Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/AFRsJb0Vnv9kbz_ZhgzySQYfscI.roa
File: AFRsJb0Vnv9kbz_ZhgzySQYfscI.roa (raw, json)
Hash identifier: nwlMku7X2h18TgfKjA3j9xSyHI1t9EYwuVWdv+Wo+a4=
Subject key identifier: 00:54:6C:25:BD:15:9E:FF:64:6F:3F:D9:86:0C:F2:49:06:1F:B1:C2
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14AB
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AFRsJb0Vnv9kbz_ZhgzySQYfscI.roa
Signing time: Mon 10 Feb 2025 14:35:09 +0000
ROA not before: Mon 10 Feb 2025 14:35:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 198949
IP address blocks: 210.61.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5291 (0x14ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:09 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=00546C25BD159EFF646F3FD9860CF249061FB1C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:75:b3:40:52:9c:cb:e2:ef:29:fe:2b:6e:
4d:dd:11:23:47:fe:ff:8a:35:7c:bd:3f:04:52:c8:
cc:0b:e6:ab:7b:36:e4:dd:7b:6b:06:59:14:fc:53:
49:18:2f:7d:0f:99:03:d0:54:df:cc:e6:fb:82:02:
f2:1e:78:51:61:f0:f1:59:32:d2:c7:2b:a1:7e:19:
9e:4b:16:b4:c7:31:48:90:be:8f:99:65:c8:20:28:
d1:47:90:65:04:fc:8c:ba:47:40:39:4c:ba:2b:de:
14:34:31:46:1a:2e:22:52:7e:19:8b:89:9b:55:aa:
ba:ab:ef:a6:fe:aa:34:be:7d:ce:c1:6c:47:c9:dd:
69:6f:b6:76:70:a3:b6:4a:b5:fa:18:c8:ae:6a:d4:
5c:08:7c:0f:8e:56:04:84:6f:97:33:f1:8e:66:99:
4a:fa:7a:64:65:41:a7:ec:f8:4d:b7:51:72:bb:12:
66:6b:22:d3:ee:8b:be:90:5c:d6:09:bc:31:3e:70:
f1:10:53:43:4a:80:bd:4f:79:8b:a9:d4:c7:a5:85:
9a:86:94:0c:06:5c:66:d2:10:47:60:83:ba:68:47:
e0:ff:4b:8e:b0:fb:65:5d:6b:b1:c0:b3:89:0e:0b:
03:99:d0:4c:54:7b:49:d8:59:53:6c:34:65:d0:79:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:54:6C:25:BD:15:9E:FF:64:6F:3F:D9:86:0C:F2:49:06:1F:B1:C2
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AFRsJb0Vnv9kbz_ZhgzySQYfscI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.114.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:d7:2c:91:f6:fe:41:3a:47:74:0d:70:e8:82:9b:93:58:ad:
2f:b6:82:2a:e9:02:c1:62:06:2f:44:da:18:56:48:c4:b1:fa:
35:ca:ae:b4:eb:8a:cf:16:5f:ec:bc:df:9d:be:b0:e4:14:d3:
6e:02:95:79:19:4a:d0:59:95:d5:40:19:30:86:ed:f3:2d:00:
74:ac:9c:d2:eb:b2:99:59:c4:bf:33:ec:f5:c2:42:3a:bd:0b:
82:c9:27:03:a1:ce:e6:34:b8:dd:7e:f4:c0:ba:63:28:db:85:
d4:9a:52:73:4e:a4:20:4d:af:ec:9e:31:66:3a:8c:f7:47:0d:
f4:6f:54:ff:91:4c:2e:35:8b:68:1d:c6:7e:d3:1d:ed:17:f6:
96:75:aa:8d:df:c6:31:30:c9:38:b8:3d:1c:13:35:ce:bf:33:
ed:b3:30:47:ad:cb:7d:d4:89:32:f4:c7:d0:d8:71:6c:2b:eb:
2f:3a:6d:c3:9a:34:01:42:46:c8:15:ed:b8:ee:33:66:ef:be:
7d:02:69:90:4a:80:64:0a:dd:d7:8e:2c:aa:17:c0:7c:f6:23:
3f:3e:32:f6:f7:1c:a8:b5:c0:70:7c:10:2c:b8:75:f9:b3:63:
ea:63:68:32:a5:c5:eb:09:df:3e:91:c4:33:b8:1c:ff:e7:6a:
1f:98:fe:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:00 2025 by rpki-client on console.sobornost.net