Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/LVWeJwv1_PPQ9S91-dVCw4JVNLU.roa
File: LVWeJwv1_PPQ9S91-dVCw4JVNLU.roa (raw, json)
Hash identifier: bq7zl0pfNgNs3s/o4WMrIy8ql24Ja4jLDUFrdojRK3w=
Subject key identifier: 2D:55:9E:27:0B:F5:FC:F3:D0:F5:2F:75:F9:D5:42:C3:82:55:34:B5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1494
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LVWeJwv1_PPQ9S91-dVCw4JVNLU.roa
Signing time: Mon 10 Feb 2025 14:35:03 +0000
ROA not before: Mon 10 Feb 2025 14:35:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 59.120.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5268 (0x1494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:03 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2D559E270BF5FCF3D0F52F75F9D542C3825534B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:bc:b9:df:df:0d:b6:e2:39:b6:0f:f6:85:
8e:a4:18:b0:25:ed:03:8f:0c:68:48:56:ae:97:ae:
44:cb:b6:ac:ec:a1:1d:c3:71:90:74:fb:cf:dc:4b:
4f:f4:92:14:4d:63:a3:cd:62:55:82:d2:1d:89:c1:
c6:d3:bc:49:c3:d2:ab:49:47:83:25:bc:65:68:8b:
66:97:df:d2:31:4a:68:b1:7b:53:54:5d:b7:aa:4f:
e1:dc:35:bf:91:4b:0a:47:94:cb:98:49:f4:8e:12:
54:dd:c4:0e:cf:ff:7f:5a:6a:e5:74:e9:ab:93:33:
5b:4a:41:e1:25:2a:d0:1f:d4:76:8b:33:b7:ee:b2:
c7:45:14:28:3a:56:f8:48:c2:18:ff:80:0c:2d:2a:
96:bc:dc:e1:1d:19:6b:73:ad:39:ed:e3:26:03:e2:
74:61:1e:b6:d3:fc:15:55:1d:d1:74:86:f9:33:b2:
49:15:71:76:48:d6:ef:34:01:be:04:72:01:e5:83:
1a:ff:b6:80:81:d8:a2:75:34:ae:d1:08:57:04:4a:
36:2c:59:d0:8d:fc:ef:0b:f6:27:3e:2b:23:a4:06:
0a:3d:80:01:61:5b:f2:2f:f2:00:fe:2f:5f:29:a9:
b8:44:01:ca:69:17:ac:50:c1:ee:4d:c1:8e:93:dd:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:55:9E:27:0B:F5:FC:F3:D0:F5:2F:75:F9:D5:42:C3:82:55:34:B5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LVWeJwv1_PPQ9S91-dVCw4JVNLU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.120.0.0/14
Signature Algorithm: sha256WithRSAEncryption
14:85:85:dd:81:a1:91:60:bc:17:5b:87:f0:38:b2:b9:50:d8:
4e:d2:a6:94:ba:60:39:4e:c8:58:9a:84:1a:69:19:2a:c0:9a:
7f:20:d8:93:32:0e:af:7c:77:fa:d6:df:de:4d:7b:47:92:05:
67:b6:31:c1:3d:18:ad:df:46:3e:d8:94:bf:07:e2:21:0e:f5:
d6:08:8d:6a:18:e7:26:1b:88:b2:80:bc:96:e1:eb:f9:e4:fc:
33:3a:3a:0d:36:dd:62:80:49:31:9f:f2:53:7a:5f:17:3f:a8:
a8:71:15:28:4c:bd:ed:e6:18:06:11:de:54:9c:cd:dc:27:b5:
73:9f:cf:fa:ee:2a:f7:93:33:f7:0c:d0:7b:c6:52:2c:dd:96:
a7:b1:47:5a:a0:54:f5:43:a3:a3:6b:08:4d:63:07:79:5d:c9:
90:35:57:03:d8:ff:54:69:96:97:6b:3a:33:a6:5f:a7:ad:42:
0a:15:9a:9a:56:4d:6d:69:65:59:8f:0e:00:70:8e:21:89:2b:
ff:15:56:c7:e2:95:2a:e7:e9:91:c8:69:3b:be:8d:44:a0:c1:
86:dc:05:5c:59:43:14:af:39:aa:7e:de:e0:c6:14:04:32:8d:
1d:41:f4:f1:f3:b9:5f:92:14:d6:68:a6:73:35:20:cb:04:6c:
72:ce:dc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net