Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/nZRJ-CnEGp4q1Pb26ILJW9hH8e4.roa
File: nZRJ-CnEGp4q1Pb26ILJW9hH8e4.roa (raw, json)
Hash identifier: l+ifMi29DuIA1JzYJQEuOV16Yp2XwEQM/TzfFYBtcwo=
Subject key identifier: 9D:94:49:F8:29:C4:1A:9E:2A:D4:F6:F6:E8:82:C9:5B:D8:47:F1:EE
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F2C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nZRJ-CnEGp4q1Pb26ILJW9hH8e4.roa
Signing time: Fri 01 Sep 2023 08:56:42 +0000
ROA not before: Fri 01 Sep 2023 08:56:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 1.160.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3884 (0xf2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9D9449F829C41A9E2AD4F6F6E882C95BD847F1EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:a6:57:f4:2f:65:08:a4:b9:99:54:fd:b3:
aa:1d:4b:97:c4:bf:bb:4c:42:b9:f3:9c:ba:8e:41:
95:ea:32:ad:20:21:8e:46:9a:58:ca:04:16:ea:c5:
57:cc:b3:77:15:04:d7:7b:58:d6:62:95:6c:ba:81:
7d:55:56:8f:77:d7:5a:84:d7:77:a5:83:92:ad:f6:
42:99:0f:b5:8a:cc:f8:5f:e2:82:b3:29:d8:b6:21:
5d:58:49:1d:ed:7b:80:4f:a7:ad:ae:30:d1:fa:9e:
71:79:53:5b:17:15:d2:59:20:cf:84:0e:b1:f4:fb:
f4:af:0a:5f:96:a4:6e:e6:97:50:f5:fd:70:a6:26:
67:a3:5c:79:68:e3:62:25:43:c5:fc:15:9a:f1:98:
b3:b0:30:d6:1f:8e:85:53:9f:34:a6:7c:4b:31:07:
71:2a:b7:f0:e0:90:df:82:f0:10:4b:2f:ac:98:a4:
11:40:02:d9:c5:22:6d:5e:c6:54:b5:94:d5:6d:ce:
75:e4:25:76:50:53:7a:1c:e7:8c:cd:05:65:93:6d:
e6:ef:b3:53:8a:48:91:8e:be:6e:08:b1:85:b2:53:
e8:e9:ca:ca:e7:ef:9c:85:e1:91:1a:b0:c9:df:44:
07:f7:65:2a:d5:70:3e:27:e1:0e:3b:b6:98:7f:c6:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:94:49:F8:29:C4:1A:9E:2A:D4:F6:F6:E8:82:C9:5B:D8:47:F1:EE
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/nZRJ-CnEGp4q1Pb26ILJW9hH8e4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.160.0.0/12
Signature Algorithm: sha256WithRSAEncryption
0d:65:65:b4:bd:89:ac:75:a2:23:18:e3:ec:a4:b1:98:39:a4:
70:19:52:23:65:5b:1e:ce:11:4a:f7:67:1d:51:96:9b:40:9d:
b0:74:84:f0:9d:2b:37:e7:ed:eb:47:f5:5c:ab:eb:43:be:87:
23:0f:8d:75:8a:8d:b4:f5:b2:91:c2:69:c8:4d:6b:21:0c:87:
1f:0e:33:77:90:89:a9:28:35:e5:b1:62:45:44:b0:25:9d:44:
fc:cb:fc:2f:c2:34:02:ea:41:de:5a:ff:fa:57:ec:ba:b4:a5:
fd:24:ef:7e:c9:a2:46:31:6c:1d:0f:4c:62:a9:0a:cd:c0:ae:
d7:63:98:ff:1d:99:d8:b1:19:6d:11:88:fe:af:ab:c5:3e:51:
91:86:ef:b8:49:0f:6a:e6:cb:86:2d:e2:b9:b1:d4:61:0a:a0:
01:1a:79:73:61:e5:34:9d:69:f7:a1:fc:35:6e:10:fa:2a:fd:
42:91:f9:d7:69:67:0b:39:07:a3:a0:f5:ac:f1:55:14:91:f0:
c2:21:00:27:2a:04:71:3d:fe:ce:5c:8f:90:c5:a5:1a:6c:aa:
5b:df:47:e0:cd:5b:e8:bc:e3:66:66:19:25:7f:fb:07:75:1c:
54:21:81:5b:57:2a:54:c5:b9:9c:31:d9:4f:3a:4e:b5:f7:6e:
3a:de:89:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org