Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/XppCQ4SvD07NfU1SEWAXRLEbPis.roa
File: XppCQ4SvD07NfU1SEWAXRLEbPis.roa (raw, json)
Hash identifier: pdO6ho6HUIdeBDsVC5KmjTK53thQaX4w2nrGfvCCyus=
Subject key identifier: 5E:9A:42:43:84:AF:0F:4E:CD:7D:4D:52:11:60:17:44:B1:1B:3E:2B
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F4B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XppCQ4SvD07NfU1SEWAXRLEbPis.roa
Signing time: Fri 01 Sep 2023 08:56:53 +0000
ROA not before: Fri 01 Sep 2023 08:56:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9505
IP address blocks: 203.160.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3915 (0xf4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5E9A424384AF0F4ECD7D4D5211601744B11B3E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:ed:22:a5:94:ed:19:72:fa:b8:47:c8:6c:
4d:c9:25:7c:3f:2d:97:e7:b0:97:17:5f:a0:ac:9e:
44:fa:10:15:39:26:74:08:aa:7b:ae:1e:a0:72:ef:
49:a5:71:b4:d4:d8:cc:1e:06:c7:b6:67:6c:b8:91:
71:55:d6:93:32:c4:a2:48:05:c3:42:2d:75:22:f5:
e5:be:03:71:a2:50:b4:35:74:3e:aa:ee:23:b9:6e:
a9:bb:db:81:79:be:3e:34:fa:59:67:6f:93:10:e0:
d4:56:8e:cb:2d:0c:ba:d3:92:13:ac:be:04:30:2f:
c3:ee:26:24:55:64:16:79:72:b9:ab:09:11:ac:0d:
e5:8a:38:e3:1d:bb:0a:1a:1d:a3:c3:56:7c:1b:c5:
ce:c8:5e:fb:9e:17:7a:06:e2:90:31:d1:bb:92:cb:
96:72:c6:13:77:b7:ed:81:37:d8:d5:5d:f4:ec:d6:
14:3e:30:9b:31:e7:f4:24:c0:6a:52:88:47:93:25:
8d:cb:7a:51:1e:06:97:82:28:bd:1b:1a:b9:de:fa:
80:36:36:17:f4:d7:cd:ad:68:73:6e:d4:11:cc:c2:
e5:fd:90:17:81:aa:63:51:42:0e:74:a3:0f:81:8c:
de:13:44:72:8f:7b:31:c4:69:0a:3c:21:74:23:55:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9A:42:43:84:AF:0F:4E:CD:7D:4D:52:11:60:17:44:B1:1B:3E:2B
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XppCQ4SvD07NfU1SEWAXRLEbPis.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.160.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:e7:30:45:24:ef:87:40:07:c4:a9:e3:24:be:39:42:76:36:
f9:b8:77:d5:a2:ce:ba:37:b0:07:9c:32:3a:f7:98:c1:74:c2:
68:f3:cc:9a:06:5c:d7:92:51:04:03:a6:d8:61:53:a3:97:53:
fe:c1:4b:90:1d:eb:54:7f:23:23:2b:ca:3c:1b:8e:79:d4:45:
dc:c4:d6:56:4d:ba:f1:37:45:b7:ab:6c:21:2d:cf:1e:3f:51:
40:b4:cb:ea:d7:0e:e8:b8:84:94:d7:28:90:7c:30:a6:09:ea:
8f:83:0b:3b:85:ab:32:c9:95:e0:3d:fd:3a:fd:e7:a1:20:3e:
0a:53:22:c4:54:fb:aa:c3:50:6b:fd:4a:54:b9:39:92:68:52:
7f:1b:0a:9b:e1:85:5e:1f:39:f4:71:d8:1d:b6:c4:28:b4:49:
44:c4:31:57:3f:a1:e6:45:82:3c:3a:10:39:96:36:64:00:77:
b2:69:ae:fa:51:ee:42:fe:05:33:9c:70:33:b8:32:ce:88:5e:
ff:83:75:2c:d7:6d:a8:26:ef:c5:72:2e:a2:80:da:8e:08:4c:
4d:49:7a:fe:4b:40:55:22:b1:a9:42:84:ff:62:c0:3e:d9:ac:
05:c6:15:2b:00:98:40:f1:e0:54:fd:0b:bc:ea:ab:ec:99:d4:
6c:9a:0e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org