Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/luUm8u8L_mIAzh8gQFcj49YLvp8.roa
File: luUm8u8L_mIAzh8gQFcj49YLvp8.roa (raw, json)
Hash identifier: g3rSCRlWmJa2Nah6SJ7yJhh268A55JW5ZkBbiYJrkD8=
Subject key identifier: 96:E5:26:F2:EF:0B:FE:62:00:CE:1F:20:40:57:23:E3:D6:0B:BE:9F
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F41
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/luUm8u8L_mIAzh8gQFcj49YLvp8.roa
Signing time: Fri 01 Sep 2023 08:56:49 +0000
ROA not before: Fri 01 Sep 2023 08:56:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131621
IP address blocks: 118.168.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3905 (0xf41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=96E526F2EF0BFE6200CE1F20405723E3D60BBE9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:a7:b5:e2:82:a1:d5:bd:95:9e:56:4e:8c:
d6:c2:af:22:60:e3:17:29:70:4d:49:4b:aa:53:02:
31:1d:0b:3e:a9:fa:6f:5a:fc:45:d4:58:8f:b3:dc:
9f:50:c5:c2:fe:5c:0b:fa:79:9c:4f:a9:eb:2d:89:
07:9b:b4:d8:a3:49:ec:fc:78:eb:62:d2:99:33:f5:
6b:d3:13:3d:1d:ae:cb:c6:40:e1:76:78:c8:0c:e9:
7d:95:d1:44:92:18:af:ae:4f:fe:9e:05:1a:93:e7:
0d:ac:fd:a5:03:4f:ef:3c:16:80:34:4a:78:5f:ab:
d2:37:28:93:6a:9f:d0:bf:95:6a:10:4e:f7:65:de:
2f:72:04:0d:18:6e:67:13:17:c3:51:93:90:f4:78:
06:e8:9d:61:1b:b7:93:8b:df:b9:a6:73:ed:d1:1d:
16:4d:c8:05:3c:d5:2c:db:54:d0:c2:89:7a:5a:c3:
b0:54:d5:9b:08:76:dd:20:89:37:75:a4:1d:7a:02:
2f:af:ef:13:ec:9d:c2:a6:80:0c:b9:f3:27:85:f6:
37:df:3d:a0:b1:81:81:4c:8b:16:f0:05:7c:08:b8:
3c:54:53:22:ef:47:90:5f:78:96:c8:7a:b7:c6:10:
ee:0c:b2:06:24:d9:30:20:a0:7f:66:c5:90:33:92:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E5:26:F2:EF:0B:FE:62:00:CE:1F:20:40:57:23:E3:D6:0B:BE:9F
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/luUm8u8L_mIAzh8gQFcj49YLvp8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.168.255.0/24
Signature Algorithm: sha256WithRSAEncryption
13:0d:e2:d7:c3:49:5c:66:aa:4e:82:0f:25:98:40:de:99:7d:
42:d2:08:23:af:16:c5:e9:8c:31:ef:83:29:f3:87:ac:67:33:
5d:46:14:b8:a4:58:23:98:1e:ca:57:10:ea:3e:3a:81:ea:62:
8c:9f:6e:a3:36:f6:69:4c:a3:06:cb:f7:d2:3c:c6:18:2f:e3:
68:76:ee:90:6b:ac:32:9a:f0:b9:81:3e:da:f5:71:2b:90:33:
5c:a9:28:7e:7f:94:c1:4e:11:fd:cd:89:6b:99:bd:67:36:d7:
dc:2a:37:2a:63:c6:86:9f:cd:34:4e:3c:be:1f:1c:b8:e7:5e:
64:e7:a0:29:29:f5:45:5f:67:b6:59:3b:22:76:fb:07:44:42:
c3:96:18:17:5d:de:65:ed:3e:49:6c:b8:a8:77:d8:a6:ed:b6:
7b:33:c5:85:ed:1b:4c:8b:c8:4c:cb:56:c1:9a:33:a1:5e:60:
25:8e:01:bb:76:3c:5e:04:4e:6f:40:0b:9f:88:41:12:5e:73:
54:30:b7:5e:40:a2:a0:42:a6:15:8a:c3:ba:d2:3c:b0:cc:d9:
89:a6:e9:20:d2:78:c1:ca:13:ec:50:03:0b:96:25:01:f2:f5:
2a:da:d8:d1:8b:50:42:b3:80:f5:c6:86:87:a4:e1:95:17:30:
1e:ce:25:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org