Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/WI6wNhi4GyzM235Iob8j3BY_zlE.roa
File: WI6wNhi4GyzM235Iob8j3BY_zlE.roa (raw, json)
Hash identifier: y+QbSxtkj+jgVuODrm7vuW37hrOqdS1lb5FjgvEasLQ=
Subject key identifier: 58:8E:B0:36:18:B8:1B:2C:CC:DB:7E:48:A1:BF:23:DC:16:3F:CE:51
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F64
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WI6wNhi4GyzM235Iob8j3BY_zlE.roa
Signing time: Fri 01 Sep 2023 08:57:00 +0000
ROA not before: Fri 01 Sep 2023 08:57:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 20940
IP address blocks: 203.66.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3940 (0xf64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=588EB03618B81B2CCCDB7E48A1BF23DC163FCE51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:12:42:19:dc:cf:36:08:69:d3:d8:77:90:
05:d7:80:21:ed:62:a1:ab:6a:d9:cd:54:60:9f:25:
2c:7e:07:49:aa:52:e8:62:8d:91:cb:9d:7e:0c:49:
f1:59:b1:52:52:aa:32:37:14:fd:7e:05:0c:e2:8c:
54:e9:f5:20:f5:29:10:03:4d:96:b1:1d:df:29:19:
60:e6:69:77:25:df:a6:8d:86:48:9a:2e:ba:03:5d:
3f:99:fa:c0:fe:fa:de:1a:44:a1:be:7d:ad:17:5f:
96:b2:fd:7a:57:f4:09:d6:a9:e2:75:98:72:89:3c:
d9:57:99:c9:30:e0:f5:03:63:7f:cc:29:ee:21:90:
f1:53:b6:31:43:09:51:8b:d3:ba:13:c2:e7:82:fa:
3a:83:ef:b6:a8:62:c8:a9:ad:2d:e1:7f:3d:21:cc:
27:ff:5e:49:ad:a2:ad:06:e1:c2:f6:2c:42:dc:8d:
ae:7a:37:a8:af:d9:ac:25:1e:fd:3f:08:23:60:14:
e5:13:fd:ae:c9:7c:82:55:ee:61:5a:59:4f:43:1a:
dc:b9:f5:2c:3f:55:d7:57:29:b0:24:6b:e3:5c:a6:
f3:e4:71:68:15:cc:b4:87:dc:4a:d6:40:cf:a5:68:
8c:0c:5b:9a:f4:c2:6d:50:bc:6e:f2:71:3e:78:39:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8E:B0:36:18:B8:1B:2C:CC:DB:7E:48:A1:BF:23:DC:16:3F:CE:51
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WI6wNhi4GyzM235Iob8j3BY_zlE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.66.226.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a0:bf:02:04:e1:40:b0:61:5c:95:c4:4a:6a:b2:fb:3e:30:
e6:06:fc:e8:3e:40:2e:dd:bc:92:f9:9d:b5:2f:b5:30:ae:15:
7f:1a:e8:42:e5:04:f5:56:13:b5:c0:80:e3:e2:59:21:67:ff:
9a:ff:07:a0:2a:33:13:37:9d:6f:bd:d0:7a:68:8f:44:2c:1e:
a3:f8:63:dd:f2:c0:67:45:fc:40:e2:5e:b8:4b:75:e1:f4:c4:
2c:a9:b6:2d:9a:99:16:c9:d9:1c:a7:5a:d6:43:23:08:bf:6c:
b5:d1:aa:ad:31:dc:c8:93:97:c8:2b:9b:76:40:8b:49:df:2c:
cb:11:bd:92:a5:24:15:ad:5f:5f:17:e1:d3:84:18:b2:8e:74:
6a:c6:31:aa:8b:35:27:1a:ee:2d:ca:28:ce:6d:f6:2e:3e:6c:
07:21:35:b9:5a:f2:e4:a0:40:c5:d7:c5:80:49:97:f9:f1:c8:
d9:5e:40:b2:33:fd:a7:6c:0d:3b:88:13:40:55:52:2e:fb:e7:
f6:43:49:a2:d3:ec:8d:61:fc:39:4b:98:9e:3c:0e:53:07:5a:
ed:1f:6b:7e:71:7b:48:4d:6f:b8:aa:e0:aa:4f:e4:fb:be:9e:
6a:09:6f:f3:c3:3e:5e:4c:5f:17:af:27:0f:a6:aa:18:57:91:
27:ac:d9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org