Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/zsOjmOlGXZcnSJ2Q7muVi2XgNwk.roa
File: zsOjmOlGXZcnSJ2Q7muVi2XgNwk.roa (raw, json)
Hash identifier: iY4VKF6NYbHi+wBjGNeizc8q4pfP5DnydYgPtyXKax4=
Subject key identifier: CE:C3:A3:98:E9:46:5D:97:27:48:9D:90:EE:6B:95:8B:65:E0:37:09
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 149C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/zsOjmOlGXZcnSJ2Q7muVi2XgNwk.roa
Signing time: Mon 10 Feb 2025 14:35:05 +0000
ROA not before: Mon 10 Feb 2025 14:35:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 210.65.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5276 (0x149c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 10 14:35:05 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CEC3A398E9465D9727489D90EE6B958B65E03709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:ef:1b:4a:88:ca:9d:f1:78:4f:d8:7b:75:
78:08:f6:78:48:0a:7d:53:3c:63:6b:a0:b9:22:23:
c5:bb:54:ca:2a:e4:73:d3:4a:d1:e0:35:76:b5:7c:
33:dd:bd:46:0f:4b:93:8c:f2:ab:eb:9d:02:4a:88:
fb:4c:ed:1e:a6:9e:ed:6f:90:4b:9d:6f:ac:bb:d1:
d1:1a:5d:f2:b3:7d:f6:08:70:7f:a0:27:56:01:e6:
a8:52:68:e9:38:ea:d1:2b:74:f1:8f:33:63:80:03:
5d:86:49:d4:a4:40:97:10:9a:b3:47:52:61:2e:3c:
0f:a9:ba:a7:03:4e:03:ea:89:a7:e9:e0:03:1c:18:
49:0e:64:78:36:6f:84:b7:0b:57:e2:2a:f5:ea:82:
52:b0:91:91:bf:13:b3:bc:db:b9:f4:04:c1:55:a2:
f4:cb:f0:e0:87:11:aa:a7:b3:48:45:81:6c:a3:5a:
5c:5c:b1:df:9b:72:32:82:e9:d5:2b:cb:a4:cf:d2:
64:df:66:fe:15:f3:85:ad:78:88:65:6a:6c:75:3f:
59:71:8f:57:0b:b1:b8:57:f7:c7:b0:d5:99:69:d6:
4a:9e:0b:0d:cf:23:3d:0c:0a:7f:a4:14:a1:c8:f3:
6b:13:c2:9a:85:a3:7d:a6:b3:8f:cc:70:78:a0:2b:
08:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C3:A3:98:E9:46:5D:97:27:48:9D:90:EE:6B:95:8B:65:E0:37:09
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/zsOjmOlGXZcnSJ2Q7muVi2XgNwk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.65.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:95:f6:ae:9c:3c:f4:46:d2:60:5a:be:30:e0:60:26:c5:8c:
ca:d4:80:a2:9a:eb:7e:9b:27:90:8e:5b:63:21:e4:8c:a8:41:
a0:e7:fa:0d:6b:53:f0:d2:8f:82:45:9a:75:ff:3e:e1:3e:a3:
fa:60:21:41:b2:05:47:ac:81:7c:f1:0e:90:5f:f3:47:bd:99:
2d:f7:8f:1e:f1:0f:06:03:63:0e:2b:c9:8f:03:4b:a8:aa:8c:
09:d9:e5:3a:3e:68:f2:1e:dd:4c:d8:8c:c8:a5:61:bc:7b:3d:
9a:34:2d:c9:ba:85:b7:12:2e:f0:59:e1:56:ba:27:3d:8f:51:
a7:b2:60:7d:d3:d9:8f:9b:49:f1:40:f0:ff:74:1c:92:0b:0a:
ce:c9:f4:ed:51:25:d7:c4:b3:b2:49:30:7b:ad:e7:44:bd:29:
3a:f8:13:39:8e:0e:87:2c:0e:8e:e2:06:9c:15:90:06:1d:e4:
d7:f5:6a:9c:e5:7e:2a:33:34:70:7a:89:45:06:79:f9:a9:fa:
50:f7:da:c5:2e:c7:3b:1d:db:62:1e:ac:9e:bd:9e:62:9e:5d:
55:27:2c:96:00:90:15:27:91:ac:42:7c:99:83:57:dc:d6:ad:
f5:b2:36:9f:7e:b7:34:82:30:49:35:3f:6d:16:a7:3b:33:92:
d7:be:84:c8
-----BEGIN CERTIFICATE-----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Generated at Wed Feb 12 03:38:02 2025 by rpki-client on console.sobornost.net