Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/hksZ7mQ7bbQgmXqScgSIgqLFNfU.roa
File: hksZ7mQ7bbQgmXqScgSIgqLFNfU.roa (raw, json)
Hash identifier: hnRAgA5tioWM6eUHykz79dm43Ev/n4g0/tX6dyIVNDA=
Subject key identifier: 86:4B:19:EE:64:3B:6D:B4:20:99:7A:92:72:04:88:82:A2:C5:35:F5
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 0703
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/hksZ7mQ7bbQgmXqScgSIgqLFNfU.roa
Signing time: Mon 10 Feb 2025 14:22:51 +0000
ROA not before: Mon 10 Feb 2025 14:22:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9678
IP address blocks: 2401:95c0:2d03::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1795 (0x703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Feb 10 14:22:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=864B19EE643B6DB420997A9272048882A2C535F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c3:b0:f8:ff:42:3a:ac:74:a1:56:6e:6c:f5:
26:fe:c5:0c:34:bd:a5:ae:26:41:36:3e:72:b7:27:
ff:9d:dc:87:4c:7c:92:10:3b:2d:08:54:6c:07:ed:
95:97:ab:7a:cf:18:a7:fc:3e:7d:2b:40:88:fe:71:
a8:a3:d0:24:0e:79:53:84:b1:b4:23:de:a1:f3:1f:
0e:cf:48:1a:31:3e:2c:8c:74:6f:15:8f:74:e1:f6:
02:64:89:01:05:53:30:2b:06:91:c1:b1:58:d4:31:
a4:15:50:66:f6:09:8b:e4:ff:f0:b2:7b:c2:14:6a:
bb:7b:dd:47:ac:db:1e:96:cc:cd:03:f1:2e:c0:9d:
88:1c:cf:a8:3c:7f:af:48:d2:79:a0:97:d5:9d:02:
29:96:4f:d1:2a:b1:4a:28:e1:e5:60:93:46:34:5f:
1c:71:58:3c:7f:04:31:3f:f6:43:7c:9c:b4:16:2e:
51:66:da:0d:f4:f5:91:74:bd:f6:9d:23:c2:19:bd:
88:31:b5:a2:cb:70:bd:37:a6:2d:30:da:ec:90:a4:
b2:89:89:13:56:ea:25:45:39:16:c1:62:6c:dd:11:
c5:49:35:c1:62:07:ca:f4:c4:01:68:38:6a:da:3a:
ff:87:90:6d:2e:c5:38:aa:ba:82:0c:ec:fc:4b:16:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4B:19:EE:64:3B:6D:B4:20:99:7A:92:72:04:88:82:A2:C5:35:F5
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/hksZ7mQ7bbQgmXqScgSIgqLFNfU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:95c0:2d03::/48
Signature Algorithm: sha256WithRSAEncryption
1e:09:dd:1d:14:16:43:0d:0c:61:aa:e3:d3:4d:12:4b:38:1c:
bb:70:de:9b:2b:98:07:ed:1b:9f:53:25:8d:4f:3a:97:d4:4c:
c4:4f:68:33:74:7c:cb:a6:4d:2e:26:11:fb:8d:2c:64:b5:59:
13:8a:e4:39:04:06:13:f4:83:47:99:7f:06:69:bd:b6:a1:4e:
d7:e8:81:a7:c4:18:61:3c:e7:c6:a4:8f:77:13:6b:e2:ca:30:
76:37:59:0d:dc:17:a8:78:39:87:a5:fc:5e:14:97:52:5c:03:
37:fa:0e:2a:79:96:bd:cf:27:c1:b1:a9:8c:28:71:5e:0a:39:
84:84:6f:05:c9:57:99:34:8f:ec:66:2f:ed:cd:c3:eb:fe:b9:
de:f6:fe:5f:89:11:50:30:66:ca:a9:77:20:76:fd:e8:d1:a7:
6d:c0:88:6b:dd:b8:4f:90:c7:5b:c6:d6:e0:f2:a1:ff:e6:af:
7d:46:f2:84:d2:ce:3d:2c:e7:1b:b8:4c:26:7d:bd:25:e5:1a:
27:63:18:0b:bd:a7:8b:a0:3c:e6:8b:a2:f0:14:29:9c:89:8b:
61:41:35:8a:cd:13:ca:84:6e:ca:35:fd:94:bb:23:e2:2f:d3:
ad:1c:38:6c:84:41:ec:6c:50:0f:71:79:bf:c5:84:55:b5:19:
87:7c:98:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:13:03 2025 by rpki-client