Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/tV9bqKcHOtHVaRlv0CbyOsJHoEY.roa
File: tV9bqKcHOtHVaRlv0CbyOsJHoEY.roa (raw, json)
Hash identifier: DwVjgq6mdWaFk+guU0sfs+STTnEAnb3nJNIK3KNGbUo=
Subject key identifier: B5:5F:5B:A8:A7:07:3A:D1:D5:69:19:6F:D0:26:F2:3A:C2:47:A0:46
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F4F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tV9bqKcHOtHVaRlv0CbyOsJHoEY.roa
Signing time: Fri 01 Sep 2023 08:56:55 +0000
ROA not before: Fri 01 Sep 2023 08:56:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 61.218.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3919 (0xf4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B55F5BA8A7073AD1D569196FD026F23AC247A046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7a:d7:89:9a:12:a0:12:7e:67:84:6b:a5:c1:
1f:9b:07:65:b5:e8:da:d8:c2:ae:2d:58:8d:56:ab:
10:a0:98:a8:d7:96:98:47:a2:6c:69:ad:cd:8e:8d:
96:30:67:4e:7b:13:f5:36:3c:77:02:51:00:c8:12:
85:d6:99:a6:fc:f0:60:52:d4:e4:7d:1b:8c:50:3e:
d0:88:6a:f6:4a:66:ed:b0:dc:db:18:4e:a3:ff:57:
95:55:40:8c:36:bc:35:f9:ef:28:56:6f:6e:43:aa:
bc:80:87:2b:eb:e4:c7:7f:93:f7:d0:68:53:41:8b:
b5:22:fb:18:32:2a:33:bf:b4:b2:2f:72:c0:86:d7:
21:77:16:3e:bc:bb:49:07:13:34:b3:31:1c:cd:3c:
49:5f:59:1d:23:7e:25:0b:3f:01:64:b8:f9:8a:c4:
7b:f5:94:e4:2c:a9:32:83:f6:73:3c:e8:f7:19:36:
6a:d7:52:41:f0:6d:59:7b:da:65:a9:2a:dd:53:f4:
10:1a:5f:7f:8a:3b:94:c5:fb:e9:81:00:6c:79:5b:
18:52:70:5e:d2:25:47:8d:7e:af:99:88:25:a2:c3:
ce:ad:77:86:4f:b8:7a:a7:58:3d:19:70:61:6e:a3:
75:36:7a:4b:7d:bb:fb:64:2b:69:fe:1b:bd:34:84:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5F:5B:A8:A7:07:3A:D1:D5:69:19:6F:D0:26:F2:3A:C2:47:A0:46
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tV9bqKcHOtHVaRlv0CbyOsJHoEY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.218.0.0/15
Signature Algorithm: sha256WithRSAEncryption
68:91:85:07:a8:7b:20:66:c0:a2:a4:2b:91:4f:3f:46:6f:c7:
30:e7:06:fe:ed:16:cc:18:98:ba:eb:23:98:99:75:40:2b:3c:
9a:08:1e:83:6a:4c:c3:81:dd:9d:3d:1e:46:0d:d4:6b:b0:5a:
1f:9a:df:8f:0e:5d:96:14:ac:2e:c6:27:b6:37:61:b6:08:af:
63:b8:d4:fb:ab:70:06:b2:3e:cc:ea:a7:25:7b:fd:2f:5c:16:
29:82:a2:44:88:9e:0c:e2:dc:99:2a:b8:76:68:57:01:4d:6b:
4f:96:a8:5c:c6:23:31:22:0c:a3:9d:b5:a1:97:72:da:8c:25:
33:85:21:1e:bf:38:57:04:9b:09:f8:16:49:80:d1:10:67:bd:
00:8c:59:48:58:d2:32:56:26:7a:d8:03:a8:57:2b:22:50:17:
dc:ae:9b:b1:66:b2:3d:c2:51:23:89:61:8e:7f:00:d7:8d:21:
57:b9:0a:ad:3b:d9:f7:c8:23:96:6f:af:23:0c:98:9e:9a:af:
50:bb:1d:f5:c2:ec:40:c0:0b:4b:fc:bc:24:fc:2a:ca:4d:17:
70:8a:5c:c6:a8:d2:b8:a2:4b:de:9e:6f:00:b6:d8:5e:c0:f8:
77:ea:b5:93:0e:fd:90:ab:46:72:da:68:c4:2b:ce:57:ca:be:
9e:18:e3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org