Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/bvjA7cHco1zL94U35Arr1csZa6Q.roa
File: bvjA7cHco1zL94U35Arr1csZa6Q.roa (raw, json)
Hash identifier: MEj61SdwLJ4zx31tGyC/jjkJoRqOBOmGljkST3haSQo=
Subject key identifier: 6E:F8:C0:ED:C1:DC:A3:5C:CB:F7:85:37:E4:0A:EB:D5:CB:19:6B:A4
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F77
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bvjA7cHco1zL94U35Arr1csZa6Q.roa
Signing time: Fri 01 Sep 2023 08:57:07 +0000
ROA not before: Fri 01 Sep 2023 08:57:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9505
IP address blocks: 220.128.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3959 (0xf77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6EF8C0EDC1DCA35CCBF78537E40AEBD5CB196BA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:18:49:ca:40:2c:27:fa:45:ae:e8:4f:7d:
ec:08:85:ea:3f:68:32:5c:2a:e3:5c:bc:b0:1e:95:
6e:e3:f9:19:cf:20:90:3c:ff:32:39:76:b3:72:2b:
4e:8e:d3:cb:88:cd:4c:40:50:47:41:d5:7e:34:40:
c3:57:fb:4e:4a:78:b7:f7:cf:f4:e7:d9:4c:84:a6:
6d:ba:15:f9:7e:60:4e:95:83:cf:65:62:05:75:3e:
51:39:88:42:0f:dd:83:97:6b:d2:b7:30:2e:c5:8e:
e3:06:88:c7:7c:40:a8:86:ae:1e:e2:e3:01:b0:ee:
dd:98:7c:e4:5e:87:0e:ea:23:95:5b:96:5c:e5:18:
ca:f7:33:33:b7:ec:82:57:ca:37:81:51:47:dc:b2:
d2:92:bf:f6:11:0d:b6:ea:1e:26:f1:24:72:da:bc:
e8:71:ec:7f:1f:7a:39:4c:83:81:b6:c3:9e:5e:17:
7a:48:4d:1c:4b:d2:5c:ca:54:9f:13:4a:7f:86:e7:
78:fa:0c:22:3d:fe:f5:32:a0:c1:14:57:1e:a8:1c:
e1:3b:50:4b:49:f2:c1:fc:e8:37:96:94:2a:f7:46:
8e:65:1d:23:fb:21:7c:1d:bc:97:e5:bc:95:74:3d:
09:a0:f1:37:c9:aa:f9:f3:b7:0c:e0:ac:e8:53:5d:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F8:C0:ED:C1:DC:A3:5C:CB:F7:85:37:E4:0A:EB:D5:CB:19:6B:A4
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bvjA7cHco1zL94U35Arr1csZa6Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.48.0/21
Signature Algorithm: sha256WithRSAEncryption
77:2b:a2:ce:ab:77:71:9c:84:52:3a:f9:11:fc:f4:1c:61:ee:
b7:9d:66:a7:7c:69:d6:44:4e:07:be:84:37:c5:0e:30:32:a6:
1f:05:54:3c:a1:35:65:2c:8c:f1:f3:8a:65:59:04:d8:05:98:
00:e9:68:66:63:93:ad:8b:42:dd:4e:c9:4e:a5:3b:c9:46:27:
02:3e:88:ca:4d:11:71:00:8e:b3:ad:17:76:35:f0:08:18:61:
35:cc:53:4b:38:ff:2e:5a:65:30:f5:46:e4:b0:a1:13:14:35:
56:a3:f0:1b:a2:5a:35:8a:36:da:82:6b:4d:18:5b:1d:03:b1:
32:b6:ec:e0:90:0b:5f:e3:52:01:8f:f9:25:2b:4e:3c:cb:01:
ae:f6:d8:05:9d:f6:90:db:e6:b7:96:b1:71:e4:64:98:3f:8e:
1c:20:de:23:3e:c3:74:54:a5:f4:61:8b:1d:01:81:4d:18:f1:
f8:95:c1:2c:ad:fb:9b:da:f5:c3:c4:60:c4:aa:5d:41:bc:9b:
07:77:e4:37:f8:d0:67:bc:9f:bd:34:0a:2f:ec:69:20:02:61:
4e:83:89:a0:85:9c:7d:f1:32:f1:66:d4:f8:76:dc:f1:da:4c:
de:68:e1:ea:d4:28:66:3d:49:32:e7:21:07:68:c2:88:7a:cf:
28:c8:a8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org