Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/e1LYsugPOQP539S87RwtrSOZntU.roa
File: e1LYsugPOQP539S87RwtrSOZntU.roa (raw, json)
Hash identifier: ppE3zpWSu2QFGTn2l2ysZ2eIpnY8WnaAowLDjRuUtxs=
Subject key identifier: 7B:52:D8:B2:E8:0F:39:03:F9:DF:D4:BC:ED:1C:2D:AD:23:99:9E:D5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F48
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/e1LYsugPOQP539S87RwtrSOZntU.roa
Signing time: Fri 01 Sep 2023 08:56:52 +0000
ROA not before: Fri 01 Sep 2023 08:56:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 202.39.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3912 (0xf48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7B52D8B2E80F3903F9DFD4BCED1C2DAD23999ED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:53:35:29:8e:1d:a2:a2:99:54:bd:5e:08:38:
c2:72:7c:95:81:9f:63:bb:60:cb:83:de:95:11:33:
b9:28:eb:85:49:c6:e8:4f:c2:01:40:74:24:c4:f4:
73:7d:65:47:d0:0c:f6:d9:86:de:d2:1d:b7:64:3a:
bc:86:da:20:4f:ef:4f:71:87:3b:35:84:91:ad:c7:
a6:62:6f:54:c6:ee:78:8f:53:74:dd:94:25:9d:22:
55:0a:e8:3d:d3:72:62:23:a7:97:80:95:0d:96:f4:
bd:50:33:53:52:3f:4e:74:f3:02:94:77:9b:66:b8:
4e:aa:06:24:4c:e4:1e:d6:d8:cd:e1:6c:fc:f5:20:
7c:fb:f5:32:4a:19:5f:4c:e5:4e:6d:56:7c:19:62:
d2:c8:6a:01:c2:95:1a:47:8b:8a:16:fb:c6:37:8e:
a0:4f:cd:eb:ec:fc:c8:2e:3a:7d:df:26:b9:03:12:
cb:23:ec:8b:06:54:a8:d5:be:60:93:14:ab:b2:64:
79:26:97:0e:a1:1e:10:f1:92:2b:d1:4a:5e:ef:68:
fc:5a:c2:b3:24:f3:f4:d6:89:25:6c:32:a2:52:09:
7f:02:87:46:1c:b7:3e:92:b7:64:04:a2:9b:1e:2f:
53:fe:b6:35:db:1b:c5:61:4e:29:cb:2b:6a:56:b3:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:52:D8:B2:E8:0F:39:03:F9:DF:D4:BC:ED:1C:2D:AD:23:99:9E:D5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/e1LYsugPOQP539S87RwtrSOZntU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.0.0/18
Signature Algorithm: sha256WithRSAEncryption
60:b9:6d:b5:51:af:8e:75:cf:d3:13:75:f4:7b:f5:4e:60:b5:
c2:87:9c:0e:0d:33:a1:bd:5c:64:c6:18:ec:62:a2:c4:55:0c:
02:1c:9f:bf:d4:34:a3:67:85:62:5d:35:91:39:a2:a2:3c:ca:
c0:20:00:d5:61:3a:12:7f:9b:21:75:26:8f:13:4f:14:73:37:
fe:7f:ce:38:26:eb:b1:56:81:c4:b8:bf:4e:b2:73:7d:4f:05:
41:76:ee:55:03:a6:e6:bd:62:84:f2:ae:f9:39:d8:62:5e:72:
0c:ca:06:3f:16:6f:f7:d4:13:c9:22:13:b9:e3:ae:3e:4f:ad:
38:03:70:7a:db:f6:1b:23:4c:f3:49:06:cd:08:62:8a:e1:fb:
a0:25:e8:4e:d8:bc:bc:c4:d7:11:99:df:e3:a1:f3:16:79:65:
9a:56:14:f9:27:4b:43:41:57:bb:d6:7a:c1:b0:9d:a9:5e:fd:
5b:2a:1a:25:ef:6d:16:8d:53:5e:db:64:db:d0:40:d2:32:bf:
a5:0e:af:1e:6e:c7:92:d5:14:b1:a7:b6:21:84:b2:05:ff:b8:
82:05:b5:c2:f0:a7:9f:1d:28:a8:e1:43:03:12:f6:e4:06:a9:
4e:7b:a4:0d:a3:02:14:25:bb:2b:42:d0:c1:ff:d6:ce:ce:c4:
0c:b8:cd:b4
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICD0gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU2NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdCNTJEOEIyRTgwRjM5
MDNGOURGRDRCQ0VEMUMyREFEMjM5OTlFRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD+UzUpjh2ioplUvV4IOMJyfJWBn2O7YMuD3pURM7ko64VJxuhP
wgFAdCTE9HN9ZUfQDPbZht7SHbdkOryG2iBP709xhzs1hJGtx6Zib1TG7niPU3Td
lCWdIlUK6D3TcmIjp5eAlQ2W9L1QM1NSP0508wKUd5tmuE6qBiRM5B7W2M3hbPz1
IHz79TJKGV9M5U5tVnwZYtLIagHClRpHi4oW+8Y3jqBPzevs/MguOn3fJrkDEssj
7IsGVKjVvmCTFKuyZHkmlw6hHhDxkivRSl7vaPxawrMk8/TWiSVsMqJSCX8Ch0Yc
tz6St2QEopseL1P+tjXbG8VhTinLK2pWs7rTAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUe1LYsugPOQP539S87RwtrSOZntUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9lMUxZc3VnUE9RUDUzOVM4N1J3
dHJTT1pudFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGyicA
MA0GCSqGSIb3DQEBCwUAA4IBAQBguW21Ua+Odc/TE3X0e/VOYLXCh5wODTOhvVxk
xhjsYqLEVQwCHJ+/1DSjZ4ViXTWROaKiPMrAIADVYToSf5shdSaPE08Uczf+f844
JuuxVoHEuL9OsnN9TwVBdu5VA6bmvWKE8q75OdhiXnIMygY/Fm/31BPJIhO5464+
T604A3B62/YbI0zzSQbNCGKK4fugJehO2Ly8xNcRmd/jofMWeWWaVhT5J0tDQVe7
1nrBsJ2pXv1bKhol720WjVNe22Tb0EDSMr+lDq8ebseS1RSxp7YhhLIF/7iCBbXC
8KefHSio4UMDEvbkBqlOe6QNowIUJbsrQtDB/9bOzsQMuM20
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org