Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/dHjLvUHqR_bq7XBA6DG63oyEsmQ.roa
File: dHjLvUHqR_bq7XBA6DG63oyEsmQ.roa (raw, json)
Hash identifier: +auxinY6ucGy2yqy2l56Kwv/hSJl3TvWSWuU0O3llv8=
Subject key identifier: 74:78:CB:BD:41:EA:47:F6:EA:ED:70:40:E8:31:BA:DE:8C:84:B2:64
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F6B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/dHjLvUHqR_bq7XBA6DG63oyEsmQ.roa
Signing time: Fri 01 Sep 2023 08:57:03 +0000
ROA not before: Fri 01 Sep 2023 08:57:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9680
IP address blocks: 202.39.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3947 (0xf6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7478CBBD41EA47F6EAED7040E831BADE8C84B264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:c8:86:be:1e:6b:2a:7b:e2:a3:6a:90:c6:
99:9e:71:59:a9:2a:a5:17:bb:83:da:ff:71:22:39:
7c:78:a5:35:7c:0d:62:cb:bb:84:f5:31:4d:d3:66:
91:09:66:4f:8b:76:48:3e:f9:1d:44:51:2c:99:a8:
18:69:5f:fc:36:05:f6:08:eb:6f:69:7b:53:9a:36:
33:a4:b4:7d:f3:7b:80:9b:a4:12:51:83:81:8b:10:
d6:b6:ab:4a:2b:bd:3e:ff:df:86:5c:00:07:ea:48:
90:8a:df:f4:45:b2:15:da:50:57:ec:4a:27:c1:92:
92:75:13:aa:a2:3c:f2:38:11:e5:33:3f:a0:4a:b1:
e4:d7:cd:ff:df:9c:14:59:ba:3f:cb:27:c5:1f:4b:
07:32:9b:51:cd:c7:8c:c8:de:3c:92:4d:4f:d3:c4:
7b:5d:45:a1:ba:42:2b:83:c9:50:5e:c5:b3:13:1f:
b7:dd:1b:f4:1c:94:8b:92:1b:5c:43:96:87:b8:31:
09:e5:90:5a:d2:0e:c1:8a:66:f5:e1:0b:76:a9:1c:
3a:29:e6:9c:89:f3:5e:72:f1:b0:02:72:45:c7:c5:
16:3a:ad:20:b8:11:be:e8:ce:3f:f6:fb:87:56:01:
e1:b0:a0:be:43:44:7b:b8:c4:20:9c:21:91:ff:ee:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:78:CB:BD:41:EA:47:F6:EA:ED:70:40:E8:31:BA:DE:8C:84:B2:64
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/dHjLvUHqR_bq7XBA6DG63oyEsmQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.80.0/20
Signature Algorithm: sha256WithRSAEncryption
c8:d1:6e:3d:8b:dc:1a:99:67:ef:a6:49:ec:ca:14:a4:ec:46:
63:07:1a:89:93:9e:44:8d:f8:a8:cf:dc:6c:61:f4:f9:67:ee:
87:71:21:75:ae:f4:c6:95:7a:c0:f2:79:a3:07:ef:67:6a:ce:
dd:90:f4:b0:54:7a:8d:da:2f:85:58:d6:b4:85:07:78:fb:d5:
5a:f2:09:ab:32:1e:4a:36:ac:7c:05:10:08:10:82:af:a1:dd:
95:fb:5e:83:60:fb:0f:13:29:59:0e:86:df:99:c3:ec:7c:91:
98:c6:11:72:5f:d2:15:b2:ff:62:e9:74:f7:21:e9:c1:e1:d9:
71:a0:42:8d:a5:4b:9d:dd:76:2d:f0:1e:58:59:c8:2f:b7:a5:
37:ec:9c:f1:e1:09:3e:99:7a:84:05:06:b1:b5:43:15:82:64:
d9:cb:a8:27:5a:0e:ca:0f:d5:28:00:a7:09:ff:15:9e:d1:97:
c7:a0:bb:48:32:ba:0b:3c:eb:eb:02:03:10:12:46:65:56:cc:
87:70:8f:2b:62:af:77:b0:95:bb:85:6d:fc:eb:41:aa:01:e0:
b1:a1:9b:d8:a0:50:aa:8e:90:6b:85:a4:43:e0:02:34:88:fa:
2f:ea:78:3e:20:4e:4c:e6:1d:b3:ff:00:7a:d5:a8:7c:a7:10:
76:5b:8b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org