Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/zTZM0ysequA4slZ_e0ICSsdeeQU.roa
File: zTZM0ysequA4slZ_e0ICSsdeeQU.roa (raw, json)
Hash identifier: xE0gPVUBFBQUtaPUbm7GcwiOdo06MgkLkzNGQVnx6E8=
Subject key identifier: CD:36:4C:D3:2B:1E:AA:E0:38:B2:56:7F:7B:42:02:4A:C7:5E:79:05
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 142F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/zTZM0ysequA4slZ_e0ICSsdeeQU.roa
Signing time: Mon 10 Feb 2025 14:34:41 +0000
ROA not before: Mon 10 Feb 2025 14:34:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 20940
IP address blocks: 210.61.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5167 (0x142f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:34:41 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CD364CD32B1EAAE038B2567F7B42024AC75E7905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:39:33:ee:f3:f7:6f:fc:93:d3:67:6c:47:
4d:db:48:4c:43:7c:e7:83:ca:eb:60:09:4d:19:08:
17:bb:38:be:5b:d9:a0:db:33:31:5a:28:52:ff:9f:
34:42:a5:0e:00:9f:f2:c7:de:d1:17:9b:8b:fb:98:
39:8b:56:cd:30:9f:7f:16:01:45:5f:af:d4:46:64:
51:60:cf:68:5e:af:5e:31:1b:7c:8b:4d:4d:8b:d1:
cc:86:8b:f6:c6:de:cf:cd:fa:cb:4e:a0:4a:e2:44:
46:1d:bd:22:f0:1a:84:c6:36:26:19:3c:8b:75:3f:
f9:a5:93:85:e3:a5:40:0c:93:a6:58:35:36:9f:51:
21:6b:98:0f:13:8c:d9:9e:bd:f7:7e:6f:24:44:1b:
54:3c:42:99:de:d4:39:f3:14:46:98:ba:aa:05:d4:
9f:dc:4c:4c:9e:e5:4b:09:9f:72:5d:4a:1b:cc:ae:
67:9f:a3:e1:0c:cc:5a:8a:84:fa:72:73:60:37:e0:
2f:02:c9:d4:07:0c:fe:65:94:d5:09:a0:7b:9c:b7:
0c:08:7b:d8:d4:6f:a3:1c:37:f9:f5:d6:fd:51:88:
ff:8f:8a:0e:0e:e0:22:0b:e3:f3:38:b0:98:79:08:
7b:c0:4b:81:2e:80:cf:35:0b:df:fb:20:6b:95:12:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:36:4C:D3:2B:1E:AA:E0:38:B2:56:7F:7B:42:02:4A:C7:5E:79:05
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/zTZM0ysequA4slZ_e0ICSsdeeQU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.248.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:35:96:65:a1:21:ad:e8:40:2b:df:9d:e3:2c:18:d3:1d:95:
f0:b1:0e:16:b3:e9:8e:ee:6f:df:e3:82:d1:0e:5f:8b:73:66:
91:f9:14:63:0e:42:a2:e4:fa:1e:09:f9:d2:6d:f6:30:3d:79:
ea:f5:c9:b5:99:05:7c:1e:3a:ea:1c:22:dc:c5:24:28:ab:c9:
cd:7d:61:0c:04:ef:c7:40:ad:22:f7:01:f5:ec:b6:82:06:f2:
bc:f1:42:96:b6:a6:11:91:34:b6:41:c0:8f:3b:33:9b:9f:27:
8e:c5:6b:58:28:04:5e:b8:80:c1:9a:b7:05:85:9a:b1:77:0d:
33:84:c8:3b:64:44:a8:38:72:3c:7b:1e:e2:0d:59:25:8a:f2:
d1:c4:40:10:29:b0:75:30:f5:14:33:4d:c1:b8:80:b3:1d:90:
2b:eb:7f:9f:a6:ac:ce:ec:bd:24:21:a5:dc:d3:d4:9b:88:31:
c7:9b:b4:91:8d:3a:85:ed:4f:26:91:9c:9d:16:ac:c8:c8:11:
61:8e:3a:79:8c:f3:71:b2:89:d5:f8:2f:28:17:7b:33:e3:b1:
b5:4b:bd:0b:85:13:65:2d:5e:4a:7f:69:f3:7b:3c:3a:66:d4:
ee:05:ee:f6:05:57:41:77:2c:a0:a5:28:96:09:e9:36:6d:16:
29:c7:24:a1
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICFC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM0NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENEMzY0Q0QzMkIxRUFB
RTAzOEIyNTY3RjdCNDIwMjRBQzc1RTc5MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjbjkz7vP3b/yT02dsR03bSExDfOeDyutgCU0ZCBe7OL5b2aDb
MzFaKFL/nzRCpQ4An/LH3tEXm4v7mDmLVs0wn38WAUVfr9RGZFFgz2her14xG3yL
TU2L0cyGi/bG3s/N+stOoEriREYdvSLwGoTGNiYZPIt1P/mlk4XjpUAMk6ZYNTaf
USFrmA8TjNmevfd+byREG1Q8Qpne1DnzFEaYuqoF1J/cTEye5UsJn3JdShvMrmef
o+EMzFqKhPpyc2A34C8CydQHDP5llNUJoHuctwwIe9jUb6McN/n11v1RiP+Pig4O
4CIL4/M4sJh5CHvAS4EugM81C9/7IGuVEq9dAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUzTZM0ysequA4slZ/e0ICSsdeeQUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC96VFpNMHlzZXF1QTRzbFpfZTBJ
Q1NzZGVlUVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0j34
MA0GCSqGSIb3DQEBCwUAA4IBAQDQNZZloSGt6EAr353jLBjTHZXwsQ4Ws+mO7m/f
44LRDl+Lc2aR+RRjDkKi5PoeCfnSbfYwPXnq9cm1mQV8HjrqHCLcxSQoq8nNfWEM
BO/HQK0i9wH17LaCBvK88UKWtqYRkTS2QcCPOzObnyeOxWtYKAReuIDBmrcFhZqx
dw0zhMg7ZESoOHI8ex7iDVklivLRxEAQKbB1MPUUM03BuICzHZAr63+fpqzO7L0k
IaXc09SbiDHHm7SRjTqF7U8mkZydFqzIyBFhjjp5jPNxsonV+C8oF3sz47G1S70L
hRNlLV5Kf2nzezw6ZtTuBe72BVdBdyygpSiWCek2bRYpxySh
-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:02 2025 by rpki-client on console.sobornost.net