Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/tItDghdh76W_cZ-epYxecONsFdc.roa
File: tItDghdh76W_cZ-epYxecONsFdc.roa (raw, json)
Hash identifier: O9I1vfB5GrGCpkSXHu1LZCU3uMfp7bgaHtQlOFV2cGU=
Subject key identifier: B4:8B:43:82:17:61:EF:A5:BF:71:9F:9E:A5:8C:5E:70:E3:6C:15:D7
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F52
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tItDghdh76W_cZ-epYxecONsFdc.roa
Signing time: Fri 01 Sep 2023 08:56:56 +0000
ROA not before: Fri 01 Sep 2023 08:56:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 218.168.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3922 (0xf52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B48B43821761EFA5BF719F9EA58C5E70E36C15D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3b:3b:58:ec:6c:1f:e9:e9:34:f0:d2:14:3e:
e1:8c:51:9a:b9:4f:11:6a:49:07:7b:df:3a:78:b6:
6f:08:11:f6:bc:d2:e0:33:1c:b2:ab:c4:a3:b1:57:
c7:5e:b4:77:3f:89:c7:44:f3:98:93:6a:10:35:b5:
9e:13:de:f7:cd:08:d7:50:9e:b6:76:04:26:04:4e:
f5:e9:c2:f0:59:0d:71:ba:21:d3:73:76:a4:f2:96:
76:ff:79:fc:bc:80:01:85:f9:23:a2:b5:05:3f:c8:
3a:fb:09:ef:8c:52:19:75:cd:81:6b:ee:9f:4b:bc:
7e:6c:bd:5f:6b:d3:74:0f:14:ce:7b:68:72:f6:b6:
00:47:19:17:27:f9:2a:1b:2a:6f:4e:5e:74:f8:4a:
41:de:4e:69:86:ea:ee:00:7e:eb:9b:6b:5b:05:aa:
a0:14:ab:1e:ea:ce:6a:8b:83:e0:f9:26:15:2d:24:
5e:85:c7:cb:4b:b4:53:25:54:19:e4:0d:6e:2b:b3:
52:b8:9f:f5:d2:69:0f:53:b6:07:aa:a6:d5:9e:72:
91:aa:97:f7:cf:57:55:f8:1e:14:cb:5b:04:b1:ca:
3c:ff:b5:44:76:6c:33:fb:b3:43:51:8d:33:ff:c2:
27:c5:f1:ff:6c:89:ce:60:d9:37:af:59:30:6e:ca:
8c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8B:43:82:17:61:EF:A5:BF:71:9F:9E:A5:8C:5E:70:E3:6C:15:D7
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tItDghdh76W_cZ-epYxecONsFdc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.168.0.0/13
Signature Algorithm: sha256WithRSAEncryption
c1:a5:9d:ec:76:18:8c:58:17:14:de:f5:26:1f:88:a7:e7:b0:
87:04:0a:af:0f:c9:31:37:c6:00:20:59:49:5b:b7:82:91:c9:
ac:f4:cf:c0:a9:53:75:83:bb:7b:ff:b6:b3:05:5a:94:4c:80:
6a:03:98:03:fc:20:32:da:ce:ca:24:ef:09:6c:6d:2a:d9:38:
a7:f9:62:d6:cf:c4:64:8f:f5:9f:7a:22:57:28:b0:c4:b6:2a:
6f:94:46:cf:95:41:ad:b4:7e:55:79:72:5c:87:18:49:e5:02:
64:8d:ac:3a:69:3c:2c:13:d1:9b:09:c9:92:aa:1c:23:77:59:
b2:64:49:6b:1b:4f:e8:90:7b:77:16:6f:f1:71:a4:8b:61:6d:
c0:b6:02:40:2f:3e:97:e3:e7:3d:e7:06:30:b6:12:7e:5c:ae:
af:93:b4:2b:8a:60:7f:dc:bc:d7:26:66:af:e8:d6:4e:35:15:
07:7d:5f:b9:bb:fd:f7:63:bb:25:76:3d:98:a6:d3:76:23:3a:
ca:fc:81:99:14:02:2c:32:aa:a9:52:f6:df:0f:33:3c:e1:76:
99:9f:f0:96:1b:fb:aa:3f:07:e8:ae:d9:cb:49:29:e2:38:0a:
9d:d2:83:5c:b8:9a:95:23:22:aa:62:4e:66:93:a6:a2:f7:03:
7d:8a:ab:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org