Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/FyaNNccPucP9mDB1SVc5KyWa5H8.roa
File: FyaNNccPucP9mDB1SVc5KyWa5H8.roa (raw, json)
Hash identifier: AM+Mr+N739/edQa56/h+p1s1hS6brWU2dFfNnFIhHzA=
Subject key identifier: 17:26:8D:35:C7:0F:B9:C3:FD:98:30:75:49:57:39:2B:25:9A:E4:7F
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F46
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FyaNNccPucP9mDB1SVc5KyWa5H8.roa
Signing time: Fri 01 Sep 2023 08:56:51 +0000
ROA not before: Fri 01 Sep 2023 08:56:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 198949
IP address blocks: 210.242.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3910 (0xf46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=17268D35C70FB9C3FD9830754957392B259AE47F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5d:0d:bd:17:e3:a1:f8:56:02:47:f7:1c:aa:
6b:d8:81:ea:83:88:f3:e1:fe:f2:f1:ce:db:8e:2c:
78:cf:d3:32:9f:c1:8d:56:b5:a9:e5:ff:66:77:6c:
12:4a:fa:fc:c5:f8:98:d4:a1:96:8e:be:c3:57:8a:
90:db:af:3f:d3:0e:27:5e:13:bf:91:09:6c:89:cd:
ed:3a:f1:60:4b:bd:75:3a:73:96:a2:57:87:4d:fc:
e7:7c:cc:44:5e:e8:12:e7:9c:65:1b:06:c0:30:b6:
c7:1d:a9:40:05:f7:8b:42:a1:27:03:87:b0:63:05:
df:04:10:b6:6a:ca:44:b4:9d:d9:8e:ef:1a:5f:10:
c5:b8:2c:46:a1:4d:79:a9:93:db:3b:4d:6c:16:92:
20:42:ee:75:17:97:11:4e:d1:1c:bc:51:f9:65:d0:
61:53:26:e7:ac:e0:71:57:7f:05:4c:dc:3b:44:6e:
ba:05:30:9d:37:88:4f:24:e1:48:fa:7f:8d:f3:36:
d3:0a:79:db:7e:03:3e:96:bf:77:cd:de:93:78:86:
67:67:76:47:45:fc:4b:f3:01:11:f2:e6:e7:83:86:
9b:eb:17:e8:fb:14:8c:1f:c7:90:d3:31:d8:b0:24:
ee:29:b3:b7:1b:6f:06:67:ed:ce:35:8b:ae:d4:c4:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:26:8D:35:C7:0F:B9:C3:FD:98:30:75:49:57:39:2B:25:9A:E4:7F
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FyaNNccPucP9mDB1SVc5KyWa5H8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.123.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:ef:5f:2a:95:9a:93:1b:29:31:49:58:d1:11:a4:f8:9e:98:
d6:5e:f7:30:e1:80:df:5a:d5:61:a5:ed:81:27:50:37:ba:63:
44:e2:8e:63:c9:7e:81:d8:05:1c:86:93:91:fa:86:6f:89:22:
6c:2d:2c:e4:0c:b5:d5:b5:42:68:67:cb:94:bf:54:ae:8d:5f:
e1:e0:2a:6d:c8:ef:37:82:4f:d0:65:33:5e:bb:3f:0b:26:04:
d6:4b:b8:dc:82:0e:b1:3f:21:29:2f:f8:12:8b:08:a3:31:16:
78:b6:7f:7f:a3:14:75:4d:84:57:c2:8e:b7:74:88:39:63:02:
9f:6d:2b:1d:4e:33:33:af:0b:7f:0a:84:02:4a:13:f6:2b:42:
9d:4e:ec:2b:e8:b7:7b:c3:1f:2d:8d:bc:b2:c9:62:05:3c:e4:
54:8f:69:1f:96:a4:4c:b9:6a:9b:8a:33:fe:fb:7e:61:e0:53:
28:0a:0d:65:7e:2f:38:23:4e:f4:2e:7b:f0:e6:a6:4d:af:7a:
23:71:fe:fe:fc:1c:9a:aa:12:30:e3:94:0a:f5:6a:de:5b:f3:
d9:4d:fe:d9:cb:99:4c:05:ae:e5:c6:71:ee:ff:3c:aa:a9:2d:
64:9f:c3:42:2f:d5:a0:94:36:c6:9d:d3:c0:11:be:3f:a1:bf:
76:a3:cb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org