Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/hcBwAijcyEvBRQyVESOvUdVJOwc.roa
File: hcBwAijcyEvBRQyVESOvUdVJOwc.roa (raw, json)
Hash identifier: +S02vdsbmRxFambNQGsSGkKgWMtUpTk81hKuowe5TMs=
Subject key identifier: 85:C0:70:02:28:DC:C8:4B:C1:45:0C:95:11:23:AF:51:D5:49:3B:07
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FCB
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/hcBwAijcyEvBRQyVESOvUdVJOwc.roa
Signing time: Fri 01 Sep 2023 08:57:30 +0000
ROA not before: Fri 01 Sep 2023 08:57:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 23675
IP address blocks: 220.128.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4043 (0xfcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=85C0700228DCC84BC1450C951123AF51D5493B07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:13:ef:a3:59:7c:df:28:12:1d:24:ac:93:31:
2f:ae:d4:77:1d:e2:a7:ba:08:79:3a:e0:fc:e0:0d:
4d:1c:3b:b9:8e:b5:2d:c8:7b:4e:f3:7c:34:0a:c8:
f2:ba:f1:b3:6e:a1:c7:fb:fa:84:93:2d:6a:97:52:
8f:bb:de:19:fc:bd:7e:e7:88:65:02:f9:58:87:a7:
b3:6e:f8:7f:d1:9a:72:9a:40:bf:db:f9:ee:8b:6e:
69:a3:07:ef:07:43:f4:30:31:ad:39:28:ae:85:3c:
3e:b6:0d:e3:6f:75:92:6e:e1:a4:30:53:45:bc:dd:
e2:2f:97:dc:f3:ea:a6:79:d7:07:fe:34:dd:22:3b:
ab:55:cb:98:45:26:7b:84:4e:96:df:30:23:fc:dc:
97:85:65:84:13:32:e7:d8:47:9f:e5:94:22:77:89:
6a:3b:98:94:59:cf:4e:7f:31:e2:1f:19:cc:58:0b:
64:e7:f4:a4:b7:c9:e9:73:7d:c0:28:d1:dc:d2:49:
c3:e5:74:8f:5d:56:92:07:e7:e4:0e:db:7b:1d:2a:
2f:4e:3f:f9:59:f4:da:27:e0:74:7c:02:b0:af:bd:
af:03:6e:9f:1d:bc:40:8f:d6:9d:85:0f:b2:64:a6:
37:05:60:3b:2e:56:3d:b6:41:da:82:95:57:2c:07:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C0:70:02:28:DC:C8:4B:C1:45:0C:95:11:23:AF:51:D5:49:3B:07
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/hcBwAijcyEvBRQyVESOvUdVJOwc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.55.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:0e:7d:1f:d9:6c:71:ed:22:51:8c:4d:1e:97:3a:64:1a:1d:
de:c5:5d:36:9a:2d:5a:d2:cf:30:5d:e0:2d:23:99:1b:b5:58:
23:9b:37:36:57:92:d1:16:b3:3f:ae:c7:59:57:76:88:a5:8c:
7d:56:be:7b:21:57:66:2e:46:7b:76:57:2d:ba:03:1c:aa:6a:
7a:9a:e4:57:d8:a7:38:8e:fd:ba:97:cd:c5:c5:a5:ba:a1:df:
c7:86:84:34:71:38:3c:a9:9d:0a:48:bf:d0:15:80:ac:29:52:
89:39:80:64:76:43:89:57:b2:74:1a:db:14:1f:56:86:b4:1d:
98:a5:ca:d4:ee:14:1d:be:62:00:e9:1b:e1:e9:e6:9c:07:64:
65:4e:6a:63:87:b4:36:0d:59:d4:02:29:05:92:47:e8:88:f0:
05:b2:13:c8:cd:98:fd:16:65:f9:8a:d0:78:bc:61:57:f3:19:
b9:77:8b:f5:ff:e6:9c:f7:e8:3c:70:5f:ad:23:af:a8:7c:98:
58:9b:3d:08:90:c5:cc:6f:ff:f7:80:ef:19:53:96:83:d9:97:
e4:c2:57:d0:94:4e:9d:2b:0f:86:92:d4:d7:9c:b6:c6:7a:09:
7e:70:e7:c9:6f:c6:af:bc:57:b2:a7:e3:45:13:0e:5b:25:e8:
93:fb:80:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org