Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/1Zt_XCag0IDqinTe2_1etGDEk_8.roa
File: 1Zt_XCag0IDqinTe2_1etGDEk_8.roa (raw, json)
Hash identifier: ef9nAeGnvLryj1O66THMXqf/sjRegOu00ViE0ZTtlws=
Subject key identifier: D5:9B:7F:5C:26:A0:D0:80:EA:8A:74:DE:DB:FD:5E:B4:60:C4:93:FF
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1777
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1Zt_XCag0IDqinTe2_1etGDEk_8.roa
Signing time: Wed 12 Feb 2025 01:36:44 +0000
ROA not before: Wed 12 Feb 2025 01:36:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 61.216.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6007 (0x1777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D59B7F5C26A0D080EA8A74DEDBFD5EB460C493FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:59:9d:71:f1:5d:28:ef:bc:67:59:92:f4:
8a:27:d9:df:a9:aa:ac:85:9a:c4:b9:31:5b:50:d1:
28:61:a9:e1:26:c1:11:e3:c7:92:0b:16:06:17:c0:
81:d7:56:0d:23:50:f2:49:0b:78:af:23:de:d5:0c:
1d:91:d5:36:03:51:14:cd:49:6b:9e:21:88:12:19:
41:54:e2:7d:0b:f6:01:3f:25:b8:58:80:7d:f1:73:
d0:e0:0e:c9:63:cc:e0:cb:97:32:db:11:fb:d0:29:
c0:7a:47:47:87:8b:53:13:72:24:39:b2:27:69:48:
fa:4b:d2:52:a5:42:50:73:e2:38:0b:3f:48:d0:98:
f0:22:af:51:6a:11:d2:7e:b8:3e:e8:34:49:59:31:
e2:3c:4b:19:7e:7c:b7:d2:7e:8f:f6:54:42:e8:99:
e5:aa:ad:0e:d7:16:fd:58:ec:2f:a6:04:da:1e:75:
bd:64:97:a8:4e:b0:e6:4f:8f:43:1c:5e:53:00:ae:
6b:aa:79:72:a4:0f:ab:82:0d:39:5e:cd:d9:eb:93:
c7:c6:02:05:0a:6c:89:06:60:d3:3f:1f:fe:ba:e3:
44:44:3c:af:5a:56:3c:c0:e7:0a:98:a9:8d:76:5f:
70:85:12:6f:f1:7c:7b:b6:6b:f6:5e:50:b6:1a:bd:
8c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9B:7F:5C:26:A0:D0:80:EA:8A:74:DE:DB:FD:5E:B4:60:C4:93:FF
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/1Zt_XCag0IDqinTe2_1etGDEk_8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.216.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:4a:2d:c5:4e:e4:49:36:eb:af:9c:e8:f6:78:bf:a6:e0:83:
43:22:6a:83:08:3d:99:c7:16:f8:4b:f0:b6:19:78:bb:fe:4c:
1b:2f:bc:fe:79:11:4d:7d:da:26:81:3a:00:d6:9b:2c:d5:8b:
36:49:82:0d:ae:f5:96:de:c1:0a:51:6d:f3:0b:e8:3a:8e:58:
2f:fc:a7:3a:d0:8c:0c:21:0a:8d:6b:26:58:0e:0d:ef:3b:df:
34:43:2d:5a:68:6c:76:94:9a:17:15:91:cb:b6:75:30:17:c6:
11:95:68:9a:72:c1:52:c8:2c:13:0d:36:f7:fc:3d:5c:2e:4f:
16:f0:f3:25:68:79:fe:3e:d9:b5:d9:aa:21:c2:b7:56:91:55:
13:92:1e:77:35:bf:49:1c:dd:3b:1d:1f:b7:c1:21:5a:41:78:
a4:17:86:bb:7a:0f:3c:35:ea:aa:0b:b8:cc:70:ec:75:cf:75:
ae:2f:87:06:4a:05:19:ea:07:19:ea:c5:52:4f:25:98:4f:00:
5a:01:65:4d:a2:ac:ef:4f:cf:92:b0:76:22:ca:53:35:bc:4e:
99:96:60:89:9d:ca:c4:82:b4:51:eb:72:10:a8:5e:a2:3f:81:
26:e9:02:41:88:91:2a:0a:53:b8:69:12:f1:f1:3d:6a:8f:54:
91:ea:7c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:20 2025 by rpki-client