Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/jIK6wsJgXDMrmYNR_9gG5DmBLA0.roa
File: jIK6wsJgXDMrmYNR_9gG5DmBLA0.roa (raw, json)
Hash identifier: yyCBZ5CL2o4E2D8O+JuZy4DwVTiVXTwRNzXUoSfItOs=
Subject key identifier: 8C:82:BA:C2:C2:60:5C:33:2B:99:83:51:FF:D8:06:E4:39:81:2C:0D
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FC5
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jIK6wsJgXDMrmYNR_9gG5DmBLA0.roa
Signing time: Fri 01 Sep 2023 08:57:28 +0000
ROA not before: Fri 01 Sep 2023 08:57:28 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 210.242.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4037 (0xfc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:28 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8C82BAC2C2605C332B998351FFD806E439812C0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:24:43:ef:ce:a2:12:19:3a:64:1f:2b:19:
a8:79:fb:7a:18:32:5c:0c:24:5d:9e:0c:37:51:c2:
ba:02:e4:46:23:e7:cd:c2:f3:7f:d2:e4:31:3a:1c:
23:48:ed:f4:60:12:8a:d0:59:92:46:ad:38:ed:b2:
10:08:5a:c0:94:ab:3f:88:35:8b:53:6b:2a:3f:5c:
52:12:be:cc:12:2a:bc:17:de:77:f3:3b:99:38:68:
ff:be:75:2c:b0:35:cd:f8:b5:2a:97:da:ea:c8:9b:
45:ee:9a:a3:b1:bb:c3:84:33:2f:f0:a9:0f:e1:c9:
02:1d:02:99:c0:2f:eb:2a:f7:64:d9:e4:a2:ea:2e:
0a:c0:2f:29:e2:b2:af:1f:13:e6:42:0a:1c:52:f2:
cc:57:25:b2:f8:50:39:ed:66:bb:e5:bb:0b:dc:9e:
a0:10:fa:8a:c2:3b:76:c1:90:39:6c:e1:a4:0c:c2:
69:98:95:f2:fa:2b:e8:9e:b1:5b:0e:58:7c:f1:21:
d2:29:dc:7f:1b:0f:84:3b:cc:f6:32:9e:f0:1e:03:
7e:93:65:cf:51:33:45:6b:2c:7d:3f:26:c9:e4:b7:
a8:84:1d:11:18:15:a6:6d:a0:f0:0f:b8:52:1b:31:
61:f3:a2:39:e5:58:55:dc:51:4b:80:ec:f7:e0:f9:
6e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:82:BA:C2:C2:60:5C:33:2B:99:83:51:FF:D8:06:E4:39:81:2C:0D
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jIK6wsJgXDMrmYNR_9gG5DmBLA0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:a3:2b:aa:9a:6a:4c:5c:5c:1e:5a:9d:ce:10:ce:38:f8:c2:
0a:d4:d2:38:c1:d1:44:9e:35:b6:81:b2:68:0d:f4:f9:a6:54:
f4:72:1a:95:56:4b:02:71:64:b2:88:08:55:43:bf:09:ae:2b:
95:1d:d6:02:8d:f1:da:1c:ce:65:f0:e7:43:fb:aa:4e:12:f0:
16:03:a0:b4:ca:98:84:02:e8:31:fe:56:d0:0f:4d:91:e8:d0:
98:d1:81:3f:1f:af:b6:6f:3b:b2:ce:90:18:28:dd:43:4c:5a:
32:67:0a:0f:30:47:7a:a6:74:3e:6d:c8:1b:78:88:ee:15:2a:
14:96:5a:68:27:15:3e:b4:07:cd:e5:85:c6:98:0c:9d:51:46:
03:38:c3:50:0f:b5:57:51:e6:19:07:80:0e:ae:b0:36:1f:35:
0d:df:67:56:f4:ef:e5:82:7a:1b:07:6c:da:ba:ea:64:a2:6a:
c4:18:3c:1f:ec:de:dd:c6:dc:c3:61:8d:54:31:89:f2:7c:65:
4c:25:99:9a:d9:aa:80:34:67:2a:53:5a:a0:9c:53:9a:dc:b2:
ee:fd:4b:fa:37:12:d6:6e:35:ec:92:37:c0:f6:b6:9f:18:58:
19:63:f5:d0:29:34:4b:01:90:bc:0f:f4:a9:9a:40:60:b0:85:
84:cf:b6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org