Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ANAFE8fcCTUid8TdfTfbRLqQ4qM.roa
File: ANAFE8fcCTUid8TdfTfbRLqQ4qM.roa (raw, json)
Hash identifier: 18T/XnaUytHXlyhHgFqbbMlmtxMgp3H4aCw7gCOF9Z4=
Subject key identifier: 00:D0:05:13:C7:DC:09:35:22:77:C4:DD:7D:37:DB:44:BA:90:E2:A3
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 145F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ANAFE8fcCTUid8TdfTfbRLqQ4qM.roa
Signing time: Mon 10 Feb 2025 14:34:51 +0000
ROA not before: Mon 10 Feb 2025 14:34:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 21859
IP address blocks: 210.61.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5215 (0x145f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=00D00513C7DC09352277C4DD7D37DB44BA90E2A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:05:5e:87:d2:a7:c0:7a:1f:92:97:1b:2d:
c7:2a:c7:57:4e:3f:37:f5:d4:47:e2:51:6a:01:f5:
b8:93:5c:dd:85:b2:67:7e:39:c7:bd:2c:93:db:4b:
35:7e:e7:82:08:ca:cd:2e:e8:32:5f:33:20:a7:f2:
6f:6f:6f:e7:69:99:cf:82:75:e5:f8:32:e9:b2:eb:
9b:c5:a9:a5:2f:6c:d6:0c:5c:94:bf:49:c2:ae:9c:
35:0e:06:70:8a:93:85:27:93:f5:6c:3b:67:a6:2f:
62:7c:2b:01:4b:91:df:ed:08:5b:f0:6c:94:b3:7a:
44:29:e6:f8:b7:60:a7:58:06:43:69:84:4a:26:49:
98:2b:77:0f:09:5e:d6:7d:2c:cb:04:21:9e:58:56:
d1:1f:7c:44:a6:09:19:3f:16:75:99:7b:54:f0:a9:
b4:1b:ef:71:d7:79:e0:df:67:9d:82:3c:64:ba:fe:
35:68:cf:01:11:57:61:3a:2b:56:0b:ef:38:8b:2f:
a5:b6:6c:12:c1:38:5b:15:a6:95:b1:70:1f:48:d2:
02:74:7f:b3:db:b8:78:4b:36:f6:97:be:53:51:88:
04:ba:4b:cb:44:03:48:ae:80:94:24:bf:ac:5b:04:
e0:de:c7:67:d9:42:00:23:94:1d:8e:f8:68:e1:78:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D0:05:13:C7:DC:09:35:22:77:C4:DD:7D:37:DB:44:BA:90:E2:A3
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ANAFE8fcCTUid8TdfTfbRLqQ4qM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:52:a9:45:3e:c4:8a:c3:a4:e7:90:4d:ff:e4:00:cb:4d:28:
9f:bd:38:8a:75:0d:2c:7b:0a:18:91:eb:51:50:5b:ba:f9:9a:
ac:2e:3d:ea:7a:e4:c6:82:56:b8:d9:72:ca:3d:ee:54:3f:06:
18:38:db:f9:86:5c:58:6d:ee:e6:fc:17:3c:2e:9b:5e:a8:02:
ee:7d:f0:2a:fe:84:e5:de:30:ac:bd:66:fc:e9:17:c9:7d:f8:
e5:bc:f6:8f:a4:e0:ce:9a:dd:6d:6b:42:d4:ba:40:68:0c:cb:
29:5a:98:55:ec:34:a6:e3:4d:bd:5c:e5:2f:84:31:44:f2:db:
e8:15:79:13:87:ed:3a:3e:52:8b:40:db:bb:64:a0:89:35:fd:
cb:85:2e:83:2e:4e:40:50:d5:66:03:a0:8e:4a:c6:3c:62:45:
62:1b:52:6f:3f:77:8a:18:4c:87:06:44:2c:f1:f7:51:d5:51:
2b:82:c6:ef:c6:1a:be:79:1b:40:16:1c:e3:27:34:3c:fa:3d:
c3:96:9f:ae:dd:c4:10:ca:72:20:da:a7:29:ed:14:1c:e4:4a:
30:7e:b3:d1:cc:29:fe:7a:b9:02:94:8b:65:0c:08:ec:6c:3c:
4e:51:fe:db:87:8a:e7:76:0b:80:13:9b:f0:09:e5:13:0a:d3:
67:8a:4e:11
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICFF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM0NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAwRDAwNTEzQzdEQzA5
MzUyMjc3QzRERDdEMzdEQjQ0QkE5MEUyQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeJgVeh9KnwHofkpcbLccqx1dOPzf11EfiUWoB9biTXN2Fsmd+
Oce9LJPbSzV+54IIys0u6DJfMyCn8m9vb+dpmc+CdeX4Mumy65vFqaUvbNYMXJS/
ScKunDUOBnCKk4Unk/VsO2emL2J8KwFLkd/tCFvwbJSzekQp5vi3YKdYBkNphEom
SZgrdw8JXtZ9LMsEIZ5YVtEffESmCRk/FnWZe1TwqbQb73HXeeDfZ52CPGS6/jVo
zwERV2E6K1YL7ziLL6W2bBLBOFsVppWxcB9I0gJ0f7PbuHhLNvaXvlNRiAS6S8tE
A0iugJQkv6xbBODex2fZQgAjlB2O+GjheEnpAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUANAFE8fcCTUid8TdfTfbRLqQ4qMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9BTkFGRThmY0NUVWlkOFRkZlRm
YlJMcVE0cU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j1o
MA0GCSqGSIb3DQEBCwUAA4IBAQClUqlFPsSKw6TnkE3/5ADLTSifvTiKdQ0sewoY
ketRUFu6+ZqsLj3qeuTGgla42XLKPe5UPwYYONv5hlxYbe7m/Bc8LpteqALuffAq
/oTl3jCsvWb86RfJffjlvPaPpODOmt1ta0LUukBoDMspWphV7DSm4029XOUvhDFE
8tvoFXkTh+06PlKLQNu7ZKCJNf3LhS6DLk5AUNVmA6COSsY8YkViG1JvP3eKGEyH
BkQs8fdR1VErgsbvxhq+eRtAFhzjJzQ8+j3Dlp+u3cQQynIg2qcp7RQc5EowfrPR
zCn+erkClItlDAjsbDxOUf7bh4rndguAE5vwCeUTCtNnik4R
-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:00 2025 by rpki-client on console.sobornost.net