Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/af6WcJzZFRHqrtdYyA0n8yr7Hlg.roa
File: af6WcJzZFRHqrtdYyA0n8yr7Hlg.roa (raw, json)
Hash identifier: 6HCQCBfbu/gwTyI69fI1G7kmL88LFhg6JRk9IEXU8Rg=
Subject key identifier: 69:FE:96:70:9C:D9:15:11:EA:AE:D7:58:C8:0D:27:F3:2A:FB:1E:58
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F37
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/af6WcJzZFRHqrtdYyA0n8yr7Hlg.roa
Signing time: Fri 01 Sep 2023 08:56:46 +0000
ROA not before: Fri 01 Sep 2023 08:56:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 221.120.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3895 (0xf37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:46 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=69FE96709CD91511EAAED758C80D27F32AFB1E58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:86:c0:76:8e:a2:a0:be:47:ed:85:55:86:
7c:f3:14:26:59:ff:29:4f:7f:56:3f:f2:44:e4:eb:
a1:c1:8a:ef:95:c6:ff:c5:b6:77:23:54:7e:60:a3:
cd:eb:81:d7:1d:2b:9d:2f:8a:78:1c:b8:21:10:25:
9e:48:58:a6:0d:76:16:4f:75:f1:fa:19:2c:bb:ec:
4d:44:36:2b:e4:fa:9a:1a:77:95:83:29:f7:d4:2c:
46:f7:8e:e3:9b:05:c8:d0:63:71:fe:ba:25:bb:43:
e7:04:ae:44:43:d9:0f:6d:c5:5c:b4:b0:98:55:58:
97:51:07:3f:7f:30:06:3c:95:cb:7e:4d:4b:06:e6:
4e:8c:50:87:bd:5a:3f:ef:12:66:8f:30:58:b3:fb:
af:87:82:1f:84:b0:a9:5e:bf:35:f6:70:1b:50:35:
e5:19:0c:7f:1d:55:73:7d:dd:3c:05:5d:f2:95:55:
f1:0a:1e:8b:7b:f8:96:3a:a4:42:b0:d1:2e:f9:0b:
e2:37:ed:e6:94:74:be:ce:c7:d3:64:62:c0:28:5e:
19:60:e8:1a:93:7d:b2:20:10:94:6f:ed:3a:13:0a:
2c:1a:93:fd:ab:69:79:6b:10:aa:ca:ce:79:ee:db:
45:fd:95:a4:71:91:ee:73:25:58:d9:f5:f6:88:ba:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FE:96:70:9C:D9:15:11:EA:AE:D7:58:C8:0D:27:F3:2A:FB:1E:58
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/af6WcJzZFRHqrtdYyA0n8yr7Hlg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
221.120.21.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a3:11:09:12:18:78:bf:4f:20:9d:f9:f8:98:d1:de:9d:7b:
91:f5:2d:76:f4:6e:05:de:d8:b5:c9:b5:b3:29:a5:f3:2b:a6:
fa:ef:57:e4:b9:3e:a4:37:a7:34:8c:6a:8f:c0:eb:24:d5:6f:
51:85:78:3c:29:94:73:9b:4e:71:31:17:a5:e2:e4:c2:05:ed:
fc:d1:fe:e2:85:b7:6a:32:2a:8a:8f:f8:cd:ed:64:2a:7a:f8:
db:5a:fa:b9:8d:ca:aa:bb:58:8d:5e:45:14:d0:4c:00:b5:91:
74:81:ae:d1:a1:8c:33:ec:a1:30:4b:5c:ca:5e:b7:e4:65:18:
cb:f4:dd:09:ed:dd:76:b5:07:fc:3a:f5:0e:40:cf:49:cc:09:
df:04:35:f0:88:f3:22:07:6d:2b:62:cc:05:13:ce:6c:68:82:
3a:93:fc:2c:57:70:5e:b1:6d:1a:d9:07:04:04:e9:28:d3:c6:
06:4a:76:d7:e0:56:dc:06:de:93:6e:81:19:86:b7:25:38:46:
5a:39:c1:6a:e3:47:ba:f5:93:87:fb:60:a2:87:48:26:ac:0d:
16:70:27:4d:9a:5c:e5:b7:07:3b:45:26:e9:d4:b0:dd:5c:d1:
06:00:58:5a:55:81:aa:8d:08:d6:58:73:dd:ca:d5:5b:df:42:
3c:c8:9c:4c
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU2NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY5RkU5NjcwOUNEOTE1
MTFFQUFFRDc1OEM4MEQyN0YzMkFGQjFFNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9FYbAdo6ioL5H7YVVhnzzFCZZ/ylPf1Y/8kTk66HBiu+Vxv/F
tncjVH5go83rgdcdK50vingcuCEQJZ5IWKYNdhZPdfH6GSy77E1ENivk+poad5WD
KffULEb3juObBcjQY3H+uiW7Q+cErkRD2Q9txVy0sJhVWJdRBz9/MAY8lct+TUsG
5k6MUIe9Wj/vEmaPMFiz+6+Hgh+EsKlevzX2cBtQNeUZDH8dVXN93TwFXfKVVfEK
Hot7+JY6pEKw0S75C+I37eaUdL7Ox9NkYsAoXhlg6BqTfbIgEJRv7ToTCiwak/2r
aXlrEKrKznnu20X9laRxke5zJVjZ9faIul9vAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUaf6WcJzZFRHqrtdYyA0n8yr7HlgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9hZjZXY0p6WkZSSHFydGRZeUEw
bjh5cjdIbGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3XgV
MA0GCSqGSIb3DQEBCwUAA4IBAQCIoxEJEhh4v08gnfn4mNHenXuR9S129G4F3ti1
ybWzKaXzK6b671fkuT6kN6c0jGqPwOsk1W9RhXg8KZRzm05xMRel4uTCBe380f7i
hbdqMiqKj/jN7WQqevjbWvq5jcqqu1iNXkUU0EwAtZF0ga7RoYwz7KEwS1zKXrfk
ZRjL9N0J7d12tQf8OvUOQM9JzAnfBDXwiPMiB20rYswFE85saII6k/wsV3BesW0a
2QcEBOko08YGSnbX4FbcBt6TboEZhrclOEZaOcFq40e69ZOH+2Cih0gmrA0WcCdN
mlzltwc7RSbp1LDdXNEGAFhaVYGqjQjWWHPdytVb30I8yJxM
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org