Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/gGqonU12zUVGKw0uiBnyGfiKQBk.roa
File: gGqonU12zUVGKw0uiBnyGfiKQBk.roa (raw, json)
Hash identifier: zB/oZFq+U3jWmXTqEk4mmBeqEmao51CH5zeP9SRtZ8s=
Subject key identifier: 80:6A:A8:9D:4D:76:CD:45:46:2B:0D:2E:88:19:F2:19:F8:8A:40:19
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14C2
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gGqonU12zUVGKw0uiBnyGfiKQBk.roa
Signing time: Mon 10 Feb 2025 14:35:15 +0000
ROA not before: Mon 10 Feb 2025 14:35:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 23675
IP address blocks: 203.66.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5314 (0x14c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=806AA89D4D76CD45462B0D2E8819F219F88A4019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:34:40:15:d8:75:37:30:91:60:96:17:44:
f5:f8:7b:b2:46:55:75:83:a8:85:4b:d5:ee:77:09:
c6:40:3f:4c:63:55:68:ae:61:41:03:6e:07:db:e9:
7a:f3:eb:dc:00:88:3e:bd:e6:e4:3a:19:ab:59:60:
cd:8a:de:50:66:df:a2:53:19:7a:97:a3:17:7d:ad:
b5:c8:59:83:cb:a7:64:19:3b:12:7d:c9:2a:6f:b9:
2b:1f:43:be:bc:50:d8:00:c0:f4:44:f4:00:18:38:
30:e9:c3:f5:39:eb:82:48:e6:ad:b4:53:5b:d7:3f:
0d:49:81:a2:2f:75:cf:a8:f0:59:79:13:17:5d:23:
b0:44:1b:c8:51:af:1c:5b:e7:92:67:ce:dc:50:63:
03:3a:82:94:eb:de:e8:77:48:24:ef:8a:e9:c4:97:
d8:d8:48:cd:09:47:7f:63:19:cc:f6:73:b7:75:2c:
5d:5d:f2:82:13:42:34:b2:ac:ed:9d:86:42:3e:74:
7d:78:d1:14:a1:f7:c6:e1:54:a3:f0:87:a2:97:1b:
93:83:d7:1f:e3:03:dc:92:22:0e:98:9f:ed:c4:9b:
af:cf:11:9e:39:02:4a:26:b3:8d:3f:3e:2a:b3:c9:
3a:4d:e9:4d:50:92:ec:49:66:a8:eb:91:d2:a2:87:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6A:A8:9D:4D:76:CD:45:46:2B:0D:2E:88:19:F2:19:F8:8A:40:19
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gGqonU12zUVGKw0uiBnyGfiKQBk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.66.101.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:76:37:0b:be:d8:5d:bf:3c:1c:b2:1f:a0:33:a0:cc:11:db:
71:3b:63:8d:90:87:1b:1c:08:16:e4:5f:1e:8f:6e:2c:c8:60:
bc:45:bb:6e:43:9a:ef:56:8c:c3:fc:04:97:3a:28:e6:b3:4f:
26:31:1d:69:f6:0d:45:85:e1:a2:b1:f4:1f:f9:19:82:06:5e:
12:9a:29:bf:bd:72:3f:65:f2:03:09:bb:93:90:3f:8b:b8:00:
7f:87:f2:a0:16:84:4c:21:b7:c9:6e:50:65:82:57:4f:a2:f5:
f0:1c:63:1e:9a:eb:0e:0e:df:e3:ee:08:1a:19:5c:20:68:30:
31:f4:9b:7c:7e:7a:78:30:4f:1e:3d:75:65:09:bb:f0:23:ef:
93:58:35:31:6a:7b:69:6d:9a:81:02:be:ae:6a:d3:a5:8e:ef:
76:5a:a2:26:4e:16:f2:f7:2c:db:86:ef:9d:33:b8:c1:a8:0b:
fa:2a:4a:07:fe:f1:79:03:4b:f0:2f:0e:53:f8:35:48:9f:f5:
68:f8:3b:1f:14:e8:14:24:d8:03:61:77:ee:d6:18:6b:2a:c9:
89:ff:86:11:ed:00:ae:f8:3b:dc:17:70:9f:09:99:93:04:94:
8e:e7:d2:7e:88:a1:57:58:7b:08:1e:a2:76:85:09:2d:5c:f6:
7d:d6:c6:10
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICFMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM1MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgwNkFBODlENEQ3NkNE
NDU0NjJCMEQyRTg4MTlGMjE5Rjg4QTQwMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDizzRAFdh1NzCRYJYXRPX4e7JGVXWDqIVL1e53CcZAP0xjVWiu
YUEDbgfb6Xrz69wAiD695uQ6GatZYM2K3lBm36JTGXqXoxd9rbXIWYPLp2QZOxJ9
ySpvuSsfQ768UNgAwPRE9AAYODDpw/U564JI5q20U1vXPw1JgaIvdc+o8Fl5Exdd
I7BEG8hRrxxb55JnztxQYwM6gpTr3uh3SCTviunEl9jYSM0JR39jGcz2c7d1LF1d
8oITQjSyrO2dhkI+dH140RSh98bhVKPwh6KXG5OD1x/jA9ySIg6Yn+3Em6/PEZ45
Akoms40/PiqzyTpN6U1QkuxJZqjrkdKih5c9AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUgGqonU12zUVGKw0uiBnyGfiKQBkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9nR3FvblUxMnpVVkdLdzB1aUJu
eUdmaUtRQmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0Jl
MA0GCSqGSIb3DQEBCwUAA4IBAQCNdjcLvthdvzwcsh+gM6DMEdtxO2ONkIcbHAgW
5F8ej24syGC8RbtuQ5rvVozD/ASXOijms08mMR1p9g1FheGisfQf+RmCBl4Smim/
vXI/ZfIDCbuTkD+LuAB/h/KgFoRMIbfJblBlgldPovXwHGMemusODt/j7ggaGVwg
aDAx9Jt8fnp4ME8ePXVlCbvwI++TWDUxantpbZqBAr6uatOlju92WqImThby9yzb
hu+dM7jBqAv6KkoH/vF5A0vwLw5T+DVIn/Vo+DsfFOgUJNgDYXfu1hhrKsmJ/4YR
7QCu+DvcF3CfCZmTBJSO59J+iKFXWHsIHqJ2hQktXPZ91sYQ
-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net