Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/YD4lOaeMpAoKLAufUS2bijFULEs.roa
File: YD4lOaeMpAoKLAufUS2bijFULEs.roa (raw, json)
Hash identifier: RIBgxNmiPy3jJ5B54g1hiNTuQnTK81n2VdYskNK8AYo=
Subject key identifier: 60:3E:25:39:A7:8C:A4:0A:0A:2C:0B:9F:51:2D:9B:8A:31:54:2C:4B
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F2E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/YD4lOaeMpAoKLAufUS2bijFULEs.roa
Signing time: Fri 01 Sep 2023 08:56:42 +0000
ROA not before: Fri 01 Sep 2023 08:56:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 198949
IP address blocks: 210.242.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3886 (0xf2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=603E2539A78CA40A0A2C0B9F512D9B8A31542C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:a3:7e:26:f4:32:ba:a2:b2:53:d7:0a:5b:
e5:46:54:70:e0:13:cf:e2:26:d5:e6:aa:92:1e:42:
03:0c:45:3f:51:cf:c6:a5:17:18:93:02:72:60:6b:
6d:81:25:3d:01:3a:2f:dc:51:ad:15:6a:d5:4e:93:
a4:75:3c:0e:63:68:36:aa:78:fd:36:dd:a5:25:7f:
de:e6:de:4b:15:ea:01:20:59:30:8f:b4:66:96:b9:
46:70:67:77:86:00:0c:20:d4:d2:99:04:93:df:be:
a1:f0:4f:05:5d:f5:63:7b:ef:25:cf:ec:c2:48:0c:
84:26:c2:6e:a4:57:93:90:50:39:e7:83:00:3e:6f:
eb:ee:bd:5a:d9:8c:77:0f:c5:8b:ce:53:6d:77:1a:
6f:55:33:04:02:ae:bd:1d:87:da:19:eb:b8:ce:84:
55:f5:79:0e:a1:42:b4:f8:0d:84:d2:e1:cb:8c:5c:
85:aa:d5:80:e2:e0:6f:3e:a5:b7:05:91:48:88:cf:
df:e6:a5:42:99:19:74:2a:74:ae:d1:df:67:50:ff:
82:cd:9f:f9:cc:ab:1e:7c:d4:cb:a4:d0:20:ec:fa:
14:20:30:a9:ed:b8:f7:9e:4c:af:92:a3:7e:c8:93:
c1:28:c6:6c:b3:a2:98:1c:b7:7f:99:31:70:f0:32:
ea:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3E:25:39:A7:8C:A4:0A:0A:2C:0B:9F:51:2D:9B:8A:31:54:2C:4B
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/YD4lOaeMpAoKLAufUS2bijFULEs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.118.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a3:e7:00:06:7d:6e:0c:64:b9:f9:b7:ba:8e:b0:80:fb:6d:
6f:2e:c6:c2:44:d2:96:14:0d:20:e5:d7:3c:1a:8f:c5:c7:b0:
49:0d:78:a3:cf:2a:12:df:6f:81:3b:b2:5a:e2:c9:9e:1c:fb:
3f:02:5d:30:fb:45:87:33:cb:b7:b2:a0:df:08:a0:69:11:bb:
07:ab:52:b7:64:70:a6:7f:b9:30:62:d0:06:58:63:ed:45:01:
d7:7c:19:33:a6:04:97:f7:b1:74:7e:72:93:02:85:8a:2b:ea:
39:d3:3b:30:be:1f:84:6e:65:33:80:24:55:ca:1f:72:4d:ec:
17:51:61:76:62:f8:37:b6:50:35:02:7a:3c:0c:e1:f0:db:44:
c0:d0:50:c5:b0:ce:e6:6a:c1:21:28:7d:7d:d5:30:40:43:f7:
4a:85:28:25:5c:ec:36:90:6f:a3:de:38:6e:7d:fa:dc:b5:c0:
52:5b:29:b9:c1:08:0e:c6:d3:d8:3d:94:d4:86:39:a9:44:92:
8a:70:ea:77:db:31:b1:27:a8:10:cc:d0:e0:dc:70:19:e7:8e:
f6:ca:fd:5a:0a:68:a6:8a:89:0a:5c:2f:4a:68:d1:4c:53:91:
77:e8:23:ab:b2:d1:a1:8e:48:98:12:97:5b:6b:f2:86:e2:96:
8a:26:c4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org