Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/wAJbkwEcgCT-WWnax4dOJIWdaLY.roa
File: wAJbkwEcgCT-WWnax4dOJIWdaLY.roa (raw, json)
Hash identifier: IuSiNVhHRhS1iI84PzYirQiZC6ovyjCIIN27IkK+rrI=
Subject key identifier: C0:02:5B:93:01:1C:80:24:FE:59:69:DA:C7:87:4E:24:85:9D:68:B6
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0FB1
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wAJbkwEcgCT-WWnax4dOJIWdaLY.roa
Signing time: Fri 01 Sep 2023 08:57:23 +0000
ROA not before: Fri 01 Sep 2023 08:57:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 36.224.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4017 (0xfb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C0025B93011C8024FE5969DAC7874E24859D68B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:49:d9:fd:6b:86:d3:ac:dd:ff:72:f6:3b:
8b:8c:20:5d:76:c3:ee:cd:7a:d1:4b:3b:f3:a4:3a:
7f:1c:5c:ef:32:e1:33:f5:5d:09:bc:f0:de:88:56:
4c:25:1e:00:02:b0:02:88:0a:48:85:86:46:27:29:
9e:51:e0:f2:fe:e0:72:72:c0:b5:59:04:b3:b7:62:
7e:bb:b1:9c:76:7e:ce:00:79:b7:c8:3d:32:f9:02:
82:f2:4f:3e:e3:95:29:4d:d5:86:6a:c7:b5:a0:16:
3f:af:37:22:69:77:e5:ca:ae:65:9e:9a:71:c9:67:
a8:af:4d:0d:a4:ea:fc:82:0d:b5:df:93:ea:32:52:
45:41:77:68:64:55:29:ca:7c:97:f9:29:3f:85:d5:
5f:63:17:c9:f9:92:b9:5d:14:b7:7e:a1:9f:a5:30:
96:71:ad:8a:fe:59:84:a0:f2:27:01:7b:47:87:92:
72:63:03:93:78:67:ec:61:fa:e4:58:fa:ce:be:7d:
b1:1d:e5:06:a1:a7:49:06:ea:6c:83:6a:56:9e:ea:
78:17:36:70:d9:2c:f3:88:ed:f3:93:c4:d9:01:39:
ed:1b:b6:f3:0b:c9:cb:85:3f:d8:79:6e:15:95:92:
93:04:bd:b5:e8:75:0e:2d:c3:01:ba:08:76:ab:2b:
c7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:02:5B:93:01:1C:80:24:FE:59:69:DA:C7:87:4E:24:85:9D:68:B6
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wAJbkwEcgCT-WWnax4dOJIWdaLY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.224.0.0/12
Signature Algorithm: sha256WithRSAEncryption
62:a4:48:e4:01:11:12:68:c5:c0:53:92:e3:f2:a8:4e:2e:21:
1c:a7:a8:a5:28:d4:f2:49:82:be:e2:40:5f:92:79:a6:22:df:
de:17:ff:44:46:d8:85:d3:41:8e:74:e5:e9:88:b8:a1:0a:81:
f6:80:65:b0:1e:30:fc:e0:6a:31:09:7a:87:a5:fd:8c:47:1f:
c1:98:ee:c8:7d:de:b8:ad:1a:d6:ef:dc:79:e8:5c:24:2a:51:
10:9d:31:a6:52:bc:16:87:d6:27:a9:5e:3c:0b:8b:51:72:ad:
f3:37:24:23:38:5a:72:a0:31:5e:54:16:30:3e:46:1d:57:62:
76:29:d7:81:3f:03:d3:eb:bd:e2:07:aa:89:89:b9:79:1b:5e:
cb:81:44:1a:43:ce:ef:37:a5:8e:45:3f:3c:fe:48:b0:0b:f2:
69:da:83:f1:f5:b6:b6:11:6d:7c:b5:e8:e9:46:dd:69:72:f3:
a8:37:fd:e6:e1:2b:b4:d0:3a:2b:4b:32:08:f9:0b:b9:f9:f1:
a3:fa:ab:f2:e3:fb:55:f7:2a:08:e8:bd:00:69:c7:88:d3:90:
18:f7:9b:e3:86:f7:77:a9:31:5c:ba:ae:af:55:5f:98:0b:f9:
50:e3:28:16:b0:e1:ec:df:cd:8d:71:06:67:2f:30:46:7e:3f:
0e:0e:d8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org