Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/YqV1M4-FNN8KSYLKdfsW3gT4wsU.roa
File: YqV1M4-FNN8KSYLKdfsW3gT4wsU.roa (raw, json)
Hash identifier: Jt7mj1/9K2DHVE8YkoF5vOEJ2AeQBIjhMvpZ78n7mb0=
Subject key identifier: 62:A5:75:33:8F:85:34:DF:0A:49:82:CA:75:FB:16:DE:04:F8:C2:C5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1462
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/YqV1M4-FNN8KSYLKdfsW3gT4wsU.roa
Signing time: Mon 10 Feb 2025 14:34:52 +0000
ROA not before: Mon 10 Feb 2025 14:34:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 203.75.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5218 (0x1462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=62A575338F8534DF0A4982CA75FB16DE04F8C2C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:1c:6f:b0:d1:82:3c:13:b2:10:0c:6b:35:
a3:b3:7b:76:f1:42:a2:7b:19:1c:4e:2a:76:23:c7:
7b:a7:79:cb:a6:89:85:3f:0b:6f:19:2e:28:70:be:
2f:d2:9d:13:1b:4c:1b:b0:7c:44:9a:52:e7:3a:9b:
20:36:d5:7c:b3:ac:79:a0:30:21:2c:66:ad:7b:9d:
ac:db:7c:47:7c:77:24:dc:71:39:f2:49:a7:40:eb:
73:f9:75:7f:0d:33:61:34:7e:e9:3d:58:85:6b:a6:
42:0f:a7:57:b4:23:6a:24:8a:ec:92:8b:85:35:73:
c3:ad:6a:08:f4:f5:d8:2b:84:c5:eb:9c:67:4b:b4:
fe:3f:ea:56:60:40:01:6b:07:ae:f0:26:09:3e:b9:
32:7b:e8:5b:20:63:b8:b1:e5:a9:7b:07:61:7e:06:
20:23:f0:9e:e6:ea:3d:69:16:ef:42:c1:99:78:6c:
37:d6:fd:9c:2c:aa:c8:92:83:98:be:4f:32:8b:a8:
d6:e9:9c:13:7a:8a:7a:0d:bc:24:04:89:33:72:0f:
3b:6c:27:a8:0d:0f:3d:ed:e6:13:14:58:92:b9:5b:
c1:ba:d8:03:a0:2b:43:49:de:7d:4b:80:78:4f:2d:
10:b6:82:49:17:37:a8:1b:a4:25:a2:0c:d1:1f:94:
d8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A5:75:33:8F:85:34:DF:0A:49:82:CA:75:FB:16:DE:04:F8:C2:C5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/YqV1M4-FNN8KSYLKdfsW3gT4wsU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:c5:b0:73:ef:b0:d2:a1:a9:94:1c:67:29:b2:43:2d:6b:b0:
20:d1:0c:30:40:33:0b:4f:97:91:b1:da:d8:a8:a7:a3:25:b6:
32:aa:d4:23:a5:fa:5b:76:dc:79:19:09:e0:5a:95:f8:8d:1a:
96:75:c9:c4:3e:69:dc:46:6e:33:41:1c:9c:04:16:20:8b:f7:
e5:55:14:64:ea:fe:ca:f3:40:6f:1b:3f:19:7d:e3:50:b8:b1:
de:dc:d3:43:04:0a:c7:7f:bc:cc:10:9a:13:73:63:78:1c:70:
55:0f:a4:5d:29:01:61:be:33:79:3c:1c:c2:a3:bb:2e:b2:83:
a7:80:20:b8:8d:af:a4:ff:39:30:e1:c5:6a:d0:c6:98:fe:b9:
d5:9f:39:bb:2a:5a:80:cc:5a:6c:7b:25:54:67:6e:0f:6c:b4:
ff:e0:f4:da:20:e9:48:bb:64:f0:e8:ab:b2:22:81:65:53:3d:
0d:96:d6:f2:29:d7:74:05:af:e2:d6:74:3e:a5:a6:9b:41:06:
4d:89:33:c5:27:2b:6e:2a:af:5b:1a:36:e2:a5:3e:e0:ed:0f:
b6:f1:fd:81:87:33:ad:9c:54:e4:96:8f:67:65:7b:31:98:8f:
b7:32:2b:94:85:c2:09:a0:8b:ad:51:f1:17:26:f6:c7:03:b0:
63:39:0d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net