Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/6GlV6oV04J0jfpn8v5POFE6Ozfc.roa
File: 6GlV6oV04J0jfpn8v5POFE6Ozfc.roa (raw, json)
Hash identifier: dXg3vIjQCZ+3jXZYRxKe1U6lW1fiQrYI83rjV7T69Nc=
Subject key identifier: E8:69:55:EA:85:74:E0:9D:23:7E:99:FC:BF:93:CE:14:4E:8E:CD:F7
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1781
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6GlV6oV04J0jfpn8v5POFE6Ozfc.roa
Signing time: Wed 12 Feb 2025 01:36:46 +0000
ROA not before: Wed 12 Feb 2025 01:36:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 20940
IP address blocks: 203.74.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6017 (0x1781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E86955EA8574E09D237E99FCBF93CE144E8ECDF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:fd:b8:a2:63:0c:f4:22:1e:3b:a0:56:c4:
9e:6e:b5:0e:51:d4:90:24:44:45:02:be:ac:49:71:
40:28:a1:25:16:f7:71:17:94:03:24:47:a7:16:c7:
24:e9:03:00:b0:fa:44:4d:b8:b3:da:84:cd:84:b4:
ba:32:00:26:f6:0e:59:20:a9:fc:b9:25:bc:0b:8c:
2e:0a:08:73:a8:50:3f:44:35:f0:45:f2:4e:ad:0f:
3a:78:00:16:40:62:f1:5d:63:82:e5:0c:85:f1:a6:
1e:7a:f4:72:d2:2d:77:19:79:23:6d:15:e4:34:b1:
fa:f4:5e:65:31:48:5e:cd:50:ac:eb:a3:5b:a0:47:
8f:3b:93:11:2c:92:07:1d:3f:cd:df:6a:5b:96:33:
54:fe:01:61:62:4e:16:ec:81:2e:a5:2a:b2:ee:ae:
87:20:81:2a:ca:e8:5d:fc:19:c5:6f:c4:fa:8e:ef:
b7:c5:18:05:62:8a:f6:11:7e:31:6e:34:d4:10:81:
6c:f4:00:6c:c7:c8:7c:83:84:1b:8c:9a:d3:c2:bb:
c9:09:0a:e3:74:eb:58:c8:ef:e1:8c:b5:02:a7:6e:
cb:23:68:c0:21:21:75:a2:b4:89:c5:b2:87:f5:f1:
b7:57:98:5b:6c:25:84:7b:8c:69:31:6a:c4:5a:11:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:69:55:EA:85:74:E0:9D:23:7E:99:FC:BF:93:CE:14:4E:8E:CD:F7
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6GlV6oV04J0jfpn8v5POFE6Ozfc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.74.95.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c9:8c:1e:2c:63:41:8a:5f:f7:79:91:64:45:58:06:59:07:
b9:3b:3f:a8:58:96:ec:4d:1b:c2:c8:71:08:e2:80:b6:68:ae:
5c:63:d2:0a:2c:90:85:02:fa:5d:8c:5a:99:c0:89:2b:66:1a:
06:a5:96:cc:f0:f5:06:fc:ce:9c:8f:17:bd:d5:f8:9c:52:b4:
06:ee:29:87:fa:cd:f6:a3:4c:8b:93:ad:d9:58:96:f5:f7:e5:
be:07:39:7b:76:cc:17:64:8a:1c:d9:97:86:aa:38:3b:65:96:
db:30:96:9f:38:84:bb:ad:97:9b:16:2c:02:60:b2:08:83:11:
83:bb:43:6f:fa:77:fe:22:80:60:6c:bf:6e:7c:96:10:d3:97:
95:a0:72:32:14:08:0b:e7:f9:13:b2:70:88:d5:0f:ad:82:f8:
01:0d:98:2d:ed:e7:dc:91:84:f7:c3:9b:f3:e7:a7:3b:90:cb:
e6:b2:89:9e:bb:c6:6c:97:7e:f0:06:2e:2b:7c:70:40:5d:43:
84:8f:3e:b3:e3:02:a7:4d:73:7e:94:1e:6a:7e:24:15:1a:0e:
39:c0:67:c8:da:9b:27:53:f7:e5:cd:25:8b:94:4c:b7:9b:1b:
62:6a:fb:42:16:fb:0a:ff:50:52:12:5c:7b:90:50:a4:e9:a2:
07:27:c6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:36 2025 by rpki-client