Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ofF14cdOotjINyF81VsN3iXIMEA.roa
File: ofF14cdOotjINyF81VsN3iXIMEA.roa (raw, json)
Hash identifier: qvNw1e+ypd60QukF6Rk12PsbTbGyo6kso22muvEVXmw=
Subject key identifier: A1:F1:75:E1:C7:4E:A2:D8:C8:37:21:7C:D5:5B:0D:DE:25:C8:30:40
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14D2
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ofF14cdOotjINyF81VsN3iXIMEA.roa
Signing time: Mon 10 Feb 2025 14:35:18 +0000
ROA not before: Mon 10 Feb 2025 14:35:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 220.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5330 (0x14d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:18 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A1F175E1C74EA2D8C837217CD55B0DDE25C83040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:74:fe:8e:00:8a:fa:00:da:db:2e:96:df:
12:6b:a3:00:19:15:ec:b6:dc:41:f9:17:e5:a3:40:
5b:58:0f:57:be:be:45:ad:49:d8:d0:d2:f3:30:2b:
d1:8b:26:a4:53:7f:1e:93:60:68:d2:85:04:e3:f3:
1d:25:e6:5c:91:e1:a9:26:2e:9d:de:07:f1:39:41:
f9:3a:b3:fd:64:74:a8:de:18:81:15:99:13:04:73:
b1:0f:87:bb:fd:a0:f3:89:91:40:4c:d1:ec:20:8e:
af:0f:c0:9f:59:14:13:40:75:2c:ba:e5:09:48:4b:
d7:78:92:ec:ae:44:34:40:98:81:6e:aa:ee:de:89:
6c:12:19:ec:7c:09:81:ca:97:e9:c8:2c:80:6a:cd:
6a:e3:2d:b7:ea:4e:5f:02:b5:65:f4:ce:be:7e:f4:
3a:59:fa:aa:4c:ce:3b:77:23:a8:57:9e:e2:7c:da:
8c:9b:b6:0e:59:4d:40:e2:0a:61:d5:fa:5d:61:9d:
f1:e8:5c:dc:f8:e7:14:31:f6:41:3d:92:61:03:55:
74:4b:2d:28:f4:1e:80:88:19:c5:3d:1d:27:db:84:
d1:fb:b5:29:91:ab:4b:e8:61:4d:d3:dc:45:ee:cf:
74:ee:3e:79:b1:ed:aa:2f:9c:34:05:73:57:04:82:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F1:75:E1:C7:4E:A2:D8:C8:37:21:7C:D5:5B:0D:DE:25:C8:30:40
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ofF14cdOotjINyF81VsN3iXIMEA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:88:6b:83:52:1a:12:e1:ea:a0:6e:f1:3d:10:2f:75:a6:8e:
06:d0:8e:91:74:19:bb:03:97:4f:33:fc:8f:b5:92:ff:e9:18:
bd:f2:c8:ce:f8:27:91:46:38:ed:a3:35:df:0d:0b:1a:a2:cb:
42:1c:7f:24:6e:82:7f:6b:cb:26:d6:10:f3:9d:7b:76:a5:db:
1e:1d:74:21:ff:83:63:3f:d9:ff:0d:3c:9f:5b:ff:e6:80:ff:
d6:ce:ea:83:0e:78:73:74:9d:b8:4c:6f:5e:34:72:56:4a:60:
8a:87:7a:2b:a9:2f:2d:dc:70:1d:2a:42:9b:28:87:05:68:9f:
22:e9:e5:2f:2b:2e:87:7b:b0:76:d8:09:ff:9f:4a:d8:3c:30:
b6:3c:1c:5f:6f:ec:a7:9b:64:68:e2:f9:44:59:4c:80:a7:3f:
4e:63:ab:c8:72:5a:da:17:9e:0b:aa:44:fd:3d:47:34:99:40:
f5:0f:ad:83:a2:24:5b:b9:ec:c4:92:18:a7:13:7e:79:d1:37:
11:96:f9:f9:e5:54:6e:a5:04:be:02:e8:36:9f:01:59:5d:ea:
a0:d5:9a:b1:1a:1c:9e:ff:dc:f0:5f:07:63:fb:ad:75:f4:f0:
77:bf:c2:9a:ef:26:58:fe:43:ad:42:a4:1f:1f:ed:ac:b2:05:
7b:b7:c7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net