Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Z63NtZVOHxBTXXqoPB2tT-bFwXg.roa
File: Z63NtZVOHxBTXXqoPB2tT-bFwXg.roa (raw, json)
Hash identifier: IYa/80FiMGe/64Bx11Arz46EUiQRQppy4nsQD0cevU0=
Subject key identifier: 67:AD:CD:B5:95:4E:1F:10:53:5D:7A:A8:3C:1D:AD:4F:E6:C5:C1:78
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1437
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Z63NtZVOHxBTXXqoPB2tT-bFwXg.roa
Signing time: Mon 10 Feb 2025 14:34:43 +0000
ROA not before: Mon 10 Feb 2025 14:34:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17421
IP address blocks: 221.120.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5175 (0x1437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:43 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=67ADCDB5954E1F10535D7AA83C1DAD4FE6C5C178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:d6:5c:13:e6:b8:04:c0:18:bf:7c:06:e8:
75:46:d9:fa:2d:d0:c2:10:be:29:b6:c2:c2:17:f1:
38:eb:64:e7:ca:1e:7f:c7:12:b5:16:43:da:b9:31:
45:ff:fb:52:44:88:72:16:35:5d:13:4c:72:f6:e0:
1a:fa:ab:1d:f1:e8:11:cd:99:08:48:5c:48:27:09:
32:35:81:7e:54:16:d5:3a:a3:84:52:36:bd:c0:a8:
6a:c0:72:53:15:c0:41:49:c9:a5:2e:a1:9d:c9:b2:
f2:54:d1:d7:8f:cd:2a:61:ef:18:6f:c8:f1:40:0b:
d0:ee:25:cb:a6:8e:ed:16:d2:4c:77:af:91:da:b9:
59:7a:f2:e3:07:91:c9:12:ba:d3:ca:1b:7e:9e:bb:
7d:dd:7d:c0:7f:8e:47:ff:b3:27:57:3f:3c:ba:e4:
fb:f3:dd:41:50:5a:99:f1:97:a6:a0:35:ad:cc:15:
5f:1e:22:a9:89:ad:11:5c:d0:4a:cd:bb:3a:a2:36:
d6:d2:53:b1:a0:e7:9f:e7:dc:82:f0:f5:d5:c1:31:
d2:32:a6:9d:04:38:66:03:38:a3:f3:b3:a8:fb:28:
6a:85:46:f2:1d:24:8f:ee:59:42:9c:9a:14:e4:87:
9a:c8:95:78:5b:c6:2e:0d:1c:00:30:bf:31:02:09:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AD:CD:B5:95:4E:1F:10:53:5D:7A:A8:3C:1D:AD:4F:E6:C5:C1:78
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Z63NtZVOHxBTXXqoPB2tT-bFwXg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
221.120.0.0/18
Signature Algorithm: sha256WithRSAEncryption
02:ae:2c:58:ec:f9:20:5c:9d:9b:f5:3b:7f:7c:1d:ad:eb:63:
4e:7a:02:09:89:8b:3b:bc:36:8e:08:69:15:1d:cd:96:d0:7e:
3a:b4:eb:fc:f9:89:fc:26:e0:e3:6f:c7:ff:46:67:d7:4c:72:
51:1d:f9:87:d9:2c:e1:4c:ff:0a:e9:8b:a1:13:0c:b5:9a:8e:
30:32:0d:07:87:21:d5:13:27:64:0e:05:87:d2:69:98:d9:e1:
9f:b5:63:fc:b1:a0:a3:b6:5f:b7:68:94:84:10:6a:56:54:9e:
b4:23:a0:ea:37:16:97:b9:57:9d:2d:20:7a:2c:8e:38:b7:28:
90:11:71:12:6c:6e:8b:10:d2:64:fb:8f:63:cd:ad:e6:ba:07:
ac:fe:d4:7e:75:cf:76:8c:d7:e1:f5:a9:48:40:44:25:dd:ac:
d8:a9:8b:cd:f8:69:38:ce:7c:84:bb:a2:15:60:8f:03:89:2f:
57:77:79:60:b0:86:ef:dc:b7:55:6a:e5:de:c1:ae:c3:23:75:
83:67:ce:76:fd:61:3c:db:06:bd:d2:22:92:5f:a6:9f:44:be:
8e:15:ae:cd:e8:fe:22:7c:90:b4:f3:9d:b1:d5:c2:3f:82:dd:
60:32:17:ec:cc:91:65:ff:e9:10:07:36:7b:be:a7:79:8c:13:
d6:de:74:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net