Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ZE1rZdSFJVb8WhxB9_rMJ4z7cnM.roa
File: ZE1rZdSFJVb8WhxB9_rMJ4z7cnM.roa (raw, json)
Hash identifier: WJqdLjdIX0G2OAU5WH8HCCgz5I5uaFphqqVGVv5nd+w=
Subject key identifier: 64:4D:6B:65:D4:85:25:56:FC:5A:1C:41:F7:FA:CC:27:8C:FB:72:73
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F8F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZE1rZdSFJVb8WhxB9_rMJ4z7cnM.roa
Signing time: Fri 01 Sep 2023 08:57:13 +0000
ROA not before: Fri 01 Sep 2023 08:57:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 21859
IP address blocks: 210.61.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3983 (0xf8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=644D6B65D4852556FC5A1C41F7FACC278CFB7273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:a3:7d:95:53:ff:8f:95:0d:ae:c8:c7:bf:
e4:99:8d:2b:03:35:2b:1f:ad:eb:c5:c3:a2:60:a6:
0b:e9:22:f1:97:2b:f7:6e:58:a0:3f:c7:32:7e:d6:
af:9a:fc:4f:ad:e7:86:a0:1a:f5:fe:d4:fd:b0:d2:
f1:aa:0a:7a:89:f3:a0:b3:8d:35:8d:41:2e:92:cf:
69:81:e7:31:a5:64:c1:3f:0b:08:fd:26:01:d5:24:
ab:f8:6a:4a:1c:11:2f:86:9c:36:38:4f:fb:15:58:
0f:78:84:db:80:6a:5a:d7:1d:8b:78:68:71:8e:1a:
a1:bb:f9:7c:e2:f1:56:82:07:e8:4d:75:88:d1:11:
e4:00:05:e7:1c:36:00:e0:93:2e:84:11:ee:8e:48:
c0:b1:de:4f:fb:64:f0:02:15:32:ce:65:56:04:99:
46:fc:de:0a:4d:f0:b5:7f:1c:e0:ce:9e:7c:24:57:
7a:77:a9:56:e3:f0:2d:7c:19:60:ba:0b:3a:30:ee:
0c:50:58:87:54:13:c3:76:6d:d2:65:6f:a1:15:3f:
a2:d8:8b:0b:5d:55:ac:09:b0:86:fc:9f:65:62:93:
29:3e:10:3c:ec:0e:42:e2:9a:5e:01:12:84:de:15:
30:04:f4:50:99:75:ba:29:93:a7:8a:93:4b:b2:da:
77:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4D:6B:65:D4:85:25:56:FC:5A:1C:41:F7:FA:CC:27:8C:FB:72:73
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ZE1rZdSFJVb8WhxB9_rMJ4z7cnM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.104.0/24
Signature Algorithm: sha256WithRSAEncryption
96:01:59:04:ad:b1:b6:80:0b:0d:b1:24:87:ef:24:e4:70:d9:
26:28:a8:8b:b0:51:b5:81:56:bf:54:99:ae:ec:d5:2c:5a:a5:
51:19:16:c2:0c:02:3f:5b:71:55:07:8f:99:ba:9b:e6:95:97:
56:a7:c1:5e:3b:95:ce:5a:35:ea:c1:b7:6a:1f:ab:ac:69:d7:
a5:41:17:51:90:14:2f:18:d3:26:6c:70:d4:91:b8:9a:46:53:
8d:02:bf:9c:fb:94:2d:c2:47:6e:e9:07:02:72:2d:1f:61:45:
ab:29:24:c2:f5:c0:9d:37:eb:18:0b:82:cc:70:27:4f:bb:ca:
60:50:8a:66:cc:e1:ce:52:c4:f6:41:dc:58:d1:b6:11:7c:96:
59:c4:ff:76:28:ff:d5:87:4c:10:e3:8b:2e:fc:fd:39:5d:9b:
15:d2:b9:3b:6c:ab:40:cd:37:66:d7:22:81:a9:60:0d:c7:4d:
0b:6e:ec:99:4b:a0:1d:00:15:80:39:9a:03:01:c8:b0:85:18:
19:d0:81:45:5f:79:c3:4c:9c:c1:70:86:f1:63:32:09:63:e3:
76:bc:35:1d:fd:bb:f9:1e:6f:02:08:4a:a9:96:72:0a:f7:a7:
8f:23:92:af:87:50:d3:9b:25:c7:d3:e6:1b:3a:b4:23:5b:6d:
28:0f:9e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org