Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/KvAB-JuEQqLNIDbmWC2azI73gK0.roa
File: KvAB-JuEQqLNIDbmWC2azI73gK0.roa (raw, json)
Hash identifier: MTc/MF9xHl3kScaPMSpzCHGEVY+Hr6TclVRTWgO5dSQ=
Subject key identifier: 2A:F0:01:F8:9B:84:42:A2:CD:20:36:E6:58:2D:9A:CC:8E:F7:80:AD
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F40
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KvAB-JuEQqLNIDbmWC2azI73gK0.roa
Signing time: Fri 01 Sep 2023 08:56:48 +0000
ROA not before: Fri 01 Sep 2023 08:56:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 36040
IP address blocks: 2001:b032:c0ff:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3904 (0xf40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2AF001F89B8442A2CD2036E6582D9ACC8EF780AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e2:09:16:2b:6a:ee:dc:ec:ed:32:6d:d5:7c:
96:be:ac:83:16:6c:9e:8a:61:97:bf:57:b2:06:88:
57:e8:c7:25:2b:3a:27:31:08:5e:06:fd:ad:55:29:
78:85:6e:0c:72:d1:0a:74:c4:9f:4b:71:f7:90:ed:
5d:e4:c6:97:e7:00:41:45:e9:9d:df:9f:34:f8:a4:
59:08:32:1b:4f:ed:8a:f1:28:47:f0:2a:cc:b1:e3:
53:2c:1e:bb:4d:63:b2:0c:30:2b:28:0d:f0:ee:94:
75:e6:a2:3f:29:8d:8e:47:2b:68:70:52:83:13:8c:
f3:5d:5a:d6:71:ae:ae:4b:b9:d6:f4:70:5e:48:5d:
8d:d1:96:ac:d8:69:d1:38:fb:6b:44:b4:3a:a8:ab:
38:3d:e6:a4:2b:a2:80:c7:36:61:9a:51:80:11:bd:
71:0d:fe:26:86:e2:55:f3:be:bb:dc:c2:47:75:dc:
57:76:6d:44:df:f5:80:9c:91:95:d2:af:c5:e8:f7:
21:5d:f0:6e:9b:fb:c7:81:8f:c0:dc:76:58:b5:a4:
cc:35:48:cb:a5:9f:4b:82:66:47:22:30:e8:2d:d1:
1d:a8:d4:60:48:5a:99:89:52:f9:a9:36:cd:94:5e:
c4:69:ec:02:ce:a4:12:15:ef:af:9d:b2:19:8f:67:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F0:01:F8:9B:84:42:A2:CD:20:36:E6:58:2D:9A:CC:8E:F7:80:AD
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KvAB-JuEQqLNIDbmWC2azI73gK0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b032:c0ff:1::/64
Signature Algorithm: sha256WithRSAEncryption
0a:c2:70:8c:75:6a:4b:4f:e3:c6:1f:d2:7e:ed:1a:39:1e:78:
4b:7b:58:bc:e8:e7:24:96:58:c6:ed:03:04:95:86:ba:f4:66:
c0:94:11:86:dc:0c:77:c6:e5:b5:45:60:af:89:ca:b6:e4:04:
73:8e:62:de:87:4b:24:4f:f6:95:6c:f9:0c:23:4c:4c:7c:46:
34:9d:7b:3b:d6:6f:98:9e:d5:e3:51:50:81:03:97:4d:db:6a:
5e:42:5f:fe:11:ad:45:e1:39:fd:b0:22:e0:aa:46:f3:64:79:
f5:67:ff:db:d8:0a:18:06:6b:f7:85:8a:46:fc:2f:db:a6:69:
1f:17:44:28:95:76:d8:68:c0:e6:55:d3:65:47:b2:8a:c5:04:
0d:28:80:f5:04:98:87:4d:0f:c3:32:4d:3b:39:0e:c5:c8:4b:
99:6f:ab:24:71:29:6a:a2:58:7d:84:6d:96:08:8a:cd:bb:52:
75:c3:1d:24:37:e0:9f:52:ed:21:63:79:dd:79:6a:86:e4:3e:
e1:4e:3b:24:35:34:3e:1e:2f:c6:d5:9a:c2:57:7f:d3:c5:f9:
5a:cc:ac:0a:3f:34:30:a4:0f:7c:5d:6c:5a:bc:26:a1:1e:68:
f2:f9:f4:67:c2:0e:7a:da:10:d5:3d:05:4e:ef:d2:61:92:95:
25:24:ab:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org