Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Sz0d4dsDCR-ofSnZaP8rf7V3PJ0.roa
File: Sz0d4dsDCR-ofSnZaP8rf7V3PJ0.roa (raw, json)
Hash identifier: 4i00V5Rv8Lf/a7ow5xIvMBGHosuqo4nZlQNyBAWLSq0=
Subject key identifier: 4B:3D:1D:E1:DB:03:09:1F:A8:7D:29:D9:68:FF:2B:7F:B5:77:3C:9D
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F89
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Sz0d4dsDCR-ofSnZaP8rf7V3PJ0.roa
Signing time: Fri 01 Sep 2023 08:57:11 +0000
ROA not before: Fri 01 Sep 2023 08:57:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 61.216.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3977 (0xf89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4B3D1DE1DB03091FA87D29D968FF2B7FB5773C9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:d8:63:e8:b4:81:24:e5:7a:ef:5b:28:60:
88:48:ab:15:a0:83:7b:33:5a:fb:f6:24:7e:2e:25:
f0:55:14:fa:04:a2:14:c5:e1:62:ff:89:b9:bc:09:
3b:2b:43:15:23:6b:15:6d:b3:03:cc:c6:c8:e1:b3:
91:55:74:ea:1f:09:93:f7:18:d9:d6:2a:e1:6d:f9:
22:3c:c4:99:d8:4d:4a:20:95:6b:b9:fe:32:02:20:
78:a6:7e:c9:cd:fe:f8:a6:04:6b:64:18:d6:a1:54:
f8:dc:29:a0:6b:0a:2b:01:c1:ab:d5:3b:43:7d:e7:
a5:28:36:60:70:cc:91:be:3b:b8:f9:09:95:9d:3d:
46:fa:56:70:52:8c:18:0f:7b:1e:ad:6d:85:c1:b3:
5b:83:a0:dd:40:dd:0c:76:16:c7:b5:7a:d6:b5:fc:
7b:37:d9:ad:cc:e7:5c:25:d8:3e:64:fd:6d:7a:ec:
21:2a:37:c1:35:6b:82:4d:36:ce:66:47:5f:cf:f2:
20:cd:f4:e2:bc:d4:00:0d:6b:2b:8c:26:64:10:a9:
45:61:4c:7c:dd:cd:fb:c9:a5:50:a2:66:0a:e1:ad:
c9:0a:5a:be:bc:d4:3d:8a:06:34:5c:4b:ba:fc:e7:
e0:0f:55:9b:24:ac:37:9e:38:e0:ec:89:85:ad:24:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3D:1D:E1:DB:03:09:1F:A8:7D:29:D9:68:FF:2B:7F:B5:77:3C:9D
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Sz0d4dsDCR-ofSnZaP8rf7V3PJ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.216.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:42:ee:35:09:9d:8f:b5:6a:48:08:49:4d:73:52:ee:14:d9:
2a:c2:6a:bc:06:87:6c:3f:8d:cb:d4:62:97:f4:1d:71:67:52:
33:49:6e:1b:26:5e:ec:3e:55:8f:ba:50:b6:ab:c6:f4:b7:4c:
03:a5:8d:07:e6:31:9b:fd:a7:8c:7e:2b:ce:82:25:63:c3:38:
93:1e:5d:3e:52:13:46:64:75:f1:76:d0:fe:00:15:ec:b3:25:
6d:5d:8d:b0:fc:1a:ee:6d:45:0d:6e:88:d6:b0:14:0e:56:3f:
51:29:fd:dd:dd:22:14:69:64:08:b3:f2:8f:7f:52:08:22:53:
6f:30:97:a4:d5:27:9d:30:d3:63:4a:97:e4:5d:c8:c0:a9:f9:
08:ad:27:4d:29:0d:d3:25:a1:4b:95:d5:38:70:03:62:18:88:
46:5a:49:2d:17:52:8c:c7:e9:5f:9e:c7:9e:12:7a:eb:27:18:
8a:45:48:43:d7:1a:71:d9:21:96:8b:b0:40:49:df:c8:67:66:
51:c9:dc:59:1c:61:9d:2d:0c:0a:bd:60:c3:cc:f2:2d:08:e8:
23:93:6c:fd:aa:fd:2d:92:ad:14:75:77:ef:7e:65:cc:74:20:
fc:1c:6e:53:b7:e1:cb:24:b5:c5:c3:1b:8a:b6:fe:5a:c9:6b:
4a:fc:d2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org