Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/nLRwYh-SLmf2_hC-6XgAxHWaUdE.roa
File: nLRwYh-SLmf2_hC-6XgAxHWaUdE.roa (raw, json)
Hash identifier: M8j/GROvxM+cRJgBqTaPIWBtvJl4Px1vKOcV7C6E+UQ=
Subject key identifier: 9C:B4:70:62:1F:92:2E:67:F6:FE:10:BE:E9:78:00:C4:75:9A:51:D1
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FB9
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nLRwYh-SLmf2_hC-6XgAxHWaUdE.roa
Signing time: Fri 01 Sep 2023 08:57:25 +0000
ROA not before: Fri 01 Sep 2023 08:57:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 203.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4025 (0xfb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9CB470621F922E67F6FE10BEE97800C4759A51D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:a9:a2:83:59:fa:d3:e4:84:c0:fa:f8:5f:
18:f4:df:d3:ab:66:8b:8d:a7:24:50:c6:80:47:b4:
aa:42:47:9a:c8:d7:13:27:84:6a:04:ad:d8:11:b3:
a1:64:4b:36:2f:51:01:e7:56:c6:5d:dd:e3:ba:75:
f6:a9:3f:94:dc:26:eb:d9:f7:51:8c:88:f9:80:fa:
12:2a:4a:a3:78:c2:99:3e:b8:81:f4:65:87:a2:8c:
0d:4b:d0:fd:92:f1:c1:17:42:c6:e4:a0:62:e6:71:
d5:f2:27:1a:22:77:03:d3:81:4f:4e:25:29:66:bd:
53:7b:4f:f8:61:b4:a0:7e:e4:fe:ef:b7:45:05:42:
ea:44:aa:1b:9b:6f:c9:31:a4:37:41:50:ab:78:2a:
3f:ac:70:c6:ed:0c:16:ca:2b:e7:b4:5d:1c:76:16:
79:72:c4:61:3b:1c:4c:1d:30:fd:27:61:0a:9f:5a:
5f:1e:91:a9:9b:52:46:5e:0d:36:7c:5b:22:4d:e6:
19:83:85:64:33:16:9b:02:f7:a7:0b:09:e1:30:65:
58:ab:7c:1e:ac:38:dc:63:9f:ca:48:89:28:3f:59:
14:7d:f4:b4:ab:53:0d:ae:6c:9b:5a:d4:a9:9e:e4:
8d:4a:e1:b1:5b:10:9e:e8:fe:a8:95:32:a9:a7:95:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B4:70:62:1F:92:2E:67:F6:FE:10:BE:E9:78:00:C4:75:9A:51:D1
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nLRwYh-SLmf2_hC-6XgAxHWaUdE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c3:12:ea:5a:dd:3f:2d:65:64:e5:b9:b5:15:63:59:5d:d1:f3:
15:15:22:8f:f4:8d:43:e4:c7:fc:9b:84:d6:7f:87:de:9f:1e:
06:de:2a:47:39:8c:b7:b5:7e:e1:23:cc:1e:f7:e8:22:bb:1c:
b6:fd:b5:e6:46:04:56:34:90:fa:e3:bb:f1:48:95:28:53:c9:
4b:08:f8:2a:3f:2e:c5:79:e2:f0:16:2b:dd:16:0d:b7:2e:89:
ed:26:98:2c:75:be:a3:f6:6a:e4:71:60:da:5d:d2:4c:95:44:
54:3b:65:9d:53:9e:60:e8:85:6a:69:52:db:6b:30:49:29:7a:
90:e9:b8:a3:68:d2:af:30:32:50:5d:9a:7c:77:ca:a2:e1:5a:
4a:72:c2:bd:0f:53:87:7c:7e:7b:8a:77:d6:37:42:1e:9f:2f:
47:ce:89:5c:d5:3f:0d:0b:cc:78:bc:ac:b4:75:f0:b9:77:08:
fa:75:40:25:8c:99:c5:f5:9a:ee:cb:06:40:4c:74:7c:0c:06:
1e:57:e2:d4:d0:8e:60:d0:b2:af:91:41:61:1b:97:ca:bb:4f:
e4:f9:5d:45:31:03:5b:66:11:b6:95:59:b0:8b:a5:d4:c1:5b:
b6:d4:f4:25:10:c4:6b:40:6e:b2:e4:36:01:20:78:e1:21:07:
ad:ba:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org