Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/FGb9ZSb-ruzH_RM1fdXqzfmM0to.roa
File: FGb9ZSb-ruzH_RM1fdXqzfmM0to.roa (raw, json)
Hash identifier: PNBQdoScU/Q4vk7fNV7ZwEhQkicncuHFLWWe4DWNu00=
Subject key identifier: 14:66:FD:65:26:FE:AE:EC:C7:FD:13:35:7D:D5:EA:CD:F9:8C:D2:DA
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 148B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FGb9ZSb-ruzH_RM1fdXqzfmM0to.roa
Signing time: Mon 10 Feb 2025 14:35:01 +0000
ROA not before: Mon 10 Feb 2025 14:35:01 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17421
IP address blocks: 111.70.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5259 (0x148b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:01 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1466FD6526FEAEECC7FD13357DD5EACDF98CD2DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:93:92:f1:3a:e2:e2:c5:8d:bd:50:14:54:e7:
2d:79:5a:5d:29:ab:cc:40:bb:55:9c:c4:94:df:c2:
05:83:ca:eb:9e:8c:35:53:59:94:97:60:0f:c9:7c:
35:65:98:61:2d:c6:74:96:00:68:dc:54:54:93:57:
28:3d:3d:5c:76:e7:e8:af:2c:bd:a3:32:24:0a:63:
da:01:ba:30:b9:92:e3:ff:9b:79:06:1b:4f:43:75:
ec:f1:2c:6c:f4:71:28:47:f4:31:31:2c:58:0d:f1:
48:17:8a:b4:7f:4b:e2:6a:25:1f:66:32:15:67:0e:
81:1c:5a:aa:be:6d:ae:94:89:bf:fe:3d:d8:3b:ae:
de:85:83:be:f5:77:d4:04:e9:8f:ce:65:46:15:08:
8f:1f:59:88:6b:eb:03:6c:ca:53:75:ca:30:99:43:
e2:db:b2:cc:d1:cb:8f:52:5d:f6:ae:d4:b4:7b:e2:
1f:ee:7a:a9:c9:9c:24:10:05:a2:25:8d:66:c2:e0:
38:fe:ad:b1:c8:a2:02:9b:39:b8:ba:69:38:f5:b3:
0f:50:86:22:f7:47:fa:42:89:ba:6e:c7:2a:5c:34:
2e:f7:e7:b6:7b:f7:a7:f9:1e:c4:60:52:97:bd:f0:
1f:bc:a5:c9:b1:77:82:94:e0:db:a7:f1:91:89:de:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:66:FD:65:26:FE:AE:EC:C7:FD:13:35:7D:D5:EA:CD:F9:8C:D2:DA
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FGb9ZSb-ruzH_RM1fdXqzfmM0to.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.70.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0b:29:ac:6c:16:93:eb:27:7b:2b:41:91:24:ff:54:f0:4c:ca:
b3:73:9e:8b:b1:52:88:ab:12:0c:c9:b7:8c:d9:1d:bf:f7:7e:
5e:5b:27:d7:d7:ae:c7:e5:b6:68:a2:4b:6c:bc:a0:6d:59:63:
e7:33:47:15:ca:25:1d:e5:fa:c6:7a:bb:be:3e:d6:de:a9:1d:
72:3b:b9:e0:1c:8c:a6:fe:fb:c9:07:e5:a9:5d:c9:59:d0:2f:
48:9f:ad:a2:94:38:19:4b:6d:cf:c1:5a:d3:77:59:97:ba:b5:
85:82:7c:dc:a5:22:30:da:4b:f7:8c:c3:10:1e:90:d3:9b:ca:
f8:f1:ab:e6:4f:54:46:c8:ce:6f:58:5e:d0:7c:51:92:db:f0:
f7:70:a5:d7:64:e4:28:96:bb:39:e3:7f:32:af:6e:be:6b:bd:
fe:a4:d2:3f:ae:fa:7e:4d:7d:1b:b6:71:e0:24:44:74:5c:a3:
97:ab:8e:ac:79:41:cb:64:fc:44:fc:f7:2d:38:7e:9d:c1:ce:
ab:97:5e:36:17:00:ff:d5:46:62:a5:06:87:52:cc:94:72:8e:
35:3b:fd:cb:9e:88:fb:a5:09:50:9a:38:a5:77:8e:2b:2a:a1:
25:9a:5a:ae:5c:0f:ce:a2:4e:8b:51:97:ff:81:19:ef:08:53:
c5:c1:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net