Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/gHhygt7ukojDBw0ALV8zc0Pz4vg.roa
File: gHhygt7ukojDBw0ALV8zc0Pz4vg.roa (raw, json)
Hash identifier: WyK/aWKVP1XVOTcTYxSJLbdW3Fzb+Opp4MtkoC0KZUU=
Subject key identifier: 80:78:72:82:DE:EE:92:88:C3:07:0D:00:2D:5F:33:73:43:F3:E2:F8
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F80
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gHhygt7ukojDBw0ALV8zc0Pz4vg.roa
Signing time: Fri 01 Sep 2023 08:57:09 +0000
ROA not before: Fri 01 Sep 2023 08:57:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 137280
IP address blocks: 203.69.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3968 (0xf80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=80787282DEEE9288C3070D002D5F337343F3E2F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:6d:e7:fb:81:09:e6:ae:5e:17:d8:1e:9c:
b3:3f:c8:10:1f:0f:ed:50:51:aa:79:7d:15:a4:8a:
96:f9:d1:56:d2:c5:8c:81:2d:f9:cd:58:24:42:d5:
d7:61:76:44:a4:1c:b5:d9:96:a7:c3:c4:9e:22:94:
1a:54:2b:f9:cd:e2:c8:90:a7:a0:4e:40:d7:ff:f9:
ab:72:7e:76:01:c3:4f:55:8b:91:3d:6c:33:08:6e:
b0:e5:0d:95:0b:02:5b:29:14:b7:84:07:20:2e:64:
d5:97:ac:0b:2e:6f:0f:e3:d3:79:a7:a8:3a:08:11:
43:29:fe:16:d4:cd:73:1e:b4:c6:f5:2e:31:17:3a:
49:55:cf:3a:aa:3a:38:50:08:7a:19:ba:03:f4:01:
bf:f4:29:3b:14:ee:d4:ef:1b:15:f8:0d:3b:9b:a6:
99:4a:21:43:61:06:f0:14:88:69:a0:1e:e4:e8:f1:
34:db:51:a6:ce:7d:37:a6:e5:76:67:27:91:66:d5:
76:27:6a:5c:6c:2c:bd:f0:66:84:82:5b:28:0d:d9:
a6:a0:fe:12:f2:ae:f1:af:13:2c:4f:c7:31:a3:2e:
28:87:e1:13:56:73:a3:89:a7:94:b0:72:4b:44:a8:
54:11:6e:25:98:0b:0d:b7:26:d4:7d:1c:0b:5b:68:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:78:72:82:DE:EE:92:88:C3:07:0D:00:2D:5F:33:73:43:F3:E2:F8
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gHhygt7ukojDBw0ALV8zc0Pz4vg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.69.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ab:e0:d1:15:26:56:04:c4:6a:76:73:01:c9:db:4a:c0:5f:
4f:0c:1b:91:63:46:76:a1:72:2b:db:0b:25:85:f8:df:c4:62:
f9:ac:bc:f5:ea:93:c8:0b:a6:ff:58:e4:7c:39:34:cd:0e:ba:
33:9b:2d:6a:2f:db:60:1c:96:a9:60:f3:2f:7a:aa:86:40:10:
d1:4f:b0:4a:14:b9:1f:e7:63:38:c0:b3:a5:39:66:b3:6f:16:
85:94:0e:6b:34:f0:bc:c0:49:42:b4:30:f4:d5:bb:c3:84:d3:
c8:f4:5b:8d:df:84:b9:6e:8f:56:0a:26:c0:7c:61:9b:f2:fa:
ad:d0:ad:18:16:3f:5b:f9:57:ab:26:63:76:d4:a0:16:70:f0:
d7:6c:a6:6d:40:a0:1c:a3:9f:f2:71:84:40:6c:ad:b4:4e:77:
e4:dc:fb:45:f9:76:ee:57:02:f7:ec:09:6c:48:94:4d:89:a4:
98:85:6f:19:f1:27:b2:95:dd:d8:d0:55:33:f6:6c:bf:75:31:
ea:6c:b9:b6:5c:8d:1e:ee:b4:f8:55:3b:18:63:eb:7f:41:ff:
c4:90:a1:d3:52:91:c8:d5:ce:86:00:2e:72:96:0b:7b:ff:4b:
78:a0:b0:a3:44:05:77:4c:d0:cb:cb:fc:7b:f1:e9:fb:5f:96:
67:12:f0:ee
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICD4AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU3MDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDgwNzg3MjgyREVFRTky
ODhDMzA3MEQwMDJENUYzMzczNDNGM0UyRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYqW3n+4EJ5q5eF9genLM/yBAfD+1QUap5fRWkipb50VbSxYyB
LfnNWCRC1ddhdkSkHLXZlqfDxJ4ilBpUK/nN4siQp6BOQNf/+atyfnYBw09Vi5E9
bDMIbrDlDZULAlspFLeEByAuZNWXrAsubw/j03mnqDoIEUMp/hbUzXMetMb1LjEX
OklVzzqqOjhQCHoZugP0Ab/0KTsU7tTvGxX4DTubpplKIUNhBvAUiGmgHuTo8TTb
UabOfTem5XZnJ5Fm1XYnalxsLL3wZoSCWygN2aag/hLyrvGvEyxPxzGjLiiH4RNW
c6OJp5SwcktEqFQRbiWYCw23JtR9HAtbaI6hAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUgHhygt7ukojDBw0ALV8zc0Pz4vgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9nSGh5Z3Q3dWtvakRCdzBBTFY4
emMwUHo0dmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0UT
MA0GCSqGSIb3DQEBCwUAA4IBAQCjq+DRFSZWBMRqdnMBydtKwF9PDBuRY0Z2oXIr
2wslhfjfxGL5rLz16pPIC6b/WOR8OTTNDrozmy1qL9tgHJapYPMveqqGQBDRT7BK
FLkf52M4wLOlOWazbxaFlA5rNPC8wElCtDD01bvDhNPI9FuN34S5bo9WCibAfGGb
8vqt0K0YFj9b+VerJmN21KAWcPDXbKZtQKAco5/ycYRAbK20Tnfk3PtF+XbuVwL3
7AlsSJRNiaSYhW8Z8Seyld3Y0FUz9my/dTHqbLm2XI0e7rT4VTsYY+t/Qf/EkKHT
UpHI1c6GAC5ylgt7/0t4oLCjRAV3TNDLy/x78en7X5ZnEvDu
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org