Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Ku75DjmXI6IUiPRHPOG-v_l6-bU.roa
File: Ku75DjmXI6IUiPRHPOG-v_l6-bU.roa (raw, json)
Hash identifier: V01QAH5zHKfV0EusIA+QkN9nVh4fQB/uWDZTOCzbBkk=
Subject key identifier: 2A:EE:F9:0E:39:97:23:A2:14:88:F4:47:3C:E1:BE:BF:F9:7A:F9:B5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F9F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Ku75DjmXI6IUiPRHPOG-v_l6-bU.roa
Signing time: Fri 01 Sep 2023 08:57:18 +0000
ROA not before: Fri 01 Sep 2023 08:57:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 211.72.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3999 (0xf9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2AEEF90E399723A21488F4473CE1BEBFF97AF9B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c8:34:5a:d3:8b:eb:07:70:47:ed:e8:82:29:
b9:22:dc:6b:da:c4:20:10:a5:f6:d4:6a:53:3c:c4:
77:41:49:11:42:fa:52:5f:6e:3f:36:c4:57:9b:86:
b1:cd:d1:f2:85:84:78:25:68:f6:4b:c3:d2:13:3d:
ec:33:47:67:ee:a2:05:bf:e3:7c:67:f7:d8:49:c8:
f3:9c:27:2d:b0:30:f8:f0:cb:8c:52:bf:0c:cf:0f:
48:fa:77:a9:13:a8:96:eb:29:04:97:db:e9:4e:d0:
6e:4e:a6:c7:79:d9:16:60:49:f8:98:8a:8a:03:fc:
d5:9a:40:26:9c:48:8e:a9:8d:ad:92:75:b1:4e:de:
97:80:1a:b2:c5:4b:da:c2:17:22:48:77:29:ce:ed:
4c:af:91:88:d9:76:6f:ad:8e:f6:4d:7f:c5:45:b1:
e2:1f:93:a2:77:5d:b5:81:d0:1f:0f:a9:47:7f:fe:
2f:79:83:4d:ec:4c:b2:76:69:91:ec:54:72:b6:fb:
48:e1:56:a3:33:2e:27:27:8d:df:f5:43:11:0f:05:
b1:26:8c:78:4c:29:74:d5:f7:b1:96:81:4e:b3:39:
5b:68:fd:64:ff:b2:f2:ac:03:c2:b1:a3:67:44:b8:
d5:ec:aa:2c:91:8a:a0:25:9e:31:ac:a0:d2:05:62:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EE:F9:0E:39:97:23:A2:14:88:F4:47:3C:E1:BE:BF:F9:7A:F9:B5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Ku75DjmXI6IUiPRHPOG-v_l6-bU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.72.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:e0:20:81:22:16:30:a7:7f:20:d4:1c:07:71:a7:26:fe:de:
1f:a9:49:ae:02:a5:30:6e:f8:c2:95:a2:fd:83:d4:fa:74:b9:
d4:79:6c:e4:5a:9e:61:7e:0a:2b:b4:c6:31:4b:04:0c:22:19:
21:cf:8e:26:35:ad:70:41:b8:d2:ea:b5:0d:68:2d:91:b9:cf:
34:b6:01:44:05:d5:df:ac:6f:cd:6f:b1:fd:75:2f:eb:0d:a5:
29:48:b5:e7:98:8e:75:e7:8b:2f:98:da:86:fb:c6:51:4c:48:
f8:6d:2c:4f:93:42:8a:30:69:9a:a2:de:b3:d1:c6:b4:fa:d1:
19:8b:e9:16:85:18:bd:67:bb:cb:2b:e1:a9:ac:62:56:5c:1c:
35:58:a7:a3:4e:70:3e:3b:25:43:d3:e1:81:4b:09:02:f9:78:
87:8e:b0:db:8b:8e:aa:54:d2:95:97:58:75:6f:5e:3a:fd:8f:
1a:ca:46:1c:1b:65:12:7a:b6:d7:0e:43:81:7b:2b:58:d7:b9:
4a:ce:24:04:75:4f:f8:33:01:30:1c:c5:a0:22:d3:1a:9e:c2:
75:26:27:55:03:03:c6:63:af:fa:6c:b4:ad:0e:e0:2c:26:c4:
ea:3c:5a:3e:47:86:1b:6b:98:f5:e5:5f:8d:4c:93:fb:c9:72:
ef:52:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org