Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/QUKO-a-wc_KgfO9tQQWMM-RK_TY.roa
File: QUKO-a-wc_KgfO9tQQWMM-RK_TY.roa (raw, json)
Hash identifier: GvuD2tlnU1sPS1r2x3qTpr6berVRRrtNM+PnhKT+fCo=
Subject key identifier: 41:42:8E:F9:AF:B0:73:F2:A0:7C:EF:6D:41:05:8C:33:E4:4A:FD:36
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1490
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/QUKO-a-wc_KgfO9tQQWMM-RK_TY.roa
Signing time: Mon 10 Feb 2025 14:35:02 +0000
ROA not before: Mon 10 Feb 2025 14:35:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 20940
IP address blocks: 2001:b034:700:580::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5264 (0x1490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:02 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=41428EF9AFB073F2A07CEF6D41058C33E44AFD36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:a9:0e:a7:5a:a0:e9:a5:8f:25:61:24:42:
b7:14:57:52:bb:4a:5e:cc:d7:bd:75:21:a1:cb:42:
f7:06:7f:c9:08:ee:f2:cb:90:6a:d9:cd:43:62:84:
a8:49:46:6c:3c:cb:06:59:01:e7:86:6a:2d:a5:eb:
dd:e8:7e:b7:01:67:ab:54:e6:77:4a:bb:52:5a:9e:
79:de:97:9d:4d:8b:dd:a2:68:82:07:bf:e3:db:82:
73:d2:13:db:c8:f2:27:36:21:12:70:43:78:87:c9:
36:ae:9b:83:0c:e9:49:69:96:b5:07:40:8f:9c:2a:
73:ab:70:fe:d2:71:34:27:69:d7:f2:51:6f:8f:c1:
b1:dd:50:c8:45:a6:93:95:61:5c:88:33:d0:4f:03:
2d:42:72:6f:91:69:8a:78:71:11:9b:7d:8a:6c:32:
31:df:b5:7b:2e:da:9d:0e:0c:48:2a:f6:32:34:eb:
f2:06:3a:db:1e:a2:18:7e:36:a8:bb:75:03:de:09:
1e:2b:4c:a6:b0:76:be:42:ad:df:17:9a:fd:db:a7:
0e:45:c2:86:f2:58:b1:30:fb:e3:b9:15:3a:6f:01:
90:cd:ae:6f:d1:45:45:5c:f6:c6:b5:3a:b8:b1:ac:
df:8a:13:1f:7d:ff:83:f8:66:09:f4:18:6a:b3:fb:
3a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:42:8E:F9:AF:B0:73:F2:A0:7C:EF:6D:41:05:8C:33:E4:4A:FD:36
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/QUKO-a-wc_KgfO9tQQWMM-RK_TY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b034:700:580::/64
Signature Algorithm: sha256WithRSAEncryption
28:05:13:f3:c5:3d:95:d2:ec:7c:28:ee:09:02:07:70:cb:bb:
82:0a:b4:73:ba:6e:8a:26:ad:cc:d6:a1:6d:c7:39:d3:6e:59:
ce:18:df:af:16:17:b2:73:fb:1d:7e:bb:9a:d3:d9:a2:03:54:
13:37:a4:33:ed:52:08:43:85:f4:01:02:a1:0a:cc:21:69:81:
fc:b5:b3:cc:14:8d:47:14:2d:4e:0a:69:fd:fd:d1:65:2e:c4:
fb:25:00:d8:37:cd:97:81:2f:72:7c:47:e5:61:b0:bb:d0:6e:
b6:5e:3e:e7:1f:e6:bb:e0:53:0b:70:21:44:8f:a5:4e:44:69:
e8:3c:e9:13:40:96:ef:32:f5:a4:0d:11:7b:d6:2a:76:1c:b5:
84:0a:af:55:05:f7:14:44:02:b4:ce:61:52:e4:19:a1:81:2b:
b2:c1:2c:38:2b:41:48:11:41:da:9c:5e:94:58:e7:0e:ee:7f:
d7:18:3b:b6:a8:17:2b:f0:06:32:d9:b6:02:60:01:1d:fd:8f:
8b:90:f7:25:fa:50:cb:1e:4e:5a:98:0e:07:3f:15:4c:03:5b:
5c:34:69:19:2c:c8:c2:22:75:5a:e6:5f:85:e4:96:2d:2c:9c:
59:72:3b:4d:71:69:88:a1:14:06:78:4c:84:23:4a:c6:25:9a:
81:c4:04:ab
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICFJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM1MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQxNDI4RUY5QUZCMDcz
RjJBMDdDRUY2RDQxMDU4QzMzRTQ0QUZEMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYFKkOp1qg6aWPJWEkQrcUV1K7Sl7M1711IaHLQvcGf8kI7vLL
kGrZzUNihKhJRmw8ywZZAeeGai2l693ofrcBZ6tU5ndKu1Jannnel51Ni92iaIIH
v+PbgnPSE9vI8ic2IRJwQ3iHyTaum4MM6UlplrUHQI+cKnOrcP7ScTQnadfyUW+P
wbHdUMhFppOVYVyIM9BPAy1Ccm+RaYp4cRGbfYpsMjHftXsu2p0ODEgq9jI06/IG
Otseohh+Nqi7dQPeCR4rTKawdr5Crd8Xmv3bpw5FwobyWLEw++O5FTpvAZDNrm/R
RUVc9sa1OrixrN+KEx99/4P4Zgn0GGqz+zpJAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUQUKO+a+wc/KgfO9tQQWMM+RK/TYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9RVUtPLWEtd2NfS2dmTzl0UVFX
TU0tUktfVFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAGw
NAcABYAwDQYJKoZIhvcNAQELBQADggEBACgFE/PFPZXS7Hwo7gkCB3DLu4IKtHO6
boomrczWoW3HOdNuWc4Y368WF7Jz+x1+u5rT2aIDVBM3pDPtUghDhfQBAqEKzCFp
gfy1s8wUjUcULU4Kaf390WUuxPslANg3zZeBL3J8R+VhsLvQbrZePucf5rvgUwtw
IUSPpU5Eaeg86RNAlu8y9aQNEXvWKnYctYQKr1UF9xREArTOYVLkGaGBK7LBLDgr
QUgRQdqcXpRY5w7uf9cYO7aoFyvwBjLZtgJgAR39j4uQ9yX6UMseTlqYDgc/FUwD
W1w0aRksyMIidVrmX4Xkli0snFlyO01xaYihFAZ4TIQjSsYlmoHEBKs=
-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net