Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/xb_AXqvHiASuDt2dZM2vDcUNMZc.roa
File: xb_AXqvHiASuDt2dZM2vDcUNMZc.roa (raw, json)
Hash identifier: U3uOcRQa8vwHd1xf/yALyXqN2MXtbHs8s4aBjtSjvrw=
Subject key identifier: C5:BF:C0:5E:AB:C7:88:04:AE:0E:DD:9D:64:CD:AF:0D:C5:0D:31:97
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 144A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xb_AXqvHiASuDt2dZM2vDcUNMZc.roa
Signing time: Mon 10 Feb 2025 14:34:47 +0000
ROA not before: Mon 10 Feb 2025 14:34:47 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 210.71.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5194 (0x144a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:47 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C5BFC05EABC78804AE0EDD9D64CDAF0DC50D3197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0e:39:ce:86:a2:f2:31:65:65:b4:76:66:82:
0c:99:71:12:a7:8c:07:30:9c:9d:06:d5:dd:3c:9c:
5d:4d:d9:f7:40:41:2a:7b:0d:e6:8c:35:bb:da:3a:
7b:9a:7d:a4:61:af:e8:d3:69:e4:fe:36:98:78:0f:
ed:2f:db:47:c0:31:a5:94:77:8b:30:18:d4:03:f1:
9c:18:04:4b:ca:3c:a3:3b:42:01:a7:41:ed:c0:05:
ba:5b:d1:db:bd:00:d2:9b:f8:7d:f9:21:07:8f:75:
80:ca:39:ac:61:c3:45:34:cd:37:8f:03:10:cf:8e:
75:67:46:14:44:c6:c0:d0:f2:04:f7:a6:79:ee:55:
57:08:1a:33:b0:f7:c6:e0:01:e5:de:8b:99:80:a8:
1f:10:7f:9f:3e:a3:fd:42:2f:40:00:40:86:e6:78:
b1:c3:be:a7:d9:b6:61:cd:a0:17:24:34:b9:62:bb:
8c:00:8d:d4:34:85:1c:e1:08:92:ca:28:11:f2:cb:
b4:a7:ac:a9:94:4c:f8:eb:d9:25:11:16:ea:eb:7c:
ab:20:54:fc:f3:7e:32:f6:df:ff:e1:a5:d2:10:21:
d1:f1:ba:41:28:38:8d:c5:99:41:46:a0:d0:a8:c5:
b2:d6:1a:2a:70:2c:8f:fe:19:f6:ab:8d:74:fb:25:
40:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BF:C0:5E:AB:C7:88:04:AE:0E:DD:9D:64:CD:AF:0D:C5:0D:31:97
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xb_AXqvHiASuDt2dZM2vDcUNMZc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.71.128.0/17
Signature Algorithm: sha256WithRSAEncryption
d2:97:8e:b3:19:51:01:3a:61:3e:bc:4f:37:1a:e0:f2:5b:52:
01:20:e2:d8:8d:26:b9:60:21:52:7e:4f:de:60:07:54:fd:99:
8d:a4:01:9e:2d:2a:06:fd:4b:fe:12:8b:5a:ba:d0:12:65:ba:
bf:ef:72:3c:1c:d7:c1:01:c3:31:7d:ef:d3:9b:e4:d9:a9:dc:
81:2a:89:ab:64:b1:16:cb:3d:22:15:85:e4:03:b3:f3:0b:a1:
06:34:15:54:f5:e2:31:3e:13:d6:cd:da:50:5d:22:a5:76:23:
e4:e1:58:e3:0f:d4:d3:d1:45:f2:f6:56:89:ca:49:80:c8:cd:
f6:e1:81:e4:2f:d1:64:8d:3b:57:6b:f9:a3:bd:6e:3f:32:aa:
d5:af:eb:fa:50:09:90:18:21:09:af:04:cf:a8:21:59:58:7c:
ce:c1:9a:3f:73:5d:f3:60:a2:17:36:74:02:d6:8b:a3:24:a5:
86:ef:c8:9a:8d:5e:bb:95:17:bb:aa:a0:c7:ef:89:08:a0:61:
24:6c:da:86:af:3c:71:e5:dd:52:05:fd:9a:75:cc:cf:6f:e5:
71:d8:9e:99:9d:4c:54:06:ae:3d:46:9f:76:93:c2:b2:aa:94:
93:80:65:e2:91:b3:33:c7:96:4f:c2:dd:fa:34:5f:fa:6d:d7:
02:c3:2f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:02 2025 by rpki-client on console.sobornost.net