Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/6KWi5OyH8nz682-7JtUTjyIFuXY.roa
File: 6KWi5OyH8nz682-7JtUTjyIFuXY.roa (raw, json)
Hash identifier: fWc1c41iW9kDRsiabHa3XstgcUo2zWUDDuRLg90RJXk=
Subject key identifier: E8:A5:A2:E4:EC:87:F2:7C:FA:F3:6F:BB:26:D5:13:8F:22:05:B9:76
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14D7
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6KWi5OyH8nz682-7JtUTjyIFuXY.roa
Signing time: Mon 10 Feb 2025 14:35:20 +0000
ROA not before: Mon 10 Feb 2025 14:35:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 43.255.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5335 (0x14d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:20 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E8A5A2E4EC87F27CFAF36FBB26D5138F2205B976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:be:e5:7a:2b:cf:30:da:9f:e9:da:67:71:
59:46:ed:9b:cd:f8:65:d8:2f:86:aa:ec:88:78:7f:
6b:1e:75:f7:39:7c:8f:c2:61:39:e8:8c:f0:ed:1c:
3b:91:bf:47:12:7a:d6:27:8e:75:3c:99:ed:60:3c:
01:fa:1d:34:a5:54:47:f7:94:99:f2:2c:3b:8a:a1:
19:57:07:66:fb:33:da:d9:8d:94:6b:eb:d0:c2:7e:
84:21:ea:dc:d7:4b:e2:00:54:ad:b7:a9:ee:6d:e3:
b9:34:41:3c:d6:96:8e:72:86:9e:7d:12:0c:76:a2:
13:37:21:3e:95:a8:27:b6:7b:52:62:8e:1e:ce:50:
15:e4:33:13:fa:d0:ac:c3:f7:72:92:cd:59:64:65:
ff:6f:0b:42:60:1b:73:b1:e0:d6:4d:9b:f8:c4:4e:
4f:c6:81:a1:b8:d7:1f:dc:a7:7f:29:f0:35:a7:c6:
c2:79:99:5b:6a:5e:91:8a:46:d8:5d:e0:ed:89:ea:
81:50:52:1a:01:cf:51:1b:3e:cb:a9:cd:4d:3c:ed:
1d:b5:9a:c8:42:9a:41:b6:c9:55:8b:c9:a0:71:58:
e9:19:d6:f6:61:fe:b3:00:db:b2:38:e2:c2:4c:aa:
3c:e6:d0:7e:8f:0f:65:83:f8:41:4a:c4:12:97:4d:
3e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A5:A2:E4:EC:87:F2:7C:FA:F3:6F:BB:26:D5:13:8F:22:05:B9:76
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6KWi5OyH8nz682-7JtUTjyIFuXY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:06:dc:92:95:9a:20:76:45:5a:59:f3:07:96:9b:a0:f7:27:
42:ff:4b:cd:7c:4e:fc:6d:80:87:be:7a:86:ed:67:db:ba:c7:
ba:6a:1f:b3:6f:03:c1:fe:2a:09:27:4d:c9:6b:7a:08:66:be:
80:e4:89:b1:82:22:e0:50:c6:ce:74:33:10:33:09:7f:a2:6a:
ba:2e:f9:7c:67:99:51:e0:53:78:29:95:41:9d:f1:4a:04:4e:
3c:16:5e:45:77:be:4b:5a:69:24:e6:ca:20:a5:58:3a:91:7a:
a2:2b:99:99:fd:b9:c0:b1:00:9f:bc:78:ed:f9:bd:62:4f:2b:
c6:b1:55:dc:e7:a0:4a:65:ba:f7:c2:97:9b:b0:30:c6:15:b1:
8b:12:80:d8:8f:c9:d7:2c:29:57:68:32:0c:73:6d:91:16:2b:
8a:76:cf:9c:fd:ce:f3:2b:f6:2a:67:4f:21:e2:67:7a:1c:91:
21:98:b2:c4:30:bc:54:7f:3b:87:16:22:b4:84:dc:8c:99:24:
d7:cd:b5:d8:1b:77:fe:3f:ba:dc:8c:75:a8:e0:b0:c5:12:10:
4f:1b:24:76:ab:d3:f9:32:fe:5f:9a:57:13:87:59:9f:03:e4:
a3:db:56:52:29:87:7b:47:61:a2:ec:47:17:3c:be:59:3e:8f:
fd:7a:bf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:00 2025 by rpki-client on console.sobornost.net