Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/fF6IVm0zf9zQitICGC9O01kdPW0.roa
File: fF6IVm0zf9zQitICGC9O01kdPW0.roa (raw, json)
Hash identifier: iFZrhYyFa5duRjpa+z+YHXDhR8lWbfSuku2BeC+f1Ao=
Subject key identifier: 7C:5E:88:56:6D:33:7F:DC:D0:8A:D2:02:18:2F:4E:D3:59:1D:3D:6D
Certificate issuer: /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Certificate serial: 0C2C
Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/fF6IVm0zf9zQitICGC9O01kdPW0.roa
Signing time: Fri 01 Sep 2023 08:56:42 +0000
ROA not before: Fri 01 Sep 2023 08:56:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 168.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3116 (0xc2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Validity
Not Before: Sep 1 08:56:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7C5E88566D337FDCD08AD202182F4ED3591D3D6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:a0:3d:0f:76:9b:f8:87:80:93:8a:e3:1f:
78:85:06:87:66:36:8a:c7:77:74:0d:04:45:d6:9b:
c8:0c:93:25:d6:21:43:5d:99:fb:ea:e7:28:f4:fa:
da:a7:eb:0b:5e:57:0a:ae:5b:8c:1a:ad:95:7c:6c:
93:8a:57:7f:86:42:be:f4:3d:82:fe:ea:57:1b:1d:
9e:d6:83:32:ac:e5:01:04:6e:2b:83:1a:ee:c9:54:
54:b0:dd:e0:09:df:a4:5c:3a:38:96:31:55:81:f2:
f8:eb:be:79:41:1b:1b:26:8e:36:ac:ef:73:b8:1a:
83:8e:f6:61:b7:5e:2c:08:36:8d:d0:37:f4:b0:03:
67:2a:c2:07:67:87:0f:12:78:79:2c:23:ad:fd:8c:
d0:00:0a:70:3f:5d:24:9f:ee:8f:1e:47:d9:f3:e0:
fe:af:3a:6e:7d:53:84:8e:02:a9:57:35:54:5a:c2:
fd:30:3a:a2:5b:7e:c6:87:3f:ff:6a:4b:b8:bb:6d:
57:e1:7c:91:76:ba:97:ba:27:a5:02:09:da:8e:e8:
98:a6:53:92:4c:10:f5:c5:2b:02:70:b1:e0:ce:0a:
33:a2:9b:79:37:08:6e:26:fe:ff:10:30:91:a1:bb:
14:3f:3c:25:44:f7:3e:ad:ed:2b:77:7c:d8:41:8e:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5E:88:56:6D:33:7F:DC:D0:8A:D2:02:18:2F:4E:D3:59:1D:3D:6D
X509v3 Authority Key Identifier:
keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/fF6IVm0zf9zQitICGC9O01kdPW0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
168.95.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:26:76:c2:cf:e9:34:4b:54:86:b7:8f:9a:36:c5:3e:b4:d0:
e3:aa:04:ed:0f:f8:1b:a2:78:f8:2a:2b:77:b7:dd:70:3f:12:
7f:21:36:fc:a5:26:33:e8:f6:c1:1d:7c:71:03:0b:68:b9:f0:
e6:e3:2e:ec:ab:ba:08:b4:70:04:1d:ce:4b:08:86:32:88:53:
ca:14:5e:0b:d9:02:ec:dc:74:8e:c1:e9:c0:ec:bb:71:f8:26:
94:04:c9:6f:f4:aa:ee:16:9d:5a:69:f6:dd:23:da:d2:84:84:
a1:42:7e:3e:c4:75:9a:25:2f:d0:59:d3:b8:f6:39:9f:83:41:
c0:b9:18:6f:41:93:e8:a1:79:a7:39:7d:08:24:2e:18:16:3a:
34:18:8a:b1:bd:b3:c4:13:68:e5:46:5f:2f:6d:94:f9:2b:3d:
00:f4:ac:be:d6:17:9d:da:e6:bb:2e:f2:e7:43:70:4f:51:0e:
57:28:aa:a2:3b:16:41:3a:3e:be:39:ad:44:80:3b:af:4d:ba:
21:65:dc:49:50:8f:11:1a:c6:ff:aa:12:1a:ed:3d:0b:10:a3:
7e:d7:0e:ff:4f:0c:12:d5:1a:a1:13:7f:74:1a:52:7f:a0:50:
e0:5e:7e:30:8b:95:7f:d6:6f:39:65:d6:50:29:21:31:88:49:
5d:8d:fc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org