Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/5U4aZPbQa9R3-IyojuZOyAg82kU.roa
File: 5U4aZPbQa9R3-IyojuZOyAg82kU.roa (raw, json)
Hash identifier: Fm0qIwzHXRC/xjnTfMTm/23qlHQRgq5NcgKXmQGIsh8=
Subject key identifier: E5:4E:1A:64:F6:D0:6B:D4:77:F8:8C:A8:8E:E6:4E:C8:08:3C:DA:45
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 144F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/5U4aZPbQa9R3-IyojuZOyAg82kU.roa
Signing time: Mon 10 Feb 2025 14:34:48 +0000
ROA not before: Mon 10 Feb 2025 14:34:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17421
IP address blocks: 116.59.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5199 (0x144f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E54E1A64F6D06BD477F88CA88EE64EC8083CDA45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:67:5f:23:35:6a:49:54:95:ce:95:84:bc:
95:6a:6e:c1:79:0f:df:16:64:f1:70:21:e5:dc:9d:
8c:2b:6e:2d:e6:78:a9:4f:d9:11:29:db:d5:45:c0:
75:53:08:65:12:9f:48:7c:a0:20:01:7f:71:e8:37:
8d:8e:9e:d8:60:a4:42:52:4e:88:90:fe:97:c3:3a:
f3:90:ce:16:48:eb:5c:b7:af:e1:73:9b:bc:19:79:
1f:ab:11:7a:2e:a5:b6:50:38:60:c8:dd:51:10:25:
46:73:3c:15:c7:79:3f:f3:fe:99:ff:b3:ce:d6:83:
cf:73:fb:d0:41:f9:1e:5d:db:e4:57:28:ba:6e:29:
8e:cf:2b:a3:16:99:04:0f:68:4e:8f:30:45:87:24:
cf:75:74:b1:fe:c7:92:e7:b8:21:80:a5:fc:5a:1f:
07:0d:8d:03:11:6c:07:92:f3:64:31:5d:44:02:57:
e2:98:17:7d:2f:e9:3c:e6:eb:c2:92:c0:ac:7d:ef:
95:39:b3:d5:14:82:ff:c9:e8:59:8e:79:77:cb:24:
a7:3e:65:7d:d5:42:5e:71:3c:ba:a1:99:11:5d:da:
3e:d8:a3:86:bd:8f:9e:00:1b:00:3c:de:d5:6c:48:
6e:28:0d:93:a5:17:24:5a:c8:4c:11:6e:85:39:6e:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4E:1A:64:F6:D0:6B:D4:77:F8:8C:A8:8E:E6:4E:C8:08:3C:DA:45
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/5U4aZPbQa9R3-IyojuZOyAg82kU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
116.59.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:a8:1c:32:4b:0c:00:8a:06:b9:65:a2:5f:a6:9d:0b:e8:22:
a3:34:d6:f2:16:0d:3c:39:77:91:ec:1f:9c:c1:bb:5e:03:32:
07:b7:c4:31:9d:d6:28:cf:94:e1:c5:32:db:11:f1:4b:55:2d:
ce:a5:a0:76:24:79:a8:f5:29:79:02:0b:ac:bd:54:05:b2:a9:
e3:1c:85:83:07:aa:53:fe:93:c3:01:06:2e:63:f9:a6:6f:74:
c5:c3:5b:58:2d:3e:21:49:fe:8d:c4:3c:52:a2:74:ec:12:62:
02:2b:c5:fe:30:ee:c9:96:ce:02:bd:48:46:4d:ee:5d:86:7e:
fa:e9:15:a5:78:23:5b:65:1e:e5:f6:fa:b9:bb:06:b3:92:0f:
4c:af:a2:d3:69:80:f5:46:10:53:e3:ae:e6:a8:16:1b:18:1e:
4c:16:1c:92:fc:14:c2:d2:d6:b8:2f:f9:3c:c6:68:fc:ec:f3:
48:56:82:04:8e:d9:ba:b2:52:3a:21:6b:c0:5a:06:e0:3f:39:
aa:e4:e8:bd:18:6a:f4:b2:7c:e1:80:d5:b5:36:8e:a4:1b:c7:
05:7f:78:63:f3:24:0a:89:7d:af:8c:27:8f:ca:63:40:5a:cb:
3d:be:c4:96:9e:5d:7d:fa:e7:ee:9f:bc:1a:db:9c:13:dc:3c:
6b:d2:8f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:00 2025 by rpki-client on console.sobornost.net