Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/h-2w9OEiS1WpqDODZZJ6a9Vc6og.roa
File: h-2w9OEiS1WpqDODZZJ6a9Vc6og.roa (raw, json)
Hash identifier: 7GK/Vu1FsPpZPzVsMsYBMw0nK0hNSF4VL8aNd9QTvjI=
Subject key identifier: 87:ED:B0:F4:E1:22:4B:55:A9:A8:33:83:65:92:7A:6B:D5:5C:EA:88
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F8E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/h-2w9OEiS1WpqDODZZJ6a9Vc6og.roa
Signing time: Fri 01 Sep 2023 08:57:12 +0000
ROA not before: Fri 01 Sep 2023 08:57:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 23675
IP address blocks: 203.66.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3982 (0xf8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:12 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=87EDB0F4E1224B55A9A8338365927A6BD55CEA88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:d1:4b:53:f2:0a:85:e0:d5:13:95:d9:93:
81:cd:94:44:ef:37:2a:1c:f3:3d:cf:8d:03:e3:11:
41:ec:6b:c3:7e:a3:6a:3d:21:50:85:ca:d1:6f:c1:
ce:26:e1:3d:7c:44:20:69:bf:34:b8:6b:70:7b:9d:
d0:9c:b2:01:13:13:ae:32:74:dd:b2:e2:67:f5:6b:
69:0d:01:0b:90:e7:2e:f8:55:2f:1e:fe:b3:78:a5:
78:f6:8e:16:0d:a6:bb:ac:b6:82:23:7b:f1:13:49:
00:31:58:1d:4c:5f:ea:58:4b:3f:d9:d8:7a:d6:37:
9f:c4:06:65:ca:46:77:e7:c1:a3:ee:c4:62:18:b7:
38:d7:85:e2:68:bb:be:44:71:a4:b7:ed:7b:4c:ec:
11:52:e6:e9:4f:53:45:c8:85:b4:cb:50:e1:42:9d:
aa:87:5b:be:50:f7:8a:96:12:d6:04:86:55:9f:98:
c2:f7:da:b8:07:e8:6d:7f:47:31:ca:3e:fd:b6:cd:
49:51:d5:36:db:62:6f:d1:d8:98:61:14:12:1c:1b:
1b:8f:53:b0:d6:42:5c:d1:0f:47:88:0d:f4:1a:e3:
78:cd:c1:10:ac:c2:28:86:d3:5e:06:8e:04:0a:12:
0f:96:ee:b2:e7:c6:23:ae:05:f7:36:81:44:0c:7d:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:ED:B0:F4:E1:22:4B:55:A9:A8:33:83:65:92:7A:6B:D5:5C:EA:88
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/h-2w9OEiS1WpqDODZZJ6a9Vc6og.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.66.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d0:4f:44:ea:af:07:d6:d9:fd:72:bb:10:9e:aa:f5:de:5b:
29:d5:6f:9e:2f:fc:af:1e:dc:72:2a:36:57:0a:5c:2e:3e:61:
49:57:a2:71:d6:fa:12:d5:90:74:51:3b:69:ce:3f:59:66:34:
30:ad:94:99:03:69:a0:5e:f2:76:5a:f2:0d:5d:a6:ef:75:b9:
21:7a:b1:8a:ce:97:55:e1:c2:52:b6:3d:21:19:e0:ee:c9:9c:
8c:88:ee:b7:a4:94:31:d6:c2:cb:60:23:6d:7f:67:7e:06:21:
cc:2f:9f:4f:8d:29:47:1d:c8:55:d3:23:2c:88:0b:cd:26:57:
5b:d5:5f:08:19:b5:37:14:00:eb:b4:e6:e2:4b:33:52:80:36:
dd:ff:79:45:f9:8d:ab:fd:9c:34:b5:ee:e3:ec:61:9c:34:da:
b8:70:4e:a6:69:9c:5e:31:b4:d4:b3:f1:2c:a5:c0:83:d9:63:
fb:41:af:31:b8:36:9c:14:ad:ac:3e:5d:92:e9:83:17:bd:e5:
0c:14:09:02:4f:fd:ef:cd:e0:67:c5:77:a1:e6:92:53:17:e8:
f7:ef:1a:4f:15:bb:1a:c6:e5:da:8a:18:a4:91:26:a2:49:84:
75:54:f4:a1:3d:4a:8c:41:a4:7d:af:c8:6d:e2:90:04:44:8a:
91:30:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org