Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/LmkDZwn_B3Fte7yrMGAQnic7ak8.roa
File: LmkDZwn_B3Fte7yrMGAQnic7ak8.roa (raw, json)
Hash identifier: AGwf2tuqlHyxxZAXqo+3wcmdoeyQwV1wUEBe+GxU+pk=
Subject key identifier: 2E:69:03:67:09:FF:07:71:6D:7B:BC:AB:30:60:10:9E:27:3B:6A:4F
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14BE
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LmkDZwn_B3Fte7yrMGAQnic7ak8.roa
Signing time: Mon 10 Feb 2025 14:35:15 +0000
ROA not before: Mon 10 Feb 2025 14:35:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 211.75.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5310 (0x14be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2E69036709FF07716D7BBCAB3060109E273B6A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:6b:7e:e8:53:ee:0c:72:35:38:a7:e9:68:
3a:cc:6f:33:88:04:37:43:25:87:98:ca:24:ae:01:
82:1f:7f:da:d2:50:56:cd:ec:53:c3:2b:f5:26:d5:
91:81:82:86:fe:63:bb:34:32:26:ff:c2:a7:af:bf:
b0:fd:e0:cc:a2:1b:fa:23:9f:dc:b1:71:0d:fc:60:
d2:16:66:a9:5a:f6:2d:aa:53:b8:4b:7b:83:d6:b7:
13:7c:ce:ba:82:62:2f:e9:c0:04:5c:0b:c3:6d:40:
96:79:47:8d:da:48:b1:3d:c7:13:b6:3f:c6:52:ac:
02:e6:4a:bc:a4:04:b6:60:67:96:8b:e9:e7:e6:6e:
44:52:3f:3c:5f:39:5c:d3:a0:99:d9:19:2a:2f:96:
e2:9c:3a:12:af:6a:a3:d1:74:9d:47:73:bb:70:85:
81:66:65:c2:b7:8b:ca:6c:1b:ea:e6:d6:4a:ff:43:
8a:0e:08:8b:33:ef:73:40:63:9d:d9:d5:21:6d:33:
a8:4a:c4:63:84:d2:98:18:a1:8a:03:32:62:83:9e:
e3:54:59:b3:04:47:11:e1:c3:6a:69:8a:bf:72:56:
8b:ca:05:ca:9b:af:97:6a:7b:6d:2d:c9:24:10:33:
79:95:99:af:5f:40:23:d1:10:02:60:c8:a8:79:2c:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:69:03:67:09:FF:07:71:6D:7B:BC:AB:30:60:10:9E:27:3B:6A:4F
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LmkDZwn_B3Fte7yrMGAQnic7ak8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:fd:f5:3b:4a:74:e2:f5:d1:11:db:6b:10:11:10:37:66:9a:
ff:a0:ea:cd:6c:f0:26:e1:43:90:05:6c:56:10:5a:a2:90:d9:
03:8a:8b:73:52:aa:4d:87:eb:89:c5:74:06:28:6a:fa:48:01:
28:96:ff:9f:7f:f7:80:de:eb:19:d9:12:0e:47:cd:54:bf:45:
de:b4:d2:0b:e6:e8:bd:f6:6e:fe:0b:62:e9:33:95:5a:87:98:
ad:fe:a0:bf:bb:65:75:b1:0c:75:65:b3:72:97:34:7e:6e:f1:
36:52:7e:96:db:63:cd:de:e2:93:4f:67:ec:70:eb:76:5c:eb:
fe:7a:e7:41:ac:b1:c3:dd:b4:cf:9a:3d:80:af:1d:e2:af:5f:
6d:22:2e:7d:5c:b5:32:c7:2e:9c:aa:c5:e9:bc:28:eb:84:91:
d0:77:20:fe:26:9d:be:d1:29:3d:6c:e2:2f:27:72:5b:04:c0:
a5:61:c1:99:55:19:04:a7:18:2d:45:e5:09:b0:ad:80:c6:f0:
d9:32:71:f0:73:05:15:22:a7:19:34:fe:6f:32:00:5e:66:c6:
5c:80:c4:d3:04:d6:33:45:a3:df:cb:24:aa:39:2c:59:de:28:
df:5d:8b:fb:13:77:46:e8:41:65:95:c7:0c:bf:95:73:4a:75:
11:ed:f3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net