Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/RHkRKqX8uguOPnRMIEq96S0FehI.roa
File: RHkRKqX8uguOPnRMIEq96S0FehI.roa (raw, json)
Hash identifier: 0CAIm2SrcQ1I3NXQUfUnyMmZY0oUaM3VDIoRVWZ2Skg=
Subject key identifier: 44:79:11:2A:A5:FC:BA:0B:8E:3E:74:4C:20:4A:BD:E9:2D:05:7A:12
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F2B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RHkRKqX8uguOPnRMIEq96S0FehI.roa
Signing time: Fri 01 Sep 2023 08:56:42 +0000
ROA not before: Fri 01 Sep 2023 08:56:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 118.168.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3883 (0xf2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4479112AA5FCBA0B8E3E744C204ABDE92D057A12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:f5:e3:68:65:05:87:6b:41:c2:85:7c:f9:
86:40:cc:3a:9f:fd:75:c4:fd:a0:62:49:91:52:ad:
3c:f0:c5:fa:ba:a2:09:a8:61:64:e5:c7:4f:3c:50:
0b:33:67:79:ac:4d:2e:70:c5:b1:90:72:b3:fa:4e:
02:07:ef:36:2a:9b:52:26:2a:ce:75:38:8e:dd:eb:
27:c3:37:83:7f:57:be:12:93:86:d6:56:be:61:d1:
f1:f8:f5:a9:21:3e:f6:02:0e:90:17:29:f0:c0:10:
14:a6:ff:63:cf:85:6e:98:a1:56:8d:74:bc:a5:76:
a8:87:37:45:3a:46:5b:17:6e:67:3a:4b:b0:8a:de:
97:9f:98:e1:fc:4f:29:96:90:34:f5:4d:14:ad:23:
8d:0d:e8:4a:a7:41:86:9a:f7:a5:a6:28:6e:1d:4c:
ce:29:54:6d:b4:61:d4:24:05:ca:ab:75:4e:92:48:
a0:08:2e:db:24:8c:dc:4c:39:d3:40:9b:4d:85:10:
e8:8f:06:c1:2b:fc:10:0a:bd:0c:34:a1:2d:88:14:
a8:15:81:05:ec:6e:aa:ac:8a:0c:51:61:03:01:5f:
85:23:b5:44:ab:ba:18:66:d9:e4:de:8f:e5:d7:ba:
31:8b:94:69:ac:43:e6:33:80:f1:d9:2d:4c:fb:9f:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:79:11:2A:A5:FC:BA:0B:8E:3E:74:4C:20:4A:BD:E9:2D:05:7A:12
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RHkRKqX8uguOPnRMIEq96S0FehI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.168.0.0/14
Signature Algorithm: sha256WithRSAEncryption
bd:d5:05:11:5b:93:7b:61:5e:11:f9:a8:7d:49:97:d1:4b:1f:
67:7c:ad:a9:17:c0:1c:40:21:c3:1b:bf:1e:1a:e5:77:03:a5:
0d:32:e4:30:98:32:27:eb:86:10:1d:ed:79:7b:86:62:fd:1f:
ba:2d:93:98:53:0f:96:33:66:df:11:ac:91:a5:ce:ed:c6:fe:
16:2e:68:5c:b5:85:87:54:f1:4f:81:13:bb:74:7b:24:42:03:
f6:b2:f7:e1:24:46:ce:03:3b:98:1e:7e:80:a3:8f:70:e7:7d:
eb:1a:d9:51:bf:fb:5c:0b:20:2c:35:24:f5:26:9d:6f:ca:98:
55:8d:08:19:50:b8:ec:55:2a:52:8f:45:8f:48:b7:6d:88:db:
6d:9f:3e:aa:0c:2a:a3:b1:4f:73:06:09:19:4a:97:48:72:9c:
82:7a:f1:aa:81:2d:1a:80:93:c5:57:03:9f:38:8b:46:8d:81:
af:fc:af:cf:04:f3:19:70:f8:dc:26:1b:af:cb:33:6a:bc:c7:
15:db:0c:09:a6:c5:a8:39:b9:74:f2:d7:1f:05:85:b9:bd:e8:
ae:74:f4:7d:d6:a8:e1:f4:b0:04:5a:f6:a3:b2:28:89:d4:5b:
e5:6f:44:4e:00:6a:6f:1b:90:53:da:3c:b9:f2:26:3e:25:b1:
82:51:be:ad
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICDyswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU2NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ0NzkxMTJBQTVGQ0JB
MEI4RTNFNzQ0QzIwNEFCREU5MkQwNTdBMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJm/XjaGUFh2tBwoV8+YZAzDqf/XXE/aBiSZFSrTzwxfq6ogmo
YWTlx088UAszZ3msTS5wxbGQcrP6TgIH7zYqm1ImKs51OI7d6yfDN4N/V74Sk4bW
Vr5h0fH49akhPvYCDpAXKfDAEBSm/2PPhW6YoVaNdLyldqiHN0U6RlsXbmc6S7CK
3pefmOH8TymWkDT1TRStI40N6EqnQYaa96WmKG4dTM4pVG20YdQkBcqrdU6SSKAI
LtskjNxMOdNAm02FEOiPBsEr/BAKvQw0oS2IFKgVgQXsbqqsigxRYQMBX4UjtUSr
uhhm2eTej+XXujGLlGmsQ+YzgPHZLUz7n4dxAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQURHkRKqX8uguOPnRMIEq96S0FehIwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9SSGtSS3FYOHVndU9QblJNSUVx
OTZTMEZlaEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCdqgw
DQYJKoZIhvcNAQELBQADggEBAL3VBRFbk3thXhH5qH1Jl9FLH2d8rakXwBxAIcMb
vx4a5XcDpQ0y5DCYMifrhhAd7Xl7hmL9H7otk5hTD5YzZt8RrJGlzu3G/hYuaFy1
hYdU8U+BE7t0eyRCA/ay9+EkRs4DO5gefoCjj3Dnfesa2VG/+1wLICw1JPUmnW/K
mFWNCBlQuOxVKlKPRY9It22I222fPqoMKqOxT3MGCRlKl0hynIJ68aqBLRqAk8VX
A584i0aNga/8r88E8xlw+NwmG6/LM2q8xxXbDAmmxag5uXTy1x8Fhbm96K509H3W
qOH0sARa9qOyKInUW+VvRE4Aam8bkFPaPLnyJj4lsYJRvq0=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org