Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/8QLW1X3Ps0kb421tMAvNe12AZ-E.roa
File: 8QLW1X3Ps0kb421tMAvNe12AZ-E.roa (raw, json)
Hash identifier: SER5gg/ohNx7yNcwen/XF0I1gEEDRwhPp7uGnAt/PyA=
Subject key identifier: F1:02:D6:D5:7D:CF:B3:49:1B:E3:6D:6D:30:0B:CD:7B:5D:80:67:E1
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14B0
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8QLW1X3Ps0kb421tMAvNe12AZ-E.roa
Signing time: Mon 10 Feb 2025 14:35:10 +0000
ROA not before: Mon 10 Feb 2025 14:35:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17421
IP address blocks: 2001:b400::/23 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5296 (0x14b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:10 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F102D6D57DCFB3491BE36D6D300BCD7B5D8067E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:71:55:fc:09:cf:e6:16:38:9b:2c:32:4a:
b5:7b:9f:a2:91:65:ff:14:13:20:df:d3:1c:43:1e:
34:38:e8:12:f7:56:77:0b:49:60:b8:59:53:61:56:
8e:aa:ce:79:33:a9:56:5f:89:05:4e:43:fc:e5:e8:
e8:6f:2f:02:1f:27:a4:8e:29:f9:ab:7d:44:17:0f:
d8:5a:76:a0:bc:4e:93:cb:a1:43:fc:6b:80:1d:7e:
02:3b:f7:0e:ad:08:e2:51:a3:2e:5f:c0:a5:ef:f3:
e1:b7:f5:05:48:dc:e6:05:d0:27:e2:79:fb:03:b4:
72:71:36:56:79:9a:d2:34:d2:e9:3a:d9:d8:c2:55:
8f:a9:26:95:f6:f8:b2:6f:8e:9a:dd:2b:d5:4f:ee:
72:d0:40:50:41:a7:d3:c7:03:b3:12:1a:f1:fd:1f:
b8:0d:0b:f8:6d:47:0e:9f:e3:20:46:ae:0f:cb:fd:
ed:56:49:44:6e:69:38:00:13:55:c0:5f:99:59:d4:
ea:e6:44:5e:40:3b:59:26:c4:dc:9f:6e:da:af:44:
b0:3d:ae:88:3c:07:93:14:b2:07:3f:eb:19:78:bb:
73:53:a6:de:33:be:53:88:5f:4e:71:b0:91:4a:f4:
70:1f:02:ea:8a:5d:8e:18:af:eb:52:9d:fa:0d:86:
2e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:02:D6:D5:7D:CF:B3:49:1B:E3:6D:6D:30:0B:CD:7B:5D:80:67:E1
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8QLW1X3Ps0kb421tMAvNe12AZ-E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b400::/23
Signature Algorithm: sha256WithRSAEncryption
3c:78:75:9c:5e:fe:e9:08:9c:29:e7:d9:f4:78:8f:d3:bb:65:
12:d4:18:dc:34:d1:2d:b5:89:51:65:bb:02:f6:c2:de:b7:e4:
e2:6e:d9:65:34:73:39:b8:41:98:a5:3f:61:02:b5:23:f5:f7:
0b:74:3d:da:f1:99:b3:a4:01:96:ad:20:ad:70:bf:2f:27:23:
1f:93:d2:f2:77:cc:c8:74:17:27:db:03:15:8b:09:03:43:86:
3f:a7:54:72:de:21:6f:0a:3c:4f:a7:44:12:ee:e4:bd:01:76:
25:19:13:4a:d3:c7:8d:d7:c0:ec:31:74:15:fa:bf:53:7c:15:
a3:3e:a0:ff:43:94:a0:26:ec:ba:e1:02:6f:40:b5:c6:d4:8f:
7a:3c:eb:6e:b4:ad:97:ee:20:20:fa:41:1b:e4:ea:1c:fa:31:
f0:c9:59:e1:74:23:66:18:07:9a:2e:80:c9:b1:65:61:28:fc:
30:ba:30:dd:5c:a2:5a:3b:a9:e6:89:d1:b3:82:06:bd:d9:40:
f9:48:05:63:52:a9:44:de:86:68:ed:35:45:13:26:69:60:b9:
96:43:1a:be:14:d9:71:49:95:4b:1c:49:4f:4d:37:0c:7a:92:
2b:83:27:c9:18:2d:87:f5:78:65:0f:f0:10:20:13:53:62:0b:
e9:0c:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:00 2025 by rpki-client on console.sobornost.net