Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/jEpS56ItfiexfvSzKm_2ogULTNE.roa
File: jEpS56ItfiexfvSzKm_2ogULTNE.roa (raw, json)
Hash identifier: ajkT1ayUHzRHjY8r8YYcHCQIrgy0Rh1RDK26p3TGIeQ=
Subject key identifier: 8C:4A:52:E7:A2:2D:7E:27:B1:7E:F4:B3:2A:6F:F6:A2:05:0B:4C:D1
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1497
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jEpS56ItfiexfvSzKm_2ogULTNE.roa
Signing time: Mon 10 Feb 2025 14:35:04 +0000
ROA not before: Mon 10 Feb 2025 14:35:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 59.112.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5271 (0x1497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:04 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8C4A52E7A22D7E27B17EF4B32A6FF6A2050B4CD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3f:9d:c1:2e:cc:1f:b5:90:c1:d1:5b:a1:56:
17:2a:f0:9a:f8:f1:8e:97:18:34:0d:df:e2:d7:d0:
dd:e4:24:ec:06:24:2a:d9:ce:d3:ed:da:b6:36:4d:
fc:37:2d:23:42:e3:65:a8:d8:6b:6f:3e:1d:b9:03:
2b:ea:d7:f0:35:b7:ad:6d:06:31:47:86:d1:c9:46:
0d:72:1a:5f:e5:da:92:b1:04:de:ca:a3:31:81:00:
d7:a4:67:15:51:62:fa:b9:ae:43:d1:cf:dc:0d:9b:
06:6d:11:53:03:fb:ba:ca:bb:b2:3b:7a:3f:f3:4e:
a8:90:19:c5:14:66:66:1c:3b:64:56:d7:ce:3e:d2:
e9:08:c0:aa:f0:9e:b9:98:31:7b:90:e4:49:90:b9:
d2:a6:d7:e7:34:09:a2:ff:8f:30:5b:ae:f9:71:a8:
7e:91:a4:0b:86:09:70:18:78:dd:98:32:ca:32:6a:
3d:10:c5:69:08:ec:99:00:97:19:35:16:5b:e7:b2:
98:ea:cb:bf:bf:f3:99:fd:13:6a:80:51:84:0a:14:
b6:b0:3a:83:02:76:16:52:92:da:d9:17:4b:83:3f:
6c:0c:29:75:17:76:fa:9c:7f:54:fe:0e:bb:b3:4b:
70:99:d3:78:0c:55:17:4f:d7:01:2b:a7:40:79:55:
49:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4A:52:E7:A2:2D:7E:27:B1:7E:F4:B3:2A:6F:F6:A2:05:0B:4C:D1
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jEpS56ItfiexfvSzKm_2ogULTNE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.112.0.0/13
Signature Algorithm: sha256WithRSAEncryption
30:32:45:f7:8b:c4:1e:eb:f9:98:fc:79:a1:49:04:c2:30:2c:
09:7b:9e:52:89:bf:67:2b:5f:5e:0b:9d:01:fd:64:26:c9:ec:
71:77:88:7e:8d:b8:41:f4:b5:75:00:da:43:a0:28:6a:8f:aa:
62:20:74:9f:07:4e:a3:36:8f:fa:dd:cf:97:99:fc:69:78:18:
4f:23:e9:8e:59:90:f6:65:19:7a:00:df:e8:bf:16:ad:95:fa:
97:b8:43:11:05:62:77:b6:10:0e:f5:aa:43:e5:2e:2d:1e:57:
5e:2f:d3:e2:bc:04:58:4a:e2:a9:e6:a6:0e:ab:43:37:99:a5:
c9:8e:7b:e4:ab:d5:2d:75:8d:d1:77:f3:44:79:c4:5c:2d:02:
a6:4a:22:31:e8:c0:85:cd:b5:f1:fa:db:96:1d:ed:b0:fb:03:
52:38:1f:77:da:ca:db:03:d5:a2:2e:f8:70:0a:9d:45:b4:09:
79:f3:9b:57:27:4b:5c:3e:23:d0:24:74:e0:cc:23:a1:c6:e8:
8f:99:04:a0:35:d9:6a:3b:fe:e3:54:fe:d5:35:61:cf:d7:cd:
44:20:4d:2b:bc:7f:86:cb:e1:7f:6a:a3:e3:a1:15:50:99:22:
bc:41:36:ee:60:30:b8:53:51:58:3f:cb:7a:3f:11:42:9e:63:
09:21:5b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net