Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/yrS6cYaqXE7w84NJCjj2RfBOM3Q.roa
File: yrS6cYaqXE7w84NJCjj2RfBOM3Q.roa (raw, json)
Hash identifier: vs46lLp4Csb/H13FIwk7PM5k2hnq48DSV5bQVc2N9L8=
Subject key identifier: CA:B4:BA:71:86:AA:5C:4E:F0:F3:83:49:0A:38:F6:45:F0:4E:33:74
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F33
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/yrS6cYaqXE7w84NJCjj2RfBOM3Q.roa
Signing time: Fri 01 Sep 2023 08:56:44 +0000
ROA not before: Fri 01 Sep 2023 08:56:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9505
IP address blocks: 175.41.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3891 (0xf33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:56:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CAB4BA7186AA5C4EF0F383490A38F645F04E3374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:99:1d:4c:c8:5e:42:32:a4:44:40:9a:1d:
f5:c5:05:50:c0:29:c1:d9:c9:1c:d3:c1:83:82:09:
6b:4d:21:39:b5:4d:51:e8:79:5c:d0:84:9d:0e:49:
86:38:cc:aa:bf:d0:e7:12:43:a9:d2:09:c3:03:08:
a4:a7:0e:49:a0:a6:87:dd:32:7c:d4:76:99:cb:d4:
ba:e7:36:2a:89:d5:9c:bb:69:32:3f:fc:60:00:4b:
c3:4b:08:c1:7a:8d:83:13:b9:ea:0a:89:d1:72:fa:
40:13:d0:b7:3e:d4:ff:68:fb:91:4b:6b:95:00:61:
f9:2f:07:2c:75:ea:99:2d:6c:d1:b8:92:3d:f9:a6:
ae:74:33:e9:6f:0f:91:26:61:1b:a2:ae:e7:64:7c:
b3:a4:48:df:f1:51:f5:07:16:93:22:38:c2:21:d4:
80:1d:a9:f1:a9:f9:1c:58:8e:91:29:f2:be:5a:fd:
f9:df:c8:b9:60:08:7f:22:71:dd:b1:16:7a:63:98:
9c:f3:46:0f:0b:e5:2e:a4:43:8e:71:54:bf:14:ce:
8f:51:5b:0a:f3:39:61:83:32:3f:21:cb:99:42:df:
c2:1b:c6:0b:b2:13:d6:5e:2f:df:3c:0a:75:c8:46:
5d:a4:f3:3c:4d:c8:18:45:5d:c2:47:ff:8d:29:92:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B4:BA:71:86:AA:5C:4E:F0:F3:83:49:0A:38:F6:45:F0:4E:33:74
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/yrS6cYaqXE7w84NJCjj2RfBOM3Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.41.48.0/20
Signature Algorithm: sha256WithRSAEncryption
93:e3:48:ee:55:87:35:da:4c:30:9c:69:ba:ce:4c:e7:d4:83:
d4:0d:70:e6:62:eb:15:6b:98:33:69:62:d8:90:fc:49:fd:01:
99:b6:c9:f2:59:0e:f3:3f:02:12:87:4c:a6:6d:22:da:81:0e:
1f:42:56:ed:52:da:4a:56:a3:dd:34:e8:34:bd:34:8f:cd:bc:
f5:b5:d0:90:94:20:23:ea:de:19:53:8c:e4:99:66:e4:a2:97:
18:2d:6f:33:2f:55:85:a4:3c:f8:32:5a:db:a3:af:51:8e:d8:
b8:11:da:b3:16:5f:f3:64:0a:51:db:d5:d3:75:23:84:d2:6f:
e8:af:bf:b5:aa:38:3d:c7:63:ec:f6:7e:2b:a3:64:15:6c:d9:
49:61:39:1e:ce:b2:7d:db:ee:3b:07:8d:8f:cf:b6:a0:50:d1:
ec:1c:0b:f5:bb:f1:6c:57:4e:43:d3:42:28:ac:b5:c0:fd:ea:
8b:40:cf:f1:b6:44:fc:1f:a9:bf:87:13:39:a4:4d:74:ee:59:
fd:88:68:ef:f5:11:ba:c4:cc:9e:3f:17:4c:4a:8e:42:d6:0d:
27:fd:1f:9d:99:84:1b:4c:73:7e:be:aa:78:09:a4:3a:6d:c8:
40:48:89:a9:b3:77:c1:66:59:4f:e3:c8:56:75:4e:c5:4f:c1:
62:f3:40:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org