Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/nAJCD-2cJ6hWULgAmzyXlkqiW_s.roa
File: nAJCD-2cJ6hWULgAmzyXlkqiW_s.roa (raw, json)
Hash identifier: cNYpXFQg+VCcS06MQkkgyiG3LXpC8nusQZvp9Z8nKXY=
Subject key identifier: 9C:02:42:0F:ED:9C:27:A8:56:50:B8:00:9B:3C:97:96:4A:A2:5B:FB
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FA0
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nAJCD-2cJ6hWULgAmzyXlkqiW_s.roa
Signing time: Fri 01 Sep 2023 08:57:18 +0000
ROA not before: Fri 01 Sep 2023 08:57:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 198949
IP address blocks: 203.66.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4000 (0xfa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9C02420FED9C27A85650B8009B3C97964AA25BFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f4:4d:4f:bd:1d:1a:47:a1:49:2f:9e:d9:1f:
b5:bf:42:b3:24:6b:73:78:0c:51:43:cf:a4:98:0f:
e0:11:19:77:1a:37:90:42:24:bf:6d:e7:9b:30:c9:
92:9e:d2:fa:20:94:c8:80:44:5d:eb:a6:21:92:57:
91:01:8d:1f:44:b8:6c:cf:9e:6b:7b:4b:22:97:95:
a3:92:d5:7c:26:fd:d3:55:f6:0e:ab:56:82:4b:43:
37:39:77:56:28:e3:3a:0e:a9:fe:83:15:0e:24:a4:
9e:47:73:f3:ff:50:a7:d6:da:e3:d7:94:3f:f9:28:
70:d3:4a:b8:10:b3:e0:e9:a8:c0:98:04:25:e9:45:
49:59:c6:53:52:93:bf:6a:bb:2a:57:08:d0:c0:56:
29:4c:9f:b3:53:38:f6:10:84:da:b7:f4:ad:c6:65:
50:93:2e:9b:e5:66:f3:7c:46:4a:fb:cf:a6:f6:df:
ec:b8:a3:d6:87:87:29:f3:2f:c5:d6:b0:59:3d:e2:
83:bd:bb:c8:75:9f:a4:4c:b4:4f:9b:4b:61:55:c8:
ae:b4:c6:4f:65:2b:db:fd:e2:67:bb:ef:df:7d:05:
71:5d:7e:aa:55:56:e8:a2:e7:db:45:57:a7:77:3c:
d0:48:c4:e3:ca:c3:55:47:00:8b:48:98:16:17:08:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:02:42:0F:ED:9C:27:A8:56:50:B8:00:9B:3C:97:96:4A:A2:5B:FB
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nAJCD-2cJ6hWULgAmzyXlkqiW_s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.66.126.0/24
Signature Algorithm: sha256WithRSAEncryption
98:73:c9:e6:fa:fb:1e:cd:4f:ef:e1:c6:d2:25:d4:52:5b:78:
df:b7:b8:f2:57:d7:b6:6d:90:e9:08:21:e9:8f:47:94:e9:85:
ca:2e:90:25:1d:b4:56:13:8f:e5:79:d2:ca:f3:74:a5:e0:45:
a7:9a:2b:b9:07:28:ee:8e:ca:09:e9:51:63:d6:de:d2:5b:53:
5d:0d:a4:d4:36:b7:4b:16:27:80:c8:b3:7f:c8:85:9b:a8:77:
8b:09:0a:be:97:72:20:2d:1d:b1:de:bb:96:86:08:19:7c:2a:
f7:27:ec:6b:e9:d4:8b:04:d0:b2:df:71:83:f3:1e:e5:b6:14:
e0:62:18:ae:d1:4c:95:9f:7a:c1:40:32:fe:5e:c8:8d:41:f9:
c7:77:23:70:26:f0:a1:55:23:36:56:2a:fe:70:9f:1c:b4:5c:
fa:e5:0f:f0:5f:a6:e1:a5:1f:be:27:d0:be:56:55:0b:ae:7c:
78:32:09:6e:bc:ae:27:3e:83:54:a1:bb:9a:a5:cb:a0:50:9e:
0f:d9:bc:b1:b6:15:6f:8a:5c:10:8a:a2:e6:cb:7e:e7:7e:5c:
ce:ec:1d:59:ec:54:59:2d:ac:02:68:52:4d:9f:45:e2:84:74:
32:f2:ab:e5:de:c0:a2:ff:d6:8e:05:b3:f1:dd:b4:9b:6b:be:
32:cd:13:6f
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICD6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU3MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlDMDI0MjBGRUQ5QzI3
QTg1NjUwQjgwMDlCM0M5Nzk2NEFBMjVCRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDi9E1PvR0aR6FJL57ZH7W/QrMka3N4DFFDz6SYD+ARGXcaN5BC
JL9t55swyZKe0voglMiARF3rpiGSV5EBjR9EuGzPnmt7SyKXlaOS1Xwm/dNV9g6r
VoJLQzc5d1Yo4zoOqf6DFQ4kpJ5Hc/P/UKfW2uPXlD/5KHDTSrgQs+DpqMCYBCXp
RUlZxlNSk79quypXCNDAVilMn7NTOPYQhNq39K3GZVCTLpvlZvN8Rkr7z6b23+y4
o9aHhynzL8XWsFk94oO9u8h1n6RMtE+bS2FVyK60xk9lK9v94me77999BXFdfqpV
Vuii59tFV6d3PNBIxOPKw1VHAItImBYXCGrJAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUnAJCD+2cJ6hWULgAmzyXlkqiW/swHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9uQUpDRC0yY0o2aFdVTGdBbXp5
WGxrcWlXX3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0J+
MA0GCSqGSIb3DQEBCwUAA4IBAQCYc8nm+vsezU/v4cbSJdRSW3jft7jyV9e2bZDp
CCHpj0eU6YXKLpAlHbRWE4/ledLK83Sl4EWnmiu5ByjujsoJ6VFj1t7SW1NdDaTU
NrdLFieAyLN/yIWbqHeLCQq+l3IgLR2x3ruWhggZfCr3J+xr6dSLBNCy33GD8x7l
thTgYhiu0UyVn3rBQDL+XsiNQfnHdyNwJvChVSM2Vir+cJ8ctFz65Q/wX6bhpR++
J9C+VlULrnx4MgluvK4nPoNUobuapcugUJ4P2byxthVvilwQiqLmy37nflzO7B1Z
7FRZLawCaFJNn0XihHQy8qvl3sCi/9aOBbPx3bSba74yzRNv
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org