Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/JjbiCXtuv-F-s3TjlYbHNnH_LJA.roa
File: JjbiCXtuv-F-s3TjlYbHNnH_LJA.roa (raw, json)
Hash identifier: hEkV0aDCynF4ae7MXQdQAooNhLKBZM3HskXmAaH65J8=
Subject key identifier: 26:36:E2:09:7B:6E:BF:E1:7E:B3:74:E3:95:86:C7:36:71:FF:2C:90
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FAF
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JjbiCXtuv-F-s3TjlYbHNnH_LJA.roa
Signing time: Fri 01 Sep 2023 08:57:23 +0000
ROA not before: Fri 01 Sep 2023 08:57:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 211.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4015 (0xfaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2636E2097B6EBFE17EB374E39586C73671FF2C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:14:df:35:5c:54:27:81:67:14:51:8e:7b:8f:
b7:c8:45:b5:4a:4a:98:e4:59:70:cd:fd:97:58:6f:
ee:97:e6:90:8a:5e:aa:bd:95:d0:d4:51:60:22:f8:
1b:a9:7a:b2:08:ac:86:e7:e5:1f:98:6d:4a:52:a8:
14:a2:80:c8:e1:08:51:f0:da:3e:a2:47:7f:d4:aa:
17:37:e3:a8:7a:21:0f:f5:9a:61:c5:89:b7:6c:28:
57:70:f9:9c:96:66:e1:30:08:a4:b5:30:30:0b:c2:
76:bc:8a:ca:98:cf:e4:ae:a0:c3:8d:55:0f:7d:ce:
0f:ad:d3:95:74:38:8e:7f:b6:d7:14:b7:41:64:09:
53:e1:65:52:93:1e:01:dd:c8:9a:b2:ba:97:96:9a:
10:4e:e4:7c:fa:bd:d6:21:41:95:c2:cc:85:c7:7d:
2a:b4:59:3b:37:a0:dc:e6:23:53:a3:f6:a6:16:3e:
71:77:ee:92:84:ce:2f:92:27:01:82:e5:d3:71:8a:
4c:fc:81:0c:a2:1c:90:27:9f:68:56:2a:c3:8f:05:
29:84:83:9c:dc:a6:08:f4:73:c0:c2:2f:1f:b1:00:
9d:b9:1a:f3:a1:c9:e0:29:01:15:8a:be:39:04:46:
c0:6c:76:3d:7e:dd:3e:27:d2:fb:3d:64:cc:ef:7f:
62:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:36:E2:09:7B:6E:BF:E1:7E:B3:74:E3:95:86:C7:36:71:FF:2C:90
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JjbiCXtuv-F-s3TjlYbHNnH_LJA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.22.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:73:fc:02:41:ab:82:ef:09:91:65:1b:76:79:e9:21:91:0e:
50:02:8e:7c:8c:90:52:98:78:d5:89:dd:d0:68:55:c7:27:25:
1f:ab:fd:ff:6a:c2:c3:42:10:d4:5b:40:3a:8a:f9:91:9b:7c:
b5:8a:31:52:b6:da:ff:1f:b5:85:b8:a0:73:4d:89:09:10:06:
2c:95:bd:74:1d:b6:ce:e2:35:0d:9e:18:0a:a1:20:44:c5:69:
4f:82:4a:32:7b:f6:c8:18:f7:0e:42:ce:92:cf:5d:bc:cc:dc:
11:c0:09:91:38:8a:5b:9f:3e:c2:75:ca:8b:ea:95:e7:56:db:
0d:7d:df:2c:fa:11:1f:88:7a:b4:29:23:c6:94:4f:b5:ff:6a:
c7:05:63:3e:fe:60:59:7b:2d:64:23:df:bd:34:53:25:51:8b:
07:b3:69:cd:69:5b:f0:d0:57:94:63:d3:04:90:ed:32:c7:5c:
5b:01:81:1f:93:72:49:42:08:cd:84:3f:50:d4:9a:26:aa:7a:
7e:4f:33:ee:31:70:bc:26:52:ba:3f:3b:7a:0f:f8:a2:91:d7:
64:72:72:44:f4:0f:16:99:5a:e6:be:35:a5:01:db:c4:46:7e:
2a:7e:a5:0e:1c:55:d6:ee:d0:82:70:ff:4f:9b:25:f0:d1:85:
4c:1b:be:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org