Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/7_1u4jMMnW-puET8JhEq3JGGhnA.roa
File: 7_1u4jMMnW-puET8JhEq3JGGhnA.roa (raw, json)
Hash identifier: BjaQA9eAt/2ITDy21tlJFM3u8R1VPhVMzYG5vj2AHTw=
Subject key identifier: EF:FD:6E:E2:33:0C:9D:6F:A9:B8:44:FC:26:11:2A:DC:91:86:86:70
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14A2
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7_1u4jMMnW-puET8JhEq3JGGhnA.roa
Signing time: Mon 10 Feb 2025 14:35:07 +0000
ROA not before: Mon 10 Feb 2025 14:35:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 221.120.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5282 (0x14a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:07 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EFFD6EE2330C9D6FA9B844FC26112ADC91868670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:d5:64:57:da:b0:94:f0:3e:07:0e:7b:c2:
86:17:18:a3:64:3b:7d:5f:dc:41:17:89:06:b0:e3:
8b:4a:9d:60:f7:fe:e1:97:8b:6b:34:d4:87:01:cb:
cb:f2:9e:74:90:98:61:c1:08:8a:78:a9:b3:75:28:
08:8b:55:21:61:1e:f9:19:21:0f:dc:e4:75:5d:c9:
a9:73:d8:e6:32:3a:d7:4b:3e:e4:23:96:d8:cb:e3:
9b:f5:cc:35:89:e0:10:e1:f7:58:60:5d:06:9a:07:
ee:fc:48:b4:7b:4b:85:cb:aa:fb:5e:a7:5e:46:1e:
fc:4b:b8:68:16:bf:15:c9:25:af:6e:5d:d8:07:f5:
e0:48:50:f9:ba:66:27:89:2d:75:af:cc:32:36:3b:
2f:6f:18:d7:5d:07:22:a7:00:6a:44:93:6d:af:14:
1d:e0:9a:be:36:92:b3:04:c1:11:fc:52:c0:fe:95:
14:02:71:25:1b:b3:38:71:bd:0c:b6:49:68:c9:96:
64:c4:c2:25:2b:42:4f:a0:21:9a:13:89:fd:38:03:
6c:46:57:f3:43:0e:2e:24:8c:c1:3b:79:83:36:fd:
cc:f7:dc:0f:40:fc:af:ba:55:b5:2e:21:de:a4:d2:
12:ed:8c:3c:0a:0b:4b:8e:26:82:65:8f:33:bc:93:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FD:6E:E2:33:0C:9D:6F:A9:B8:44:FC:26:11:2A:DC:91:86:86:70
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/7_1u4jMMnW-puET8JhEq3JGGhnA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
221.120.21.0/24
Signature Algorithm: sha256WithRSAEncryption
97:48:49:90:8c:44:6d:d2:14:eb:4a:65:bf:d0:cb:65:14:14:
48:01:08:9b:78:06:df:8f:6f:1a:87:35:3c:21:00:80:6b:cb:
a5:c9:ca:18:eb:df:2d:c9:ca:41:64:37:11:02:43:29:00:e0:
18:87:4b:8d:1e:69:0c:73:6f:59:c7:43:2d:ac:5b:be:45:93:
d6:7b:d8:c6:00:5f:77:3f:ea:43:e0:3f:50:a5:02:9f:1d:ad:
f9:6d:96:2a:b3:45:ce:ab:f0:98:e0:02:00:e5:ef:15:54:b7:
64:2e:89:a1:81:22:c5:9a:16:c7:b3:62:7a:42:87:62:5b:2b:
67:41:af:27:d4:0c:b5:1b:36:43:db:da:f6:5c:ec:e9:bf:8d:
4b:3e:9a:82:16:5e:3b:36:9b:8e:98:7b:34:0b:37:af:be:76:
7b:f5:24:61:e6:c5:1e:a5:66:1d:22:d4:e3:38:aa:c7:d1:c5:
77:1b:eb:b8:60:e5:b9:4e:f8:a4:ab:62:62:a7:9d:54:2e:8a:
06:43:bd:0a:10:6f:de:57:11:59:63:13:84:8a:72:b0:ee:ef:
70:ff:7f:41:bf:3b:60:d9:30:7d:a4:d1:5b:42:59:47:32:45:
36:88:e1:d8:d5:a5:ff:18:c6:f6:cd:d1:2f:03:01:37:ee:af:
c7:35:74:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:00 2025 by rpki-client on console.sobornost.net