Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/AQ4xCQGrK6meIO454mK-aQlgWzQ.roa
File: AQ4xCQGrK6meIO454mK-aQlgWzQ.roa (raw, json)
Hash identifier: hCFWYNoza2vRnEFqBn2eLDdylP7dRp9d27oTm/XKRKM=
Subject key identifier: 01:0E:31:09:01:AB:2B:A9:9E:20:EE:39:E2:62:BE:69:09:60:5B:34
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 172B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AQ4xCQGrK6meIO454mK-aQlgWzQ.roa
Signing time: Wed 12 Feb 2025 01:36:27 +0000
ROA not before: Wed 12 Feb 2025 01:36:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131621
IP address blocks: 118.168.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5931 (0x172b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=010E310901AB2BA99E20EE39E262BE6909605B34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:4a:82:34:29:e1:44:db:59:dc:43:e6:e8:
38:27:42:12:05:d7:ad:72:cf:db:de:64:c6:e3:e3:
66:7c:b4:51:a5:21:26:02:85:c0:43:3e:1d:f6:63:
2a:59:d1:af:2c:47:98:77:b4:b8:69:76:96:22:8c:
04:b8:f5:da:08:2c:8a:2c:9d:d0:55:ac:24:e1:f5:
6a:66:ea:c5:53:f6:a5:2f:56:1c:78:eb:e0:62:3e:
44:e2:fe:cb:ea:44:63:31:d3:38:d9:d5:1e:80:95:
f4:e0:6f:bf:48:7c:6c:3a:9e:50:14:99:da:31:26:
74:fb:6d:ed:ee:d7:33:18:c2:3d:47:06:46:fd:eb:
a1:4f:e7:38:4e:17:72:cc:c3:bc:45:89:59:04:45:
2e:86:ea:73:54:b4:8b:e1:d5:95:9e:8d:18:40:6a:
f8:46:19:83:8d:70:bb:f4:c9:08:7a:4a:2c:d6:3a:
49:01:7c:9b:59:09:52:77:35:3d:f2:4e:0d:f8:ab:
9b:41:c9:6b:56:e7:79:86:ba:c0:33:ff:a6:87:fb:
eb:3e:63:0d:ac:fe:34:eb:70:83:30:28:9f:8d:12:
34:ad:8c:89:80:32:f5:92:03:6f:91:f8:55:f3:91:
d6:28:83:bc:98:e8:0c:ce:38:c9:6b:16:4e:30:ec:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0E:31:09:01:AB:2B:A9:9E:20:EE:39:E2:62:BE:69:09:60:5B:34
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AQ4xCQGrK6meIO454mK-aQlgWzQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.168.255.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:4e:02:36:e5:21:63:9d:7d:2a:3e:2f:c5:29:e4:76:7d:4f:
a0:19:9a:6e:88:10:f6:bd:28:b9:b5:72:c4:56:71:80:95:c0:
63:a3:cb:1a:73:25:95:7b:73:34:d1:bb:77:e0:28:67:13:ff:
52:0f:04:e5:ea:64:5d:fd:ce:88:6f:5b:14:26:f6:a4:67:97:
18:56:01:71:be:a0:e3:05:dc:40:66:5d:dd:be:d5:20:0d:2a:
20:49:f3:5a:e3:f5:76:02:ba:cd:1c:fc:e1:47:de:c9:f9:3e:
84:ab:4c:f6:53:0f:a9:1a:99:8f:c3:2b:4c:1f:68:93:e3:fb:
e5:2c:6d:ad:3c:37:05:64:78:88:54:7e:e2:12:2b:78:55:fa:
49:03:d3:21:18:96:4d:b4:fd:98:40:f1:b1:bf:00:63:bb:b7:
d9:d5:da:97:5f:d4:97:0a:e7:ee:43:f7:65:27:8d:ed:82:7c:
64:90:2f:55:42:1c:8b:b5:10:21:5e:87:20:7e:f8:a5:22:dd:
58:4f:72:05:7a:22:f1:b0:af:58:1b:79:e5:19:b2:4b:19:a6:
8c:e3:92:40:23:45:d8:56:a6:dd:bb:c8:e2:58:7e:ed:1a:83:
4d:d5:c4:4d:6d:24:c8:64:79:70:25:a0:35:19:d1:a6:c4:02:
d8:d4:12:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:48:32 2025 by rpki-client