Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/TDvFDDfMbfpQc5wRIUJVC0umMSc.roa
File: TDvFDDfMbfpQc5wRIUJVC0umMSc.roa (raw, json)
Hash identifier: bKpg0ZTKh6aDd1fcqEb6qhhfHPEvIOBjoeWGmnfIkhE=
Subject key identifier: 4C:3B:C5:0C:37:CC:6D:FA:50:73:9C:11:21:42:55:0B:4B:A6:31:27
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1480
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TDvFDDfMbfpQc5wRIUJVC0umMSc.roa
Signing time: Mon 10 Feb 2025 14:34:58 +0000
ROA not before: Mon 10 Feb 2025 14:34:58 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131621
IP address blocks: 203.75.51.0/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5248 (0x1480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:58 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4C3BC50C37CC6DFA50739C112142550B4BA63127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:90:0e:d1:39:35:79:fa:6e:0e:85:71:7a:
a0:72:de:d8:93:f4:f7:56:ce:04:02:d3:2a:16:58:
41:04:25:cb:7a:d8:1c:26:b9:48:a7:6f:97:60:1b:
8f:ad:dd:26:dc:05:69:b1:55:e3:58:4f:76:fd:b0:
49:12:6d:bf:0e:2f:9e:8e:62:f3:7e:c1:c1:79:e9:
52:3f:ab:d6:bc:43:0a:5e:02:38:41:9e:ee:96:12:
9f:96:04:8c:3d:16:56:3d:73:ab:3c:3d:8e:3f:c5:
99:25:be:a9:4f:65:7a:97:1d:a9:a7:b7:0f:d7:7b:
23:a3:74:05:d5:3e:50:a2:24:a5:25:4c:e4:f0:5c:
51:21:b1:02:bf:af:80:91:98:7a:1b:4b:b6:00:e8:
13:ad:9d:b8:b4:a7:f2:7a:ed:a9:73:30:6a:c0:c3:
21:a3:5c:2a:00:59:65:5d:46:c8:8b:88:c7:68:2a:
4d:d0:22:0f:dc:ae:97:ea:86:6b:7e:01:eb:ad:1f:
99:46:9e:8c:5f:f5:fc:3e:46:2d:5b:91:d2:4b:cd:
8f:0c:16:2e:de:22:be:5a:d0:c5:64:38:27:5c:02:
04:cd:e1:cf:c4:13:d1:98:1d:4c:b5:aa:5b:6c:ac:
93:28:b5:26:6c:d7:39:7f:e8:52:19:52:79:99:4a:
ae:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3B:C5:0C:37:CC:6D:FA:50:73:9C:11:21:42:55:0B:4B:A6:31:27
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TDvFDDfMbfpQc5wRIUJVC0umMSc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.75.51.0/27
Signature Algorithm: sha256WithRSAEncryption
be:5a:5c:c2:29:cf:cf:58:83:07:0d:7c:6c:9f:f3:8c:5f:72:
92:61:50:12:c0:03:f6:f5:f1:e9:16:bb:fc:dc:0d:aa:53:47:
ea:82:d8:b5:18:78:fa:7b:7b:77:43:36:6d:db:be:b8:b9:c9:
e2:a3:4b:dd:14:4b:93:c1:04:34:6b:b2:de:02:f4:e3:87:c7:
80:51:1f:16:f6:8e:7e:1a:9a:71:fc:3d:87:82:b4:b5:52:d0:
76:06:6d:ef:07:7e:42:76:65:5d:40:16:0d:52:54:33:77:07:
d8:e6:cd:d0:e4:b4:ec:66:ee:bb:b2:e8:2c:40:25:87:b3:4c:
99:1a:c7:14:18:b4:e2:57:8e:c7:4e:c3:1d:d2:c8:9a:69:d8:
9a:93:ae:0c:ae:01:29:fc:18:57:ce:b2:15:ad:7a:b3:3b:c6:
c0:8d:c2:a5:5b:cc:33:61:92:2a:e7:d8:64:3c:4d:9c:68:ac:
a0:26:97:45:b9:ad:90:1a:84:f4:af:58:5e:13:d5:c7:8a:5b:
12:34:3e:1e:66:86:3c:1c:87:fd:75:85:0e:87:81:7e:22:fc:
cb:2d:f9:88:23:d0:53:4a:b3:15:59:97:52:85:21:bb:0d:9e:
02:56:a6:0c:ce:fd:83:f0:f8:d5:8f:e6:9e:fc:a7:83:d6:5a:
a9:a8:34:f2
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICFIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM0NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRDM0JDNTBDMzdDQzZE
RkE1MDczOUMxMTIxNDI1NTBCNEJBNjMxMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0UJAO0Tk1efpuDoVxeqBy3tiT9PdWzgQC0yoWWEEEJct62Bwm
uUinb5dgG4+t3SbcBWmxVeNYT3b9sEkSbb8OL56OYvN+wcF56VI/q9a8QwpeAjhB
nu6WEp+WBIw9FlY9c6s8PY4/xZklvqlPZXqXHamntw/XeyOjdAXVPlCiJKUlTOTw
XFEhsQK/r4CRmHobS7YA6BOtnbi0p/J67alzMGrAwyGjXCoAWWVdRsiLiMdoKk3Q
Ig/crpfqhmt+AeutH5lGnoxf9fw+Ri1bkdJLzY8MFi7eIr5a0MVkOCdcAgTN4c/E
E9GYHUy1qltsrJMotSZs1zl/6FIZUnmZSq5HAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUTDvFDDfMbfpQc5wRIUJVC0umMScwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9URHZGRERmTWJmcFFjNXdSSVVK
VkMwdW1NU2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFy0sz
ADANBgkqhkiG9w0BAQsFAAOCAQEAvlpcwinPz1iDBw18bJ/zjF9ykmFQEsAD9vXx
6Ra7/NwNqlNH6oLYtRh4+nt7d0M2bdu+uLnJ4qNL3RRLk8EENGuy3gL044fHgFEf
FvaOfhqacfw9h4K0tVLQdgZt7wd+QnZlXUAWDVJUM3cH2ObN0OS07Gbuu7LoLEAl
h7NMmRrHFBi04leOx07DHdLImmnYmpOuDK4BKfwYV86yFa16szvGwI3CpVvMM2GS
KufYZDxNnGisoCaXRbmtkBqE9K9YXhPVx4pbEjQ+HmaGPByH/XWFDoeBfiL8yy35
iCPQU0qzFVmXUoUhuw2eAlamDM79g/D41Y/mnvyng9Zaqag08g==
-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net