Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/4UcaiMRoSEHBt7jAqc4m9UO4_bM.roa
File: 4UcaiMRoSEHBt7jAqc4m9UO4_bM.roa (raw, json)
Hash identifier: uTjSA7MrWrz5qWSJPGN1Q1HeaZbTvBuidH4mHOeNV1Q=
Subject key identifier: E1:47:1A:88:C4:68:48:41:C1:B7:B8:C0:A9:CE:26:F5:43:B8:FD:B3
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1732
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/4UcaiMRoSEHBt7jAqc4m9UO4_bM.roa
Signing time: Wed 12 Feb 2025 01:36:29 +0000
ROA not before: Wed 12 Feb 2025 01:36:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 198949
IP address blocks: 210.61.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5938 (0x1732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E1471A88C4684841C1B7B8C0A9CE26F543B8FDB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:86:71:04:95:14:39:ef:ab:b6:34:d3:4e:
d5:7e:75:e5:53:72:ff:96:2a:70:74:9a:9e:67:0b:
c2:cf:89:e6:95:20:e7:c0:c5:8f:cf:fa:8e:ec:7e:
2e:95:e7:3a:70:79:ee:87:8d:f1:74:95:94:37:f4:
74:5a:e6:d3:84:71:dd:9e:fe:b9:26:90:b8:84:77:
b4:de:2a:6f:24:1c:64:fc:a1:fc:8a:d4:0c:07:4b:
c0:43:24:68:54:a4:84:5e:af:be:f0:f1:41:c0:35:
45:01:59:04:90:5b:23:69:c6:45:0d:c3:fb:bf:26:
7e:2b:fe:d8:06:70:9a:22:4f:e6:56:7b:60:b6:a1:
79:2c:9d:9b:15:52:ba:f7:da:a7:06:45:8d:af:e9:
30:02:08:0b:72:12:20:c7:80:6f:fe:13:b6:c1:13:
b7:7e:a8:c0:f3:e2:95:2e:85:78:2e:d7:87:c7:c1:
61:db:3f:03:11:ee:92:bc:08:a2:b6:9e:32:7f:af:
ae:d7:93:74:1e:87:ef:5a:46:26:a8:51:cd:64:f5:
ce:5c:69:22:4d:44:bd:eb:1d:61:ed:f8:40:f5:a6:
bb:08:35:4b:0a:fc:7b:b0:ba:18:ec:4d:86:cf:e7:
d5:69:0d:f2:50:9a:6d:40:65:6e:0a:a5:f4:f8:6c:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:47:1A:88:C4:68:48:41:C1:B7:B8:C0:A9:CE:26:F5:43:B8:FD:B3
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/4UcaiMRoSEHBt7jAqc4m9UO4_bM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.3.0/24
Signature Algorithm: sha256WithRSAEncryption
04:19:3a:ce:da:ab:72:16:56:36:f9:86:99:01:27:ae:b2:a1:
a0:c6:3d:5d:a3:a9:5a:2f:a2:91:35:ba:d0:27:fc:aa:7c:26:
78:cc:47:c7:6b:36:fd:7c:85:55:ef:82:44:12:96:30:e2:bd:
c4:77:69:b5:23:53:7c:c7:5d:d8:06:12:bc:41:ef:10:e0:84:
6b:33:ff:08:a6:0c:a5:2d:4e:0a:76:df:58:a0:b9:32:b3:60:
e3:66:50:ba:4e:da:33:a9:fd:b6:6a:86:3a:7a:04:a9:77:13:
c9:0d:54:a1:14:9d:6c:ed:60:8e:08:6e:5f:5d:99:75:e9:53:
e3:26:d7:40:95:00:12:8b:a3:c4:c2:90:55:e5:8f:02:c8:c1:
f0:8f:d8:24:b9:f2:2b:ef:15:b8:93:7f:0e:cd:20:f1:f6:03:
e7:00:13:a1:a0:e2:04:e0:21:58:91:82:d2:15:7c:0d:8a:f0:
5f:2d:7c:91:d9:fe:96:80:d8:01:fe:80:39:94:42:3b:ca:a6:
a2:7b:98:fd:2c:ce:9a:c9:11:29:58:5f:df:e7:91:b3:27:4a:
c9:3a:69:0f:64:ab:c5:be:f0:2e:d8:86:71:67:b2:27:ca:9c:
40:b7:94:aa:43:57:11:8b:c3:1a:1d:07:2c:06:a5:99:47:d9:
90:d0:4a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:02:21 2025 by rpki-client