Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/NfxghxQzkdt5oK-RIB50HI_pu14.roa
File: NfxghxQzkdt5oK-RIB50HI_pu14.roa (raw, json)
Hash identifier: hFQYY2Q0iaDVM13HRTrDT7W1lDNihuS4SuOUGXcgq7U=
Subject key identifier: 35:FC:60:87:14:33:91:DB:79:A0:AF:91:20:1E:74:1C:8F:E9:BB:5E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F90
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/NfxghxQzkdt5oK-RIB50HI_pu14.roa
Signing time: Fri 01 Sep 2023 08:57:13 +0000
ROA not before: Fri 01 Sep 2023 08:57:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9505
IP address blocks: 203.78.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3984 (0xf90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=35FC6087143391DB79A0AF91201E741C8FE9BB5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:45:d8:59:50:d6:0d:d6:3b:ce:9b:4a:81:
4e:73:65:61:0a:65:6a:1f:e2:49:50:30:6a:0d:d9:
fc:31:27:00:ce:66:d1:78:85:3f:98:b0:93:53:fa:
de:07:44:e9:2e:10:fd:bb:8e:fd:78:a0:75:5c:81:
d9:f4:15:af:af:7e:8c:0b:6e:83:40:59:47:69:b9:
ed:4a:75:c9:fd:6f:c4:1b:e3:34:d4:d7:5a:99:a5:
ca:5d:c6:e6:af:bb:2f:14:81:1d:14:18:95:d9:cf:
91:aa:82:ce:4b:ce:be:f9:25:46:9f:3a:2d:4e:87:
2a:39:37:30:1b:7f:71:2a:36:71:c5:47:c1:cc:38:
05:e2:6b:1d:ec:2f:1d:50:98:3b:57:55:14:78:e9:
68:9d:61:cf:d7:01:8b:c6:d9:7f:7b:6e:da:b0:86:
71:cd:9a:ed:52:b5:35:f6:1a:02:e1:2c:20:23:69:
ae:5f:83:7d:7e:fc:4d:11:39:a1:e1:de:8b:33:d5:
88:81:37:83:6d:14:25:9e:84:dc:c2:22:ee:b0:46:
f3:03:b7:68:d4:89:69:f6:cd:4a:4a:51:1b:60:0f:
dc:e3:7e:b8:a4:a4:09:15:e3:ce:6d:b7:e4:89:bd:
6c:bd:12:ad:5b:bf:44:58:fe:b3:be:6c:3d:2e:32:
37:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:60:87:14:33:91:DB:79:A0:AF:91:20:1E:74:1C:8F:E9:BB:5E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/NfxghxQzkdt5oK-RIB50HI_pu14.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.78.176.0/20
Signature Algorithm: sha256WithRSAEncryption
bc:5b:c3:03:c9:37:43:8a:c9:7f:25:23:33:a7:f0:cb:57:89:
50:ed:00:e3:8c:0c:cf:05:ca:30:19:46:ac:d9:5d:fa:5f:5a:
33:5b:9a:01:24:ab:e3:f9:12:96:41:50:99:ac:12:38:da:f4:
06:86:b2:a9:34:d7:45:ff:fc:d2:ad:69:3d:90:9c:6f:b6:5e:
1b:22:cb:ad:18:33:cf:cb:53:20:c6:bf:b3:5c:47:e8:7e:39:
37:34:45:00:f4:06:a3:a8:0b:f1:bb:02:0d:19:3c:eb:d4:e1:
40:1b:c6:b9:11:01:d5:e6:5f:96:9c:1b:77:f1:20:44:46:1d:
13:49:8e:6f:45:14:48:c2:b2:36:8c:4e:89:75:c7:70:c7:12:
e8:bb:c3:a0:56:df:71:f7:03:c2:59:bf:0f:16:b1:c0:3e:20:
48:a6:27:d2:5c:ba:00:f8:23:d6:83:12:7f:0d:6b:9c:67:83:
8c:f7:24:e4:56:26:e4:33:71:1a:26:99:d7:91:98:19:77:3a:
3a:4b:fe:d5:1e:f3:e8:13:b3:fd:52:ff:a0:7a:9f:a2:50:45:
e0:dc:a0:92:c7:de:2d:db:87:07:64:cf:9a:3a:fa:49:75:9e:
51:38:4e:7b:d3:43:a6:92:7f:ac:73:dd:7a:4d:f5:ab:c9:df:
d5:a9:be:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org