Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Ixi9NH0wtJH-ES9wyMiurAEvuHw.roa
File: Ixi9NH0wtJH-ES9wyMiurAEvuHw.roa (raw, json)
Hash identifier: t5yMxkUlHuLXFORXAGOalThn5W750P+WqRjViCqTp1Y=
Subject key identifier: 23:18:BD:34:7D:30:B4:91:FE:11:2F:70:C8:C8:AE:AC:01:2F:B8:7C
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1479
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Ixi9NH0wtJH-ES9wyMiurAEvuHw.roa
Signing time: Mon 10 Feb 2025 14:34:57 +0000
ROA not before: Mon 10 Feb 2025 14:34:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 54994
IP address blocks: 210.61.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5241 (0x1479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:57 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2318BD347D30B491FE112F70C8C8AEAC012FB87C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:c6:fc:5d:54:78:fa:b4:3e:46:cb:66:60:
1a:b0:ff:a6:72:be:8c:bb:b4:b6:f7:d5:49:cb:1b:
a7:ec:f0:e6:85:f0:19:83:b6:5a:7e:b8:38:70:d3:
ea:c3:c7:c6:80:c4:eb:6b:d3:3f:16:35:ac:d5:71:
72:6b:34:5d:ee:a1:31:cd:e7:f7:40:62:27:40:b5:
18:92:5d:39:e2:84:aa:cb:30:f5:33:8f:c0:67:ab:
a3:02:63:df:d6:ad:0f:f3:07:aa:2c:12:9a:5e:8e:
04:ae:12:cf:ff:f9:0a:a6:21:d4:7a:5b:c7:90:be:
4d:e8:0a:9f:d3:a5:6f:ef:22:56:e9:f8:df:31:c8:
6f:8e:33:50:2b:01:93:41:52:74:bd:17:43:62:49:
91:bd:05:5d:31:1d:b1:67:43:98:c6:d6:3f:0f:f1:
c1:5b:38:10:a9:39:73:84:ff:f3:4c:62:da:e9:8c:
17:19:4f:38:55:60:30:25:31:48:4f:7a:1a:30:91:
da:42:db:e7:82:98:86:6c:01:4b:0b:dc:34:6c:77:
f7:9b:91:9d:1e:11:45:87:e1:4b:5a:1b:13:8a:90:
f0:a6:db:6a:73:1f:ce:1f:70:64:0b:93:8c:0f:80:
63:79:82:35:a8:ef:62:39:5e:8c:f8:9c:ae:be:3e:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:18:BD:34:7D:30:B4:91:FE:11:2F:70:C8:C8:AE:AC:01:2F:B8:7C
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Ixi9NH0wtJH-ES9wyMiurAEvuHw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.180.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:1e:5f:c2:15:0d:87:9c:e1:4b:16:9e:45:d4:31:0f:3a:ad:
60:3b:17:d2:57:43:9d:60:13:c4:02:24:2d:0e:53:6f:22:05:
ad:f6:f9:bf:ef:93:81:5c:6a:b7:7d:4d:a4:8f:08:ce:78:15:
38:79:81:10:6d:2b:0b:0a:7f:fb:e9:f3:2f:13:48:78:be:a6:
6f:79:0a:01:03:46:d4:f8:50:54:45:c2:7f:0b:eb:44:1d:f4:
bb:d1:f3:a9:8f:38:06:05:04:28:28:40:bf:34:08:6e:39:b4:
e0:fe:4b:c9:30:c6:87:b3:ef:37:a5:a9:69:9f:57:e8:37:5a:
28:73:74:a0:d8:67:d9:76:ce:14:30:c1:18:0c:d0:9d:c8:68:
66:0c:9b:73:45:1f:45:52:a2:fa:0d:fc:2d:a1:82:fb:30:b1:
8b:8f:38:21:e0:48:b6:9e:4f:01:5f:26:78:35:21:75:78:79:
64:66:23:8e:3a:e1:8f:e8:03:59:ca:45:a5:0c:fa:36:60:44:
ed:bd:1e:a5:5a:ea:b4:47:8c:46:ab:47:e4:53:1f:95:72:7c:
00:4b:b5:bb:f3:f0:52:7c:c6:0f:51:95:43:89:77:7c:69:a6:
af:f5:92:a8:f5:77:ac:61:e1:fe:57:9b:ef:10:5e:39:21:2f:
2f:12:65:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net