Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/fHaMkTPmmc0ucM_AkMt6QlxejFc.roa
File: fHaMkTPmmc0ucM_AkMt6QlxejFc.roa (raw, json)
Hash identifier: 12Dr1a1drbbEl2Yyourb4zH6yAi/ILNUoSruIIgJLxk=
Subject key identifier: 7C:76:8C:91:33:E6:99:CD:2E:70:CF:C0:90:CB:7A:42:5C:5E:8C:57
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1447
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/fHaMkTPmmc0ucM_AkMt6QlxejFc.roa
Signing time: Mon 10 Feb 2025 14:34:46 +0000
ROA not before: Mon 10 Feb 2025 14:34:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17714
IP address blocks: 175.111.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5191 (0x1447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7C768C9133E699CD2E70CFC090CB7A425C5E8C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d7:73:56:09:68:9f:4b:da:16:db:41:40:7c:
68:4d:4d:09:af:43:33:33:ab:cc:6c:49:83:5b:35:
88:03:e3:79:1c:69:85:7e:6d:ad:a2:44:5a:7e:1a:
be:c7:91:93:13:a1:dd:8a:c6:dd:60:58:e3:60:21:
3d:28:bc:06:0d:18:db:32:dc:f4:1b:ea:47:15:10:
18:5b:7b:01:a9:e8:a1:5c:f8:60:53:0f:08:f6:3c:
ae:11:b3:34:f1:e0:07:d5:7a:0b:b0:ad:c7:12:f3:
c7:1c:36:02:22:e3:05:69:23:54:f2:a0:b2:03:83:
12:37:9c:59:8f:57:91:c0:c5:c8:03:ea:bc:d6:29:
c6:2d:b8:96:d3:97:40:63:6b:61:cf:82:11:80:c0:
88:50:55:45:cd:7c:c1:8a:7b:ce:3f:97:d0:24:7e:
52:cf:6a:84:c3:0a:ab:c9:6b:7d:fc:3a:09:1a:62:
9b:c9:95:7c:f7:ec:05:5f:1c:c9:0d:d3:b9:61:dc:
06:ed:eb:a6:c8:36:36:93:69:b3:5c:1f:77:43:29:
50:00:17:8a:76:89:40:e6:b7:d4:9f:6e:10:0a:5a:
be:f9:85:00:10:b8:95:19:f9:d3:b7:03:ce:c3:0e:
b9:7f:ab:fb:54:d2:ef:06:04:13:e9:a0:8d:8a:b0:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:76:8C:91:33:E6:99:CD:2E:70:CF:C0:90:CB:7A:42:5C:5E:8C:57
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/fHaMkTPmmc0ucM_AkMt6QlxejFc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.255.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:f5:0d:c4:31:e1:fb:7f:7e:42:1d:63:01:03:7d:62:b2:7e:
dc:8d:9f:61:e2:86:a9:12:97:4b:d3:7c:ac:83:a0:cd:b5:fc:
ed:2b:ca:45:2a:c4:5d:5e:32:79:c0:98:8c:03:7c:fc:f2:86:
63:d5:44:90:6c:f0:42:7f:5b:01:f2:11:da:6a:86:9a:65:97:
d9:2d:a7:e6:cc:ee:25:56:34:1e:79:b0:51:ef:85:9d:f2:8f:
5d:c5:82:01:cf:61:ee:1d:47:1f:73:1c:d8:01:95:27:a4:30:
10:19:fa:57:b7:46:94:da:da:68:cf:18:f5:4b:07:19:42:10:
2f:3e:a5:39:c5:82:41:7c:fd:d6:9a:2c:6a:0e:f7:11:85:7e:
1f:08:7e:eb:dc:e8:69:0f:c1:0c:aa:c4:49:31:44:b0:01:34:
ea:38:09:c2:a2:d2:e2:63:f1:ad:75:b2:be:e7:ab:c9:ea:e9:
e4:4f:76:77:32:7f:08:51:60:58:ba:56:08:23:a3:3c:6a:cb:
1c:ae:76:0b:04:57:20:10:e7:8a:8d:42:e3:8e:76:a2:2d:4f:
b8:c1:d1:b9:1c:64:bb:7e:83:7b:fe:e4:16:3e:25:aa:9d:5c:
22:8f:ec:b4:4c:04:85:de:64:0a:d0:97:5f:ac:8b:58:94:b4:
30:ba:8f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net