Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Eif6qyUHqxbjDWB0vAKDuTQ8TZ8.roa
File: Eif6qyUHqxbjDWB0vAKDuTQ8TZ8.roa (raw, json)
Hash identifier: Zu0DrK+HLMVDZm2wMvGtxOao2G+5aAe0oYBfEhQv6DU=
Subject key identifier: 12:27:FA:AB:25:07:AB:16:E3:0D:60:74:BC:02:83:B9:34:3C:4D:9F
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14A8
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Eif6qyUHqxbjDWB0vAKDuTQ8TZ8.roa
Signing time: Mon 10 Feb 2025 14:35:09 +0000
ROA not before: Mon 10 Feb 2025 14:35:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 198949
IP address blocks: 210.242.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5288 (0x14a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:09 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1227FAAB2507AB16E30D6074BC0283B9343C4D9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1d:2f:20:47:44:6a:57:6e:bc:61:e0:f1:d5:
b3:a9:82:5d:95:ab:38:70:63:af:e1:bc:4e:54:74:
d6:3f:64:b7:b8:c0:09:39:b0:00:06:63:6a:e9:b3:
f8:d5:ae:cd:7a:42:d5:2d:7b:2c:fc:c3:d3:0f:83:
01:61:51:3c:76:8e:c9:d3:67:e8:3c:e6:d0:f9:05:
87:59:65:1d:d0:fb:6e:96:5a:ed:fc:45:45:d3:64:
cf:35:2e:bc:b9:d4:97:e3:ef:e0:a4:9c:4b:25:e0:
21:6c:ad:a0:88:3d:6a:9d:71:43:8f:25:aa:d0:42:
b3:aa:eb:f2:9e:89:6f:24:8f:7e:2e:95:27:f2:71:
5c:52:84:c1:27:85:28:bc:4d:60:e5:9d:c7:7d:06:
64:a4:ee:bb:4a:ba:6e:ec:59:ad:94:cc:be:5a:a6:
99:c1:6d:ad:7b:0c:3b:cc:18:95:9a:20:bd:cc:88:
89:10:f0:b9:1e:7d:7e:83:9b:74:54:40:34:0e:86:
0c:bd:79:6b:85:f9:cc:f5:68:ca:1b:ec:de:58:fe:
86:12:2b:87:62:37:8a:f4:3d:a0:2d:58:24:cc:58:
96:43:77:28:81:25:9c:0a:3c:30:c1:fb:ad:c7:83:
00:b2:4b:a2:4c:d7:89:7d:9f:28:93:ea:ce:89:ad:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:27:FA:AB:25:07:AB:16:E3:0D:60:74:BC:02:83:B9:34:3C:4D:9F
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Eif6qyUHqxbjDWB0vAKDuTQ8TZ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.118.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:05:f5:1e:99:a9:79:ba:e4:9b:7b:b2:b0:af:75:f5:5b:92:
71:86:cf:d0:e5:d1:20:81:b3:bd:13:a5:27:5d:45:b6:56:49:
05:ba:af:46:d8:aa:8b:67:38:89:c5:f5:f4:79:2d:91:96:47:
f3:16:c7:d7:d8:f9:ce:a6:4e:ab:bb:19:f3:d1:1e:b9:18:a8:
35:20:67:43:86:a1:2f:ab:0e:0a:e2:bd:ff:dc:99:5e:59:72:
2f:f9:06:7c:bc:64:ad:c9:37:0b:27:e7:a1:f9:5c:8e:dd:c2:
7d:a0:4e:ae:be:f1:13:f3:9e:6b:54:e5:e5:68:7f:13:a5:55:
e0:24:32:ca:74:29:21:ed:28:d5:2a:1e:fb:50:e0:4a:3f:c8:
a5:1f:da:b1:43:1a:7b:54:3a:a6:08:ad:74:31:6a:4a:16:57:
be:cf:14:38:a5:a0:33:e5:f3:4d:b4:65:07:1b:a7:d0:d5:68:
a6:50:ef:63:ff:2b:0c:d8:f0:e9:25:34:25:a4:b5:5f:1f:1a:
22:82:a7:f4:f9:c8:22:a2:61:76:e5:d6:26:7c:9a:83:72:18:
58:07:18:8d:18:9c:83:c4:25:2b:5d:bc:4d:25:ae:ee:ca:a6:
59:ad:3f:1b:ff:24:46:d5:ff:94:d4:f9:aa:91:be:93:b9:a8:
d2:5c:c1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net