Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/mewZfh7f6x5mFf-SeBRGyPpL6RU.roa
File: mewZfh7f6x5mFf-SeBRGyPpL6RU.roa (raw, json)
Hash identifier: 4YzQmUSZNk/MiJJhcCLJr6/8mE9kJSqUaHrqTVDYREM=
Subject key identifier: 99:EC:19:7E:1E:DF:EB:1E:66:15:FF:92:78:14:46:C8:FA:4B:E9:15
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FA1
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mewZfh7f6x5mFf-SeBRGyPpL6RU.roa
Signing time: Fri 01 Sep 2023 08:57:18 +0000
ROA not before: Fri 01 Sep 2023 08:57:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 210.62.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4001 (0xfa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=99EC197E1EDFEB1E6615FF92781446C8FA4BE915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b9:a1:b1:68:e7:16:80:1e:12:8f:d3:ca:f0:
c9:9a:9c:a0:04:b6:1c:55:dd:cb:05:00:13:63:5d:
f1:a8:2d:e8:c9:14:db:44:94:03:1b:7b:e8:78:33:
8b:d0:dd:2e:e0:db:e0:3c:f0:f0:71:9d:65:9c:ab:
49:2c:96:bc:39:e4:d3:2a:27:be:a8:66:41:f7:3a:
59:d2:04:9d:28:0a:d6:af:b1:6a:57:5f:35:ee:df:
2e:5d:01:78:b3:74:81:02:59:57:52:f4:cb:38:a6:
ab:e4:e8:31:9a:77:d3:69:eb:a0:a6:31:57:30:28:
1f:47:34:ea:76:89:7c:d5:1c:46:f9:36:9a:ae:26:
d4:b3:dc:04:8f:08:57:cd:5a:df:0e:26:4e:5a:6e:
ad:f5:14:6f:c9:c5:d9:0e:cf:94:62:e2:cb:0d:04:
cd:6b:07:e1:bc:7c:49:50:b9:24:79:8a:ae:2e:b2:
d3:d7:9f:f1:d2:1f:ea:a5:77:31:34:64:62:e3:71:
de:60:6e:0f:17:69:c8:04:8a:68:fa:2c:c4:30:bc:
23:36:9a:e8:6f:42:b5:fd:da:c1:77:8c:6f:de:a8:
56:8a:39:2c:12:9a:e2:7a:76:21:da:a0:87:df:79:
e9:fe:09:82:9f:a9:d3:28:bf:65:c0:ea:c9:9d:99:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EC:19:7E:1E:DF:EB:1E:66:15:FF:92:78:14:46:C8:FA:4B:E9:15
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/mewZfh7f6x5mFf-SeBRGyPpL6RU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.248.0/21
Signature Algorithm: sha256WithRSAEncryption
16:1f:5a:23:5b:71:69:3b:41:58:44:0d:ed:46:d2:8a:69:2d:
d5:cc:fa:4d:1d:14:f7:98:79:fa:f7:16:18:3b:3b:04:5b:5a:
e8:5f:61:8c:4e:07:5b:2a:6a:10:bc:7a:c1:ca:5f:ea:56:f4:
da:c5:74:cf:03:d2:2c:2b:11:ed:fd:44:b2:a0:ec:91:e8:50:
51:a0:b8:31:46:1f:d4:34:27:8c:f7:4e:1a:b3:8e:7f:57:c3:
26:3f:2d:29:86:f3:5b:66:23:8a:09:de:21:71:28:53:8b:46:
1e:26:fd:57:ae:1c:45:56:04:a5:14:32:3b:eb:57:8b:e1:17:
2c:87:72:c0:59:8a:8a:b5:34:c9:b9:62:66:00:b5:5c:6a:cd:
50:08:b6:e1:b3:e2:7e:29:ae:74:15:5a:55:90:ee:4e:46:7a:
9d:41:3e:20:08:05:f2:5a:c7:ea:16:d7:65:c7:b1:06:dc:4a:
52:02:b2:20:96:6e:19:ea:d5:e3:8a:6e:68:a2:40:20:a8:5d:
cb:46:0b:1f:1a:de:f9:dd:6c:6f:66:87:65:81:8f:ea:42:c7:
f5:a0:a2:8c:52:31:58:76:ec:2e:6d:ab:7e:32:27:4c:a1:8c:
b8:fd:af:52:9b:16:0e:9a:04:a2:08:68:78:fb:03:e3:db:48:
a7:38:e5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org