Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/hJSPxbrZVi4cQLXr65pNIbd_D4Y.roa
File: hJSPxbrZVi4cQLXr65pNIbd_D4Y.roa (raw, json)
Hash identifier: U9WM25K6p7t8FE3KB3K53ZoYkpXxN87qUW4CFugKm8E=
Subject key identifier: 84:94:8F:C5:BA:D9:56:2E:1C:40:B5:EB:EB:9A:4D:21:B7:7F:0F:86
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1488
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/hJSPxbrZVi4cQLXr65pNIbd_D4Y.roa
Signing time: Mon 10 Feb 2025 14:35:00 +0000
ROA not before: Mon 10 Feb 2025 14:35:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 210.61.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5256 (0x1488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:00 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=84948FC5BAD9562E1C40B5EBEB9A4D21B77F0F86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:51:96:d1:5f:fa:62:74:7b:53:75:30:7b:
f6:ce:4f:f2:30:e0:bc:cd:11:47:15:d4:cf:7a:36:
a2:27:e8:e8:da:88:f9:cf:a9:bc:7c:7f:31:16:ed:
ce:1e:c0:30:c1:62:13:7e:88:ae:13:88:0d:b4:47:
fe:b0:85:a9:98:f4:7a:50:78:9c:ec:ef:59:56:1b:
24:fb:e5:69:ce:a7:98:7c:80:2e:7a:07:ae:dc:8e:
7e:37:90:5d:60:a6:e9:8b:1e:4b:a2:f9:be:06:fd:
24:10:25:e9:e0:4b:f3:ae:e5:d9:4f:29:fc:b6:cc:
6e:bf:49:20:60:69:ea:4d:a0:03:e1:60:d1:83:05:
48:5a:99:97:36:61:a0:17:10:21:eb:59:23:cc:fc:
c7:61:99:fb:d1:a7:1c:0c:e7:84:88:1b:08:d2:08:
55:a1:c7:18:aa:2c:c5:ef:a9:c7:db:d6:ac:e2:ee:
93:0e:61:24:d8:f8:d5:e8:f5:fd:a7:84:d5:39:1e:
e5:ef:ed:0f:64:6d:ef:90:91:94:b6:ec:f7:0d:ac:
89:b1:6c:cb:5f:1f:4d:7b:ad:60:fc:cc:ae:b5:06:
a4:6c:82:85:22:67:34:d6:17:aa:85:ad:08:c0:10:
c0:ec:f1:59:5b:f6:4b:9a:c8:3a:90:61:86:28:13:
b7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:94:8F:C5:BA:D9:56:2E:1C:40:B5:EB:EB:9A:4D:21:B7:7F:0F:86
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/hJSPxbrZVi4cQLXr65pNIbd_D4Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:9b:b4:d1:94:57:c0:dc:d7:f8:4d:e4:4b:f0:50:b8:93:42:
72:f3:57:73:24:35:dd:43:94:4a:f3:d3:8a:f5:50:f6:bb:90:
e4:c4:d2:20:34:7e:f6:11:4a:e4:59:29:cd:2d:6b:2e:de:11:
31:05:df:26:a8:84:50:b1:aa:59:1c:1d:4f:e8:45:2a:ad:f3:
89:7f:ff:af:15:b9:a3:d8:63:da:39:2e:11:4d:81:a0:7b:ef:
d9:84:9d:80:1f:89:8d:ab:7a:46:dc:ac:33:bd:2a:8c:51:a9:
21:c3:39:9b:2b:40:97:16:74:db:70:46:c4:65:1a:dd:8a:ff:
e3:96:bb:82:f2:f2:54:ac:d2:de:f1:a5:50:f1:d7:fc:47:1d:
6d:76:9b:5b:c3:cc:fe:9d:6a:f2:2e:b8:34:14:ba:cf:87:90:
f0:ae:f9:3a:ae:52:4e:1b:c4:98:8c:8d:ef:76:2f:28:5d:13:
8c:d5:78:96:3f:66:ab:91:1e:5a:89:4b:58:f3:59:e6:a4:29:
ca:0a:1f:1d:d3:e3:30:32:61:14:93:e0:0c:ce:c2:b9:77:e2:
7e:20:f7:0f:89:38:d9:10:ee:9c:db:3c:27:fc:2e:a6:95:c6:
31:21:8b:05:c0:8d:4c:16:fb:d2:2b:61:ce:b7:25:c6:d8:a3:
9f:99:67:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net