Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_9SE8d9ps-bYRQ2C8Y8Z6vJARnw.roa
File: _9SE8d9ps-bYRQ2C8Y8Z6vJARnw.roa (raw, json)
Hash identifier: OfwAkfZX/kFuzsBb6oRANsRqUFgv8+AkBphgMTXfapE=
Subject key identifier: FF:D4:84:F1:DF:69:B3:E6:D8:45:0D:82:F1:8F:19:EA:F2:40:46:7C
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1492
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_9SE8d9ps-bYRQ2C8Y8Z6vJARnw.roa
Signing time: Mon 10 Feb 2025 14:35:03 +0000
ROA not before: Mon 10 Feb 2025 14:35:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 61.218.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5266 (0x1492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:03 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FFD484F1DF69B3E6D8450D82F18F19EAF240467C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:87:8f:8d:27:a7:8a:f0:15:36:fe:d5:b8:
07:e6:c2:3f:36:de:2f:4a:e4:9f:cd:c5:d6:12:ec:
7b:d2:a1:78:ce:99:85:9b:a6:c0:4a:ad:6c:7b:f0:
d6:37:18:e3:95:4b:e4:dd:11:35:61:1d:73:33:b1:
7e:6d:f3:e4:1a:dc:ab:11:85:49:e0:ea:aa:ad:d7:
04:49:a2:f7:ec:2d:69:a5:af:ee:45:f6:79:36:38:
2b:ba:f3:5e:c2:a8:9c:f8:d1:03:7a:1d:ab:fa:0a:
83:67:f2:ac:32:fa:c6:04:a7:2f:1c:21:92:7a:20:
2a:83:79:27:28:87:81:b1:05:11:a0:63:5d:d9:ee:
b1:5e:b5:7c:64:c9:a2:49:1b:12:01:da:c5:c2:4c:
c4:1d:d6:a0:86:50:5e:84:c5:13:63:2e:45:43:32:
d0:1b:16:a1:29:c1:bb:3a:8d:64:73:15:42:ab:1c:
db:88:f3:2a:89:6c:bf:7e:6f:6b:75:06:a5:46:ce:
4a:83:77:3a:1a:86:e1:b8:e0:82:62:fe:5b:17:ad:
d2:b6:e3:07:11:0d:7f:0c:d5:b5:63:ae:46:1e:2d:
e3:7c:d5:5f:b7:6b:fd:f1:70:b1:cd:2e:23:7b:55:
70:b3:1a:ac:38:ee:ac:2e:ab:64:0b:e5:3f:69:bc:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D4:84:F1:DF:69:B3:E6:D8:45:0D:82:F1:8F:19:EA:F2:40:46:7C
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_9SE8d9ps-bYRQ2C8Y8Z6vJARnw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.218.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2d:df:0c:77:b7:7a:ed:51:63:98:e5:ab:d4:3c:ba:96:6d:72:
6f:73:7b:5f:5d:ba:40:49:9c:5b:f8:ff:1a:7d:9e:4e:bc:65:
3d:db:52:fb:4f:e9:39:be:e3:30:fa:0b:f4:60:25:6f:36:f6:
a8:3b:7f:8a:4c:15:a6:19:d9:81:a8:f4:6c:5f:fb:f2:d7:c3:
02:11:f1:5a:04:a1:44:08:47:ac:05:5e:04:b2:70:c2:2b:ce:
ed:11:f2:b0:11:87:eb:8c:d2:35:d9:0c:0a:ea:cc:a1:4e:67:
78:9a:07:f1:af:cc:a6:7d:74:06:1e:51:a0:24:79:de:7e:dc:
bb:b1:97:b2:04:83:1e:ec:1a:6b:c1:9d:c9:08:9d:b5:a7:d5:
75:0d:e2:70:2d:b3:64:b2:88:bb:36:c8:24:e8:ef:a3:50:73:
18:76:b0:02:2f:a7:09:f0:ac:59:f9:55:83:8d:51:31:ee:9f:
8b:39:99:a9:ba:44:c0:52:61:26:32:82:5d:53:cb:b6:9c:a5:
98:71:58:56:12:b3:6b:86:b3:13:db:2a:7d:86:a3:ac:13:83:
55:db:93:bc:15:62:2a:12:f2:72:5c:d3:23:de:17:58:2c:98:
b4:e1:f9:8d:9a:c5:bc:e2:a6:09:eb:e6:ad:59:d0:78:fb:6b:
58:48:42:b5
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICFJIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM1MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZGRDQ4NEYxREY2OUIz
RTZEODQ1MEQ4MkYxOEYxOUVBRjI0MDQ2N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0HYePjSenivAVNv7VuAfmwj823i9K5J/NxdYS7HvSoXjOmYWb
psBKrWx78NY3GOOVS+TdETVhHXMzsX5t8+Qa3KsRhUng6qqt1wRJovfsLWmlr+5F
9nk2OCu6817CqJz40QN6Hav6CoNn8qwy+sYEpy8cIZJ6ICqDeScoh4GxBRGgY13Z
7rFetXxkyaJJGxIB2sXCTMQd1qCGUF6ExRNjLkVDMtAbFqEpwbs6jWRzFUKrHNuI
8yqJbL9+b2t1BqVGzkqDdzoahuG44IJi/lsXrdK24wcRDX8M1bVjrkYeLeN81V+3
a/3xcLHNLiN7VXCzGqw47qwuq2QL5T9pvEtzAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQU/9SE8d9ps+bYRQ2C8Y8Z6vJARnwwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9fOVNFOGQ5cHMtYllSUTJDOFk4
WjZ2SkFSbncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBPdow
DQYJKoZIhvcNAQELBQADggEBAC3fDHe3eu1RY5jlq9Q8upZtcm9ze19dukBJnFv4
/xp9nk68ZT3bUvtP6Tm+4zD6C/RgJW829qg7f4pMFaYZ2YGo9Gxf+/LXwwIR8VoE
oUQIR6wFXgSycMIrzu0R8rARh+uM0jXZDArqzKFOZ3iaB/GvzKZ9dAYeUaAked5+
3Luxl7IEgx7sGmvBnckInbWn1XUN4nAts2SyiLs2yCTo76NQcxh2sAIvpwnwrFn5
VYONUTHun4s5mam6RMBSYSYygl1Ty7acpZhxWFYSs2uGsxPbKn2Go6wTg1Xbk7wV
YioS8nJc0yPeF1gsmLTh+Y2axbzipgnr5q1Z0Hj7a1hIQrU=
-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net