Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/xIaWpedP8EK4hKQgRJGnshumRTg.roa
File: xIaWpedP8EK4hKQgRJGnshumRTg.roa (raw, json)
Hash identifier: CQEjswlL116bIuBUQMUHseDuRxf/ph7MG7Ug5VhCDP8=
Subject key identifier: C4:86:96:A5:E7:4F:F0:42:B8:84:A4:20:44:91:A7:B2:1B:A6:45:38
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 148E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xIaWpedP8EK4hKQgRJGnshumRTg.roa
Signing time: Mon 10 Feb 2025 14:35:02 +0000
ROA not before: Mon 10 Feb 2025 14:35:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 142005
IP address blocks: 210.61.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5262 (0x148e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:02 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C48696A5E74FF042B884A4204491A7B21BA64538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:0d:b3:cd:6a:65:77:c2:1b:71:93:c1:eb:
b2:37:6e:a5:1c:0f:37:8b:ef:c4:38:74:2b:f5:3d:
cd:e0:21:90:8b:e9:bb:ce:30:6c:2f:d4:81:17:4b:
6d:3b:45:18:70:63:99:3f:3c:7f:7e:07:01:50:61:
98:34:bc:99:53:0d:88:59:d7:9c:ed:dc:10:e9:90:
f6:ea:4f:7a:57:01:8a:ff:1b:ef:e4:50:61:d4:6c:
a5:4f:65:cd:4c:c9:06:f2:65:ef:e2:c6:2d:00:04:
b8:83:07:a9:ed:d6:4b:ac:1f:81:2f:cb:02:e0:09:
06:3e:b9:84:11:56:03:23:6b:b9:c2:04:66:43:c3:
10:3e:ce:78:69:c8:09:aa:b7:5e:3f:80:b1:f9:ce:
52:b4:98:56:4a:ec:4e:4f:a5:03:fb:54:14:00:6f:
b8:32:08:d0:41:35:18:67:cd:53:34:bc:56:9c:62:
81:0a:5e:93:c0:db:89:82:55:7e:e4:66:63:d7:0b:
7c:e6:59:a0:dd:13:f1:ca:78:38:13:2b:88:19:eb:
6d:33:94:01:b5:4c:c2:18:df:70:00:4d:a2:08:10:
8c:f7:67:c8:2a:f2:77:2f:41:e7:c2:39:08:43:fd:
d6:ec:48:6b:5f:12:80:4b:2f:df:fd:e1:6e:3d:ab:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:86:96:A5:E7:4F:F0:42:B8:84:A4:20:44:91:A7:B2:1B:A6:45:38
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xIaWpedP8EK4hKQgRJGnshumRTg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.114.0/24
Signature Algorithm: sha256WithRSAEncryption
71:7b:2d:a8:21:22:1a:b4:c4:76:97:05:31:ee:00:b0:83:e9:
09:6a:2e:10:22:72:21:50:ff:af:e6:b5:2c:60:ce:7c:0d:66:
eb:ce:0f:ed:a9:16:01:45:36:99:ca:a7:94:34:8f:28:da:50:
31:4e:ef:89:af:cb:b5:d8:50:5d:99:96:dc:50:97:9d:52:4d:
0e:27:b1:e6:91:ea:57:c9:c4:ad:c9:7e:f7:de:30:c7:42:c9:
85:f8:f0:ca:ea:57:89:8e:8e:d3:dc:8f:37:66:3e:f6:94:cf:
f7:91:f8:58:09:69:e0:1b:55:0d:c6:43:f9:38:e4:8c:20:d4:
c3:f5:f2:c4:22:f8:6d:4f:fb:02:6f:d1:17:8f:c5:60:2e:c0:
55:47:35:7f:72:fa:7d:42:e9:fa:1d:f3:80:1d:d5:b4:21:35:
55:ad:b0:1c:53:b3:26:e9:88:82:2a:17:72:6d:8e:6c:6e:74:
11:5d:12:97:4e:ac:f6:77:97:86:c0:32:eb:62:28:77:d0:6a:
01:3d:be:c7:ec:ce:91:d1:1d:b3:ab:62:42:66:49:d0:6c:f5:
5a:c7:a9:3a:e0:13:5d:f5:c6:d1:31:e6:1a:88:12:fc:1a:53:
e2:ba:23:e6:3c:a9:14:92:1f:e9:c1:12:61:02:10:5a:29:0c:
de:35:f3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:02 2025 by rpki-client on console.sobornost.net