Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/q58YmhuWRG0eFwvVpDoWLMnTn_A.roa
File: q58YmhuWRG0eFwvVpDoWLMnTn_A.roa (raw, json)
Hash identifier: n+kmDClxwWW1ERzBwALrOjpBHXhOetsVIqZ33+uhfmo=
Subject key identifier: AB:9F:18:9A:1B:96:44:6D:1E:17:0B:D5:A4:3A:16:2C:C9:D3:9F:F0
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14B2
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/q58YmhuWRG0eFwvVpDoWLMnTn_A.roa
Signing time: Mon 10 Feb 2025 14:35:11 +0000
ROA not before: Mon 10 Feb 2025 14:35:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 800
IP address blocks: 175.111.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5298 (0x14b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AB9F189A1B96446D1E170BD5A43A162CC9D39FF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:04:f2:f5:27:c7:4f:df:44:8f:47:28:7b:
b8:1d:0f:c6:48:4d:87:9c:da:dd:6d:6a:f5:07:be:
31:de:04:3a:3f:f7:85:63:94:66:bd:58:b3:52:10:
aa:78:cd:81:db:67:f3:43:67:59:10:df:6d:68:10:
c3:ed:8d:bd:55:b2:a6:31:73:3a:43:16:25:58:92:
fa:b9:53:27:c9:03:b7:54:cd:f5:2d:ff:2d:4c:02:
75:7c:9f:2a:45:9c:52:2e:50:4c:82:49:c4:7a:53:
87:20:41:2c:6e:4a:63:1d:26:04:70:f4:1e:b0:30:
e4:cc:51:23:ee:1f:e5:42:5a:03:c5:f7:38:05:66:
dd:80:a1:5d:51:34:45:69:83:fd:41:3b:72:5d:2a:
15:12:c6:5b:00:58:6e:0c:ab:89:5d:49:67:91:f8:
ec:f7:b2:cf:e1:9e:21:a7:79:52:c5:20:eb:06:79:
5f:a1:54:0e:2e:c8:a6:17:3a:4e:77:c8:43:5b:44:
98:79:90:61:3f:1f:6d:80:ab:ca:96:32:6a:17:c3:
47:63:6e:88:c9:1a:01:86:82:71:4b:9c:f9:c1:f8:
a2:81:44:0e:a2:aa:4a:3f:89:bd:89:b2:dc:d8:1a:
03:29:ee:d5:ed:e0:86:90:36:b2:f7:a6:9a:db:3f:
5a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9F:18:9A:1B:96:44:6D:1E:17:0B:D5:A4:3A:16:2C:C9:D3:9F:F0
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/q58YmhuWRG0eFwvVpDoWLMnTn_A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.237.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:64:2c:8b:8e:20:1d:17:83:3a:74:b7:36:dc:59:6c:2d:a4:
b1:27:dd:20:a9:b0:83:b1:23:c4:fe:8c:4a:89:03:d2:0b:0a:
06:a3:90:8f:cc:0e:2c:d2:fa:01:8e:6a:ed:51:b8:7b:99:b7:
65:39:82:13:04:e7:c5:d5:c8:e9:98:99:57:61:68:63:7a:0e:
1a:ce:61:b3:e6:ba:c6:c3:16:fc:36:5e:46:26:5b:90:9c:07:
3c:77:b9:2e:cf:d9:e0:0e:f1:37:b7:97:23:ca:68:93:12:a6:
2d:9a:d9:54:bb:b0:a1:57:bc:19:9f:dd:1e:5d:31:ad:a8:8b:
62:66:3c:10:e4:02:de:a7:54:49:4a:01:1f:78:af:c1:06:f1:
53:43:14:51:df:92:59:03:ac:55:a7:fa:70:c3:c7:b3:73:50:
72:c4:a4:79:24:40:62:05:8f:8b:6b:15:9b:d3:db:bb:e2:d0:
90:ca:b0:60:13:d5:83:71:dc:3c:5a:15:0c:94:d9:22:55:f0:
59:0c:6b:9f:ee:98:5d:b8:aa:d7:54:26:7b:d3:ae:e1:83:40:
3e:1d:8a:f4:12:ec:f4:34:95:35:b5:5a:fe:78:8f:76:2d:fc:
ce:25:61:17:81:0f:52:aa:9b:9b:64:23:fe:2b:b8:ab:65:89:
73:cf:b0:54
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICFLIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM1MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFCOUYxODlBMUI5NjQ0
NkQxRTE3MEJENUE0M0ExNjJDQzlEMzlGRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNhgTy9SfHT99Ej0coe7gdD8ZITYec2t1tavUHvjHeBDo/94Vj
lGa9WLNSEKp4zYHbZ/NDZ1kQ321oEMPtjb1VsqYxczpDFiVYkvq5UyfJA7dUzfUt
/y1MAnV8nypFnFIuUEyCScR6U4cgQSxuSmMdJgRw9B6wMOTMUSPuH+VCWgPF9zgF
Zt2AoV1RNEVpg/1BO3JdKhUSxlsAWG4Mq4ldSWeR+Oz3ss/hniGneVLFIOsGeV+h
VA4uyKYXOk53yENbRJh5kGE/H22Aq8qWMmoXw0djbojJGgGGgnFLnPnB+KKBRA6i
qko/ib2JstzYGgMp7tXt4IaQNrL3pprbP1r5AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUq58YmhuWRG0eFwvVpDoWLMnTn/AwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9xNThZbWh1V1JHMGVGd3ZWcERv
V0xNblRuX0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr2/t
MA0GCSqGSIb3DQEBCwUAA4IBAQAcZCyLjiAdF4M6dLc23FlsLaSxJ90gqbCDsSPE
/oxKiQPSCwoGo5CPzA4s0voBjmrtUbh7mbdlOYITBOfF1cjpmJlXYWhjeg4azmGz
5rrGwxb8Nl5GJluQnAc8d7kuz9ngDvE3t5cjymiTEqYtmtlUu7ChV7wZn90eXTGt
qItiZjwQ5ALep1RJSgEfeK/BBvFTQxRR35JZA6xVp/pww8ezc1ByxKR5JEBiBY+L
axWb09u74tCQyrBgE9WDcdw8WhUMlNkiVfBZDGuf7phduKrXVCZ7067hg0A+HYr0
Euz0NJU1tVr+eI92LfzOJWEXgQ9SqpubZCP+K7irZYlzz7BU
-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net