a:79:0d:08:5f:00:fc:b0:9a:04:99:49:16:0a:
7d:75:77:e8:16:31:8d:93:bd:5d:f9:a9:0c:55:02:c0:73:b3:
da:9e:6a:e4:6b:24:da:2f:4e:b4:76:94:5f:0c:47:a6:78:79:
5c:81:53:c5:79:6e:21:03:e5:1a:20:dd:99:d0:14:8b:26:ec:
cc:2b:1a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org