Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/XbwUWv4UXUpoJAIc4p4kPlje8rA.roa
File: XbwUWv4UXUpoJAIc4p4kPlje8rA.roa (raw, json)
Hash identifier: fNSGPoiTm6O8RHzHBUF7zos7R35gDNOFcdjrQtTfq0M=
Subject key identifier: 5D:BC:14:5A:FE:14:5D:4A:68:24:02:1C:E2:9E:24:3E:58:DE:F2:B0
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F31
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XbwUWv4UXUpoJAIc4p4kPlje8rA.roa
Signing time: Fri 01 Sep 2023 08:56:43 +0000
ROA not before: Fri 01 Sep 2023 08:56:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 198949
IP address blocks: 210.242.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3889 (0xf31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:43 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5DBC145AFE145D4A6824021CE29E243E58DEF2B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:21:a4:32:cf:5f:41:ab:d5:08:44:2a:d5:
0b:2f:1d:a2:15:28:75:de:e0:34:b4:60:13:ea:5e:
d5:52:09:3b:39:13:fd:35:77:13:4a:1a:56:d2:dc:
a1:89:d0:14:12:1a:ba:48:70:1a:e7:cf:cb:2c:bb:
d8:bc:95:44:e5:44:88:2e:b4:79:70:a3:f6:61:b0:
6f:43:d2:d5:74:92:da:0c:fc:2b:92:d7:3b:42:31:
40:52:6a:9e:17:a8:5c:fa:c1:9e:a1:96:2b:19:e2:
12:39:a5:05:62:63:1d:67:fb:c6:7f:2a:18:ca:c2:
76:95:fa:a3:0b:25:92:f0:45:5c:aa:87:52:6f:30:
03:ee:60:f7:4f:8a:7e:8f:31:34:7f:ba:ad:8f:10:
5c:df:06:57:00:ae:18:36:35:b0:0b:9d:9e:57:40:
26:40:f6:fa:db:ca:5d:6f:ba:f7:1f:f7:57:4b:05:
b7:fe:4e:53:37:c5:1f:cf:74:21:b3:98:60:67:f9:
17:e2:4b:8e:f8:26:9a:60:ee:4f:3b:3a:eb:f5:fc:
c5:9f:7f:05:31:10:f9:3b:3f:ea:f8:27:86:46:fd:
e7:84:ef:ec:9c:5e:08:4a:72:51:1c:c9:f3:ad:0b:
e2:c4:f1:43:89:15:44:41:25:18:7a:ee:5b:17:10:
80:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BC:14:5A:FE:14:5D:4A:68:24:02:1C:E2:9E:24:3E:58:DE:F2:B0
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XbwUWv4UXUpoJAIc4p4kPlje8rA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.186.0/24
Signature Algorithm: sha256WithRSAEncryption
39:15:7a:94:f6:2b:c2:af:ee:9e:b7:09:af:d0:33:d6:c6:38:
33:32:1e:c2:b8:0c:48:da:39:b2:6d:b4:54:4e:12:3d:24:8f:
c3:f2:ad:c5:c5:a7:1c:c8:16:8a:53:f9:78:90:09:9d:0b:5d:
a5:e0:02:f0:1a:9c:61:32:2c:2f:ff:8d:25:73:a1:8d:b5:0c:
fc:c9:d1:e5:6e:bc:21:40:5f:f9:83:40:ec:57:a5:17:f0:0f:
a3:09:c8:bc:5d:18:67:72:6b:1c:ac:a2:0d:da:97:9b:42:ef:
d7:8e:cb:b2:9a:b3:9f:b1:52:06:48:bc:63:96:89:b2:8f:92:
8c:67:9f:72:59:f0:f5:db:ee:e8:d9:3d:3f:76:0c:57:5d:94:
aa:67:de:27:69:05:39:d5:5b:39:08:15:81:66:57:cf:a9:5d:
c2:59:e6:6e:92:27:b5:08:b5:e8:b4:79:64:dd:f3:15:0e:9d:
72:15:61:f1:f5:ad:21:9e:03:18:8a:72:09:8c:f9:68:52:c2:
cf:84:d7:2d:c6:04:48:cb:d7:92:94:f6:df:53:df:29:4d:b9:
94:51:61:eb:4d:06:fd:99:0f:9b:c9:99:53:bb:e4:47:6e:1b:
b4:f3:f9:28:17:ec:d0:5e:d4:5e:65:86:47:94:c4:d1:ae:03:
5c:4d:9e:77
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDzEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU2NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVEQkMxNDVBRkUxNDVE
NEE2ODI0MDIxQ0UyOUUyNDNFNThERUYyQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJAiGkMs9fQavVCEQq1QsvHaIVKHXe4DS0YBPqXtVSCTs5E/01
dxNKGlbS3KGJ0BQSGrpIcBrnz8ssu9i8lUTlRIgutHlwo/ZhsG9D0tV0ktoM/CuS
1ztCMUBSap4XqFz6wZ6hlisZ4hI5pQViYx1n+8Z/KhjKwnaV+qMLJZLwRVyqh1Jv
MAPuYPdPin6PMTR/uq2PEFzfBlcArhg2NbALnZ5XQCZA9vrbyl1vuvcf91dLBbf+
TlM3xR/PdCGzmGBn+RfiS474Jppg7k87Ouv1/MWffwUxEPk7P+r4J4ZG/eeE7+yc
XghKclEcyfOtC+LE8UOJFURBJRh67lsXEIDxAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUXbwUWv4UXUpoJAIc4p4kPlje8rAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9YYndVV3Y0VVhVcG9KQUljNHA0
a1BsamU4ckEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vK6
MA0GCSqGSIb3DQEBCwUAA4IBAQA5FXqU9ivCr+6etwmv0DPWxjgzMh7CuAxI2jmy
bbRUThI9JI/D8q3FxaccyBaKU/l4kAmdC12l4ALwGpxhMiwv/40lc6GNtQz8ydHl
brwhQF/5g0DsV6UX8A+jCci8XRhncmscrKIN2pebQu/XjsuymrOfsVIGSLxjlomy
j5KMZ59yWfD12+7o2T0/dgxXXZSqZ94naQU51Vs5CBWBZlfPqV3CWeZukie1CLXo
tHlk3fMVDp1yFWHx9a0hngMYinIJjPloUsLPhNctxgRIy9eSlPbfU98pTbmUUWHr
TQb9mQ+byZlTu+RHbhu08/koF+zQXtReZYZHlMTRrgNcTZ53
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org