Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/gVkcmgY9LgXi4wrXZMJsQkFv1TU.roa
File: gVkcmgY9LgXi4wrXZMJsQkFv1TU.roa (raw, json)
Hash identifier: VLmHt/T2i2QvDsYYXa2bX1PQyQ5SwNwSRP7/UQsknNc=
Subject key identifier: 81:59:1C:9A:06:3D:2E:05:E2:E3:0A:D7:64:C2:6C:42:41:6F:D5:35
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 145D
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gVkcmgY9LgXi4wrXZMJsQkFv1TU.roa
Signing time: Mon 10 Feb 2025 14:34:51 +0000
ROA not before: Mon 10 Feb 2025 14:34:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 218.166.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5213 (0x145d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=81591C9A063D2E05E2E30AD764C26C42416FD535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:53:d6:ec:6b:c1:03:38:69:2c:10:a7:b4:
5a:00:85:a3:52:a1:d5:3a:9c:37:98:e5:bd:f8:d6:
5d:c7:26:7c:ee:d2:ab:c9:c4:a1:d6:65:d6:bd:a0:
d3:40:2a:e6:f2:3a:59:d7:fe:ee:cd:57:42:b1:2c:
2e:6c:8d:42:f4:04:73:99:2d:90:3e:89:2d:59:d9:
80:bd:d1:cd:84:0b:96:ca:68:a1:79:ef:71:db:7d:
23:bb:06:a4:46:9a:ea:11:37:63:8f:f5:fe:9a:31:
94:b8:9a:20:d2:42:a8:2b:0d:70:11:c1:f4:18:2d:
f2:70:57:17:03:cb:14:81:dd:3a:40:c2:ef:1c:a7:
0d:10:b7:cf:9a:98:6c:f1:85:4f:a3:6f:95:b9:ac:
f2:67:60:a6:2d:78:4b:1f:45:01:f1:43:ea:0a:30:
55:cb:04:85:5c:4b:0d:67:91:00:ff:a5:10:71:08:
dd:41:46:b6:e7:8b:20:79:8c:e2:ba:61:9e:8c:f7:
15:1a:8d:e5:e5:84:f3:96:57:67:e6:a3:40:5b:9a:
c6:34:74:4b:cb:f0:72:90:51:48:d8:05:d9:40:f6:
4e:11:e8:50:a3:3d:0e:69:7b:59:26:d5:c9:6c:5e:
da:20:9a:17:c0:00:26:62:77:03:59:d7:fc:21:51:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:59:1C:9A:06:3D:2E:05:E2:E3:0A:D7:64:C2:6C:42:41:6F:D5:35
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/gVkcmgY9LgXi4wrXZMJsQkFv1TU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.166.0.0/15
Signature Algorithm: sha256WithRSAEncryption
92:33:aa:51:0e:e7:6e:6e:49:7a:10:8c:d6:f1:fa:11:f9:d1:
a4:1b:5e:4b:05:9c:3a:6e:5c:54:99:2a:55:19:14:62:06:e1:
d0:b9:99:b8:f1:a0:cd:dd:d6:d3:2c:ba:e5:7d:ba:70:00:07:
4d:22:b9:37:f3:ae:38:3b:20:6e:aa:37:b1:e5:d3:88:e0:b9:
9a:2f:eb:1a:8a:17:e7:b0:0f:32:04:12:32:6b:96:92:ef:e7:
75:88:1b:23:18:52:5f:46:9a:01:ad:b1:ce:c1:93:cb:e4:5f:
9e:4e:75:05:00:fc:8f:8c:52:bc:c9:62:e0:42:fc:71:19:fd:
18:24:81:4f:ba:b5:d4:07:49:05:52:60:6e:69:37:0d:4e:a8:
b9:72:dd:88:9a:06:e2:51:b4:7b:87:cd:58:62:bf:bf:ad:a8:
07:15:8f:3f:28:02:76:ac:26:d9:a9:e7:df:0d:96:de:63:9e:
43:5a:84:a8:ad:77:3e:5d:0c:23:0b:73:f8:d4:fc:be:b4:65:
1f:ee:55:2d:fd:0a:35:c6:60:44:ed:87:b6:10:6a:65:9f:1a:
6d:a7:09:10:df:ee:5f:d1:a5:6a:8a:90:20:61:c9:2c:bc:95:
a9:43:d1:0f:1f:6d:f7:d1:17:d8:4a:d9:3b:78:54:98:e7:b0:
f2:74:e8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net