Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ceWq2FJi0AFiQfVQonBbW21x6QM.roa
File: ceWq2FJi0AFiQfVQonBbW21x6QM.roa (raw, json)
Hash identifier: njwBUxGdh5XfWWBtDuWswyYA1/UanR31ni8ln9JbKB0=
Subject key identifier: 71:E5:AA:D8:52:62:D0:01:62:41:F5:50:A2:70:5B:5B:6D:71:E9:03
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F55
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ceWq2FJi0AFiQfVQonBbW21x6QM.roa
Signing time: Fri 01 Sep 2023 08:56:57 +0000
ROA not before: Fri 01 Sep 2023 08:56:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 142005
IP address blocks: 210.61.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3925 (0xf55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=71E5AAD85262D0016241F550A2705B5B6D71E903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:6c:c7:fa:4a:c9:fc:60:39:e4:e7:24:91:
da:f6:91:d5:86:86:99:b7:1d:58:7e:07:36:fb:17:
56:23:03:a3:8f:d1:11:06:0a:32:16:ee:a6:1f:66:
64:c7:18:11:64:ea:c7:ad:b6:9c:c8:f3:ad:02:42:
35:7f:0b:d8:3d:88:d0:1f:4a:95:a0:fb:83:41:0a:
64:ae:60:a7:52:b2:9a:60:89:12:c1:af:5b:b8:e3:
83:8f:6a:e1:13:63:12:75:79:f8:92:bf:19:b1:b5:
cc:92:0e:f5:2c:ba:bf:b6:74:2a:4d:d5:5b:f5:4e:
51:34:6b:6e:0a:d7:44:a9:b6:48:45:9b:15:9f:5b:
99:50:4c:42:ff:fe:7f:46:61:e3:a7:b5:4c:88:10:
51:27:f8:ad:e5:41:b6:d8:c6:28:8f:aa:9b:cf:c0:
62:8e:7c:22:01:76:0e:14:59:a9:85:7c:cb:4f:0a:
fc:f3:85:9c:eb:04:e7:f1:ad:d9:26:1a:ad:02:44:
30:9c:37:f3:85:22:d0:37:99:06:d3:e7:f8:b6:1b:
69:60:6b:7c:e8:6c:fe:a5:70:3c:50:fd:5b:62:1b:
c9:c0:93:21:ed:3f:67:21:cf:c5:3f:28:a3:d3:18:
b2:8f:ff:0a:15:7c:8e:26:08:61:c2:4a:85:57:fa:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E5:AA:D8:52:62:D0:01:62:41:F5:50:A2:70:5B:5B:6D:71:E9:03
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ceWq2FJi0AFiQfVQonBbW21x6QM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.114.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f9:bb:11:69:e1:27:66:70:21:b0:e3:43:ff:80:3f:3e:45:
d2:39:94:5b:fd:ce:66:46:37:14:d0:f6:12:99:d8:22:65:d3:
94:76:f3:7e:a1:f5:45:eb:ab:33:07:1c:93:9f:fd:bb:bc:9d:
ab:91:6e:74:65:da:f8:31:ae:0e:81:b9:dc:8a:ab:51:50:59:
2c:a7:a9:8e:e7:b0:42:7e:a5:7b:16:c6:9d:1a:47:45:9e:9c:
17:fd:cf:b5:8f:e3:2e:1f:85:65:11:e6:f5:0c:ab:bc:e3:f9:
78:ef:84:21:c6:55:ff:cf:eb:eb:fa:3a:dd:e7:ea:87:a0:2a:
7f:59:9d:26:c2:cb:62:43:53:62:23:f7:56:e0:2b:23:80:41:
9b:7e:ed:c4:c7:1a:4f:5d:70:52:bc:28:6e:2a:45:15:e8:46:
45:a6:f3:28:e7:fe:2f:dd:8c:93:45:c6:99:cf:5e:0b:8b:3c:
a0:17:49:dd:a3:b6:51:8f:2c:80:9a:52:01:b9:33:26:c4:f7:
81:ea:5c:36:b3:22:c9:fa:26:36:a1:ef:9d:81:b7:28:53:91:
96:9b:f5:ec:7d:74:54:c6:b0:36:fa:f1:dd:27:f2:c4:fd:5a:
20:f6:e5:ec:e0:53:e3:7a:bf:73:95:b5:fd:8d:8a:1d:64:e4:
c9:00:ec:52
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICD1UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU2NTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcxRTVBQUQ4NTI2MkQw
MDE2MjQxRjU1MEEyNzA1QjVCNkQ3MUU5MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9J2zH+krJ/GA55Ockkdr2kdWGhpm3HVh+Bzb7F1YjA6OP0REG
CjIW7qYfZmTHGBFk6settpzI860CQjV/C9g9iNAfSpWg+4NBCmSuYKdSsppgiRLB
r1u444OPauETYxJ1efiSvxmxtcySDvUsur+2dCpN1Vv1TlE0a24K10SptkhFmxWf
W5lQTEL//n9GYeOntUyIEFEn+K3lQbbYxiiPqpvPwGKOfCIBdg4UWamFfMtPCvzz
hZzrBOfxrdkmGq0CRDCcN/OFItA3mQbT5/i2G2lga3zobP6lcDxQ/VtiG8nAkyHt
P2chz8U/KKPTGLKP/woVfI4mCGHCSoVX+l5zAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUceWq2FJi0AFiQfVQonBbW21x6QMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9jZVdxMkZKaTBBRmlRZlZRb25C
YlcyMXg2UU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j1y
MA0GCSqGSIb3DQEBCwUAA4IBAQCJ+bsRaeEnZnAhsOND/4A/PkXSOZRb/c5mRjcU
0PYSmdgiZdOUdvN+ofVF66szBxyTn/27vJ2rkW50Zdr4Ma4OgbnciqtRUFksp6mO
57BCfqV7FsadGkdFnpwX/c+1j+MuH4VlEeb1DKu84/l474QhxlX/z+vr+jrd5+qH
oCp/WZ0mwstiQ1NiI/dW4CsjgEGbfu3ExxpPXXBSvChuKkUV6EZFpvMo5/4v3YyT
RcaZz14LizygF0ndo7ZRjyyAmlIBuTMmxPeB6lw2syLJ+iY2oe+dgbcoU5GWm/Xs
fXRUxrA2+vHdJ/LE/Vog9uXs4FPjer9zlbX9jYodZOTJAOxS
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org