Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ltTRAj38kfmO3RBIRPzsMe6vkWg.roa
File: ltTRAj38kfmO3RBIRPzsMe6vkWg.roa (raw, json)
Hash identifier: 2LJoMJRYxhZyx0zsqs9aR5DxHGv+I8g5ZVpTXGnIWwg=
Subject key identifier: 96:D4:D1:02:3D:FC:91:F9:8E:DD:10:48:44:FC:EC:31:EE:AF:91:68
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FCA
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ltTRAj38kfmO3RBIRPzsMe6vkWg.roa
Signing time: Fri 01 Sep 2023 08:57:30 +0000
ROA not before: Fri 01 Sep 2023 08:57:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 114.32.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4042 (0xfca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=96D4D1023DFC91F98EDD104844FCEC31EEAF9168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:af:22:a2:fc:de:7d:ea:a1:49:b7:ad:fe:
c4:73:29:c0:fd:ff:a9:4e:c0:24:c8:d5:f5:1f:73:
7b:41:6b:70:11:e9:d8:94:de:99:20:84:22:78:9f:
70:fc:68:14:ef:f9:e2:4a:0b:fb:ac:95:6c:94:5d:
a4:dc:d6:6a:0a:d6:c9:ca:68:39:df:6a:42:f5:b0:
46:f8:e1:13:f9:b3:70:a1:f3:7f:8f:78:07:e9:58:
35:f5:ff:90:3c:4e:e5:b9:e4:32:73:fe:ad:e8:c8:
5c:b6:e9:ea:a8:6f:fc:0f:80:5f:16:b8:58:7a:29:
a2:43:dd:6b:2e:cd:cf:8f:e6:4a:40:76:fe:24:f8:
a2:02:d8:1a:89:f6:8e:5a:08:d7:79:a8:ec:c2:eb:
88:b7:b4:6b:fb:fb:bd:a0:67:5c:46:b8:62:09:26:
72:c2:5b:f9:f1:e8:d9:bd:3f:0a:da:40:54:aa:9e:
7e:f5:c0:a4:3b:bf:d9:8b:97:e1:8e:19:cb:6d:ee:
35:a2:98:6b:53:d9:80:b2:b2:b4:d3:1a:1b:73:9b:
28:24:9b:cc:bc:f6:84:9a:2c:98:7e:aa:1e:97:6f:
e0:87:d2:30:70:ad:66:7e:30:9f:38:5b:fc:6b:2c:
0c:1b:b6:c5:46:f3:ff:55:75:2b:b7:cb:fd:1c:d0:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D4:D1:02:3D:FC:91:F9:8E:DD:10:48:44:FC:EC:31:EE:AF:91:68
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ltTRAj38kfmO3RBIRPzsMe6vkWg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.32.0.0/12
Signature Algorithm: sha256WithRSAEncryption
54:e5:85:32:7c:c2:d8:76:df:3a:d8:cf:16:76:d4:ec:fc:e6:
1c:49:ea:8c:23:27:09:6e:c8:a3:35:64:87:6f:fd:9d:61:b5:
0b:24:ba:40:fe:3b:a0:3a:33:bd:2f:83:33:71:a4:86:a0:33:
ff:f4:a3:e7:be:fc:be:13:c9:84:1d:4c:e3:8f:58:e5:43:12:
3c:7a:25:3f:82:6e:b8:d1:f8:b9:72:60:5a:9c:07:59:62:12:
05:4d:dc:bb:27:fe:f7:7a:f4:a5:fe:2d:83:cb:e5:14:8c:5e:
5b:0e:4d:1b:7a:5b:70:42:dc:4c:53:8e:2c:66:1a:46:43:f9:
c7:34:d5:7e:7b:67:b2:56:4c:23:32:ce:dd:b2:e8:ec:4b:79:
16:35:84:27:61:0c:37:ef:c7:21:28:2b:6c:ef:0f:78:9c:b7:
65:0b:64:cb:19:6d:18:16:29:d9:93:b6:ea:70:4e:5e:7c:0c:
69:2c:18:6b:f0:2a:9a:6c:d1:1b:41:b0:c9:11:ac:38:9e:2d:
f1:9e:da:9e:0e:97:a0:ed:76:83:28:a4:57:86:4e:18:70:13:
c6:19:39:6b:c0:fb:6d:3e:f6:64:66:ce:91:95:a3:34:da:a3:
4a:d4:d8:1d:55:7f:c6:69:51:37:79:f5:ec:9b:b4:65:41:fd:
1a:61:6a:69
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICD8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU3MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk2RDREMTAyM0RGQzkx
Rjk4RUREMTA0ODQ0RkNFQzMxRUVBRjkxNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1J68iovzefeqhSbet/sRzKcD9/6lOwCTI1fUfc3tBa3AR6diU
3pkghCJ4n3D8aBTv+eJKC/uslWyUXaTc1moK1snKaDnfakL1sEb44RP5s3Ch83+P
eAfpWDX1/5A8TuW55DJz/q3oyFy26eqob/wPgF8WuFh6KaJD3Wsuzc+P5kpAdv4k
+KIC2BqJ9o5aCNd5qOzC64i3tGv7+72gZ1xGuGIJJnLCW/nx6Nm9PwraQFSqnn71
wKQ7v9mLl+GOGctt7jWimGtT2YCysrTTGhtzmygkm8y89oSaLJh+qh6Xb+CH0jBw
rWZ+MJ84W/xrLAwbtsVG8/9VdSu3y/0c0K/nAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUltTRAj38kfmO3RBIRPzsMe6vkWgwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9sdFRSQWozOGtmbU8zUkJJUlB6
c01lNnZrV2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEciAw
DQYJKoZIhvcNAQELBQADggEBAFTlhTJ8wth23zrYzxZ21Oz85hxJ6owjJwluyKM1
ZIdv/Z1htQskukD+O6A6M70vgzNxpIagM//0o+e+/L4TyYQdTOOPWOVDEjx6JT+C
brjR+LlyYFqcB1liEgVN3Lsn/vd69KX+LYPL5RSMXlsOTRt6W3BC3ExTjixmGkZD
+cc01X57Z7JWTCMyzt2y6OxLeRY1hCdhDDfvxyEoK2zvD3ict2ULZMsZbRgWKdmT
tupwTl58DGksGGvwKpps0RtBsMkRrDieLfGe2p4Ol6DtdoMopFeGThhwE8YZOWvA
+20+9mRmzpGVozTao0rU2B1Vf8ZpUTd59eybtGVB/Rphamk=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org