Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/zrhFXDrUKtXEbMjNUSKvobVjuuU.roa
File: zrhFXDrUKtXEbMjNUSKvobVjuuU.roa (raw, json)
Hash identifier: FpLo/edxYTKOppAzlulrdNndFqR5DkA49YkJLFxKITw=
Subject key identifier: CE:B8:45:5C:3A:D4:2A:D5:C4:6C:C8:CD:51:22:AF:A1:B5:63:BA:E5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0F65
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/zrhFXDrUKtXEbMjNUSKvobVjuuU.roa
Signing time: Fri 01 Sep 2023 08:57:01 +0000
ROA not before: Fri 01 Sep 2023 08:57:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 142005
IP address blocks: 210.61.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3941 (0xf65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 1 08:57:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CEB8455C3AD42AD5C46CC8CD5122AFA1B563BAE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:70:58:ff:d2:2f:b1:03:66:93:7c:67:ea:
f9:0a:1e:04:b5:6a:87:fc:52:dd:64:80:b6:04:c4:
a8:f9:ad:63:e6:c4:63:83:9e:47:d7:b0:a4:77:f4:
38:36:ac:a9:e8:93:d7:f3:9d:e0:af:ff:4f:1b:dd:
c1:21:b8:00:22:a7:08:bc:d5:eb:82:8e:5d:e2:5f:
20:3d:18:be:b6:68:be:f0:bf:20:17:b3:23:4e:a4:
d3:b1:ec:94:63:f7:ff:ea:9c:b8:e0:81:3f:7d:89:
e6:96:b4:b0:d3:b2:49:5f:e7:17:37:83:55:34:46:
c2:2e:92:56:f8:07:13:1f:0d:82:ee:8f:70:ae:c1:
b9:0a:25:93:bd:52:17:77:0f:d2:f8:ef:1a:8f:d2:
17:38:a7:30:2d:9a:87:eb:d3:f6:94:b2:e0:bf:81:
21:e4:dc:ea:b0:a3:fd:33:08:09:da:98:62:8a:21:
eb:a4:74:22:66:0a:fa:5f:3f:e7:e2:9c:d3:3f:47:
79:c9:d4:84:a4:5c:a3:73:bb:c4:30:6e:2f:96:76:
fa:0f:bd:0a:59:58:61:94:a9:65:44:97:1b:19:36:
d7:c0:1b:ab:2c:3e:28:23:63:95:61:3b:c7:98:70:
a6:94:2c:89:a0:2c:8c:79:1b:80:86:39:93:bb:49:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:45:5C:3A:D4:2A:D5:C4:6C:C8:CD:51:22:AF:A1:B5:63:BA:E5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/zrhFXDrUKtXEbMjNUSKvobVjuuU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.107.0/24
Signature Algorithm: sha256WithRSAEncryption
89:4d:cf:c1:bf:79:fc:14:c7:35:d7:32:22:14:17:ef:f0:54:
c4:6d:19:23:e6:bf:e2:32:77:1f:38:4e:c0:f0:b2:a1:90:ae:
57:f7:73:bd:3f:d2:e0:a8:71:12:1b:20:7f:c4:cf:3d:b7:f6:
60:21:85:f4:d8:69:5c:e3:73:27:cc:02:93:5a:74:a0:b9:6d:
78:dd:0e:9a:1f:23:bd:8e:8a:9f:49:bf:17:0b:e5:c6:fe:54:
21:dd:94:0c:11:0b:07:cd:19:68:16:f3:a8:3a:07:0b:59:5b:
87:ab:d8:f1:f0:78:6b:a3:b4:2f:f0:43:c1:fe:ac:3a:f5:c1:
34:a6:9c:e3:e6:c8:6d:3c:b6:de:a8:e8:6d:75:93:78:f3:a7:
35:af:b4:95:08:84:b0:61:b6:6f:49:d9:3e:32:92:54:77:fe:
79:a9:49:17:31:19:52:6b:85:e1:f7:c0:9e:6a:b0:59:6f:c0:
f4:0d:8c:17:69:86:19:26:54:dd:3b:0d:20:91:cf:0a:fd:b1:
65:42:3b:7e:44:ae:ea:13:7d:26:33:d0:e0:70:a6:ed:33:01:
54:b1:1f:56:1a:8d:2c:18:f0:db:f0:4d:29:be:23:2d:fa:48:
52:d9:c7:09:1e:24:0d:06:8b:c1:94:ce:79:c5:03:41:ee:04:
42:45:31:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org