Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/saLx6nlamRwVx1AZOcBB-Nihb7U.roa
File: saLx6nlamRwVx1AZOcBB-Nihb7U.roa (raw, json)
Hash identifier: tkPpef41RZITWkDidRGj2xkl8ouZcv+L7eaYLdltaYY=
Subject key identifier: B1:A2:F1:EA:79:5A:99:1C:15:C7:50:19:39:C0:41:F8:D8:A1:6F:B5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FA2
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/saLx6nlamRwVx1AZOcBB-Nihb7U.roa
Signing time: Fri 01 Sep 2023 08:57:19 +0000
ROA not before: Fri 01 Sep 2023 08:57:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17421
IP address blocks: 116.59.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4002 (0xfa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B1A2F1EA795A991C15C7501939C041F8D8A16FB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:96:49:57:2a:51:fb:af:a8:c1:97:24:f9:
3d:b5:ee:93:1c:15:b9:07:40:eb:ce:44:75:70:db:
9b:88:be:6e:45:79:38:d9:e3:9c:b5:4c:b3:40:e0:
85:ee:4e:2c:60:b8:32:17:c9:a2:64:5b:55:71:8b:
9d:45:10:dc:15:f7:b4:84:02:8d:8a:f9:b9:46:d7:
58:f8:6c:ed:56:ea:cc:84:fc:25:b6:22:5c:f8:07:
fa:53:d1:32:42:57:d5:31:5e:a1:2f:3b:40:c7:5a:
f4:34:7e:d2:91:20:ab:5a:f9:64:18:ad:2a:f1:8a:
53:5c:55:a4:1d:ba:78:17:a3:49:37:6a:ed:51:7a:
df:91:b5:12:a2:9d:bd:eb:72:b5:c8:58:07:07:90:
f3:63:a4:df:a2:de:d5:c3:e1:75:cd:23:64:85:78:
27:d7:96:5c:d2:a3:e1:63:6f:21:de:15:03:3d:96:
a4:d5:8f:7f:28:e9:34:f4:54:d5:75:0d:fa:92:56:
57:60:11:bc:3d:b6:2a:6b:71:d1:0e:fc:d1:dc:37:
d1:fa:f0:a9:67:3c:97:70:a2:53:7d:90:c0:19:fc:
9d:5b:0c:02:ae:96:f7:3d:69:10:d1:87:1f:8b:c6:
1f:0c:aa:ce:bf:0d:62:67:a6:ef:95:02:7c:87:4b:
7c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A2:F1:EA:79:5A:99:1C:15:C7:50:19:39:C0:41:F8:D8:A1:6F:B5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/saLx6nlamRwVx1AZOcBB-Nihb7U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
116.59.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:32:f5:18:56:ea:cd:57:a8:8e:81:84:12:07:30:4d:52:dd:
8a:00:2d:bf:6b:8f:a3:2c:cc:65:fe:26:80:81:7c:bb:2c:fd:
fe:a5:fe:f9:10:83:5a:e7:1d:06:80:16:85:76:20:55:c6:97:
a1:d1:24:4c:d7:d2:b0:57:4f:47:a4:41:2c:d4:6a:80:37:18:
52:cf:58:5e:76:77:34:d0:c8:cc:a0:e0:32:e8:b7:d8:f2:02:
5f:69:74:2a:5b:02:75:17:fe:1e:9a:7b:71:37:85:a6:c6:fe:
15:36:2a:24:0c:6d:c3:cc:73:d5:b9:8f:40:7b:db:26:4d:36:
92:0b:65:df:eb:a4:4e:2c:91:87:52:0e:1a:da:44:2c:da:78:
46:34:08:9c:3f:c4:96:24:96:38:3a:00:06:03:a9:aa:9d:a1:
2e:64:a7:00:48:ce:45:b8:d2:ef:61:2c:25:e3:47:5d:c6:3e:
72:ee:ef:cf:42:2b:68:da:f4:b4:c8:6e:18:95:5c:8e:03:07:
08:9c:3a:69:9e:d9:d4:30:f9:05:2e:55:1f:52:4d:76:0c:66:
71:a2:86:47:4a:be:1b:28:f1:df:a5:96:69:2f:ca:74:5d:d4:
b8:d4:2f:ea:30:c6:31:5e:10:c6:0a:d8:dd:64:a2:4d:41:5e:
9a:52:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org