Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/FyFbBa4oaqTsE6Qb1Epo28vnKd0.roa
File: FyFbBa4oaqTsE6Qb1Epo28vnKd0.roa (raw, json)
Hash identifier: fZwlaWPk9M80r366IefYLJWuwpP3mA7ddSNP+SR57gA=
Subject key identifier: 17:21:5B:05:AE:28:6A:A4:EC:13:A4:1B:D4:4A:68:DB:CB:E7:29:DD
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FB2
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FyFbBa4oaqTsE6Qb1Epo28vnKd0.roa
Signing time: Fri 01 Sep 2023 08:57:23 +0000
ROA not before: Fri 01 Sep 2023 08:57:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 142005
IP address blocks: 210.242.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4018 (0xfb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=17215B05AE286AA4EC13A41BD44A68DBCBE729DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:4b:d3:90:26:97:47:0c:b9:c6:e3:96:08:
35:06:55:0a:00:0e:7c:60:71:79:80:43:9c:cd:7f:
a6:cc:29:94:60:5f:d7:1e:db:3d:d3:fd:d8:9e:d5:
c5:78:1a:3d:f1:e8:9a:91:42:1d:95:be:5a:7b:24:
18:81:79:b4:aa:e5:8e:4c:7d:ec:32:bf:4d:af:5b:
29:63:e1:c9:8c:9d:55:7c:55:60:10:68:3e:c0:eb:
d9:36:6e:ea:c2:0e:f8:38:a1:2e:9d:58:50:39:85:
6e:7e:5d:ea:d8:00:e9:4c:dc:bc:49:eb:e9:9f:c7:
71:6c:1b:f0:7a:4b:9b:5c:72:fe:8d:94:48:4c:2d:
3f:ec:56:d0:f0:fc:f5:18:22:89:16:06:51:a7:3e:
79:d2:5c:84:44:1b:a7:f4:8c:ed:20:8b:f6:ec:be:
f6:19:91:21:f6:87:55:fa:ac:3d:e0:51:73:34:39:
12:2c:90:43:bc:25:ed:40:93:4f:c4:20:d6:1c:7d:
4a:d2:68:0a:ec:52:aa:48:e6:f1:0f:04:47:af:80:
6f:8d:9c:eb:85:7f:09:c5:4e:9d:8b:11:e1:7f:b2:
54:3a:66:9b:7e:46:81:e5:d1:53:33:4f:83:f8:21:
38:06:d7:e1:12:29:ee:0d:3f:2e:6f:83:76:90:27:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:21:5B:05:AE:28:6A:A4:EC:13:A4:1B:D4:4A:68:DB:CB:E7:29:DD
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FyFbBa4oaqTsE6Qb1Epo28vnKd0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.83.0/24
Signature Algorithm: sha256WithRSAEncryption
46:37:d8:1b:f0:53:fd:79:1b:85:de:c2:69:69:b8:f6:24:9e:
f7:69:32:f6:4d:e2:26:d8:76:ae:df:37:e5:a2:a9:a7:78:d4:
46:56:df:9f:42:23:56:13:2d:e9:4a:43:5d:6b:50:f5:eb:1b:
27:61:91:d5:f4:56:0a:ec:08:5b:c3:d5:06:07:2d:a9:76:23:
ca:9c:b8:6e:1c:19:55:b8:fc:57:3b:1f:8e:b6:4e:e0:1c:0d:
2e:13:21:b9:2c:e8:63:16:29:6a:f0:ca:e5:e7:44:27:10:6b:
52:5a:ed:03:d8:be:36:49:82:b4:01:5f:a4:74:49:e6:03:26:
ef:cb:b9:86:25:ff:c5:dc:54:bc:f8:15:ed:73:40:ad:e5:b6:
50:79:39:86:65:2d:a3:d5:0e:e0:a8:ea:15:fd:98:a8:4f:8b:
45:8a:26:12:e1:66:e8:47:9f:3f:cf:9a:21:8c:2d:ba:d6:4d:
30:3c:4b:20:20:15:54:4a:4b:56:3e:53:e9:ce:4f:08:50:3f:
0e:f1:0c:f3:ff:e7:1b:20:04:14:d3:f4:cc:ef:cd:e5:62:a2:
30:4e:a1:cd:ef:18:91:11:3c:62:01:7e:a8:11:3c:8f:a7:d5:
69:50:03:73:38:c1:87:06:23:f5:5a:72:b2:0e:f6:ec:15:c2:
48:a4:39:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org