Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/CgSZtDADoXdKgPG24QBrznOJvfk.roa
File: CgSZtDADoXdKgPG24QBrznOJvfk.roa (raw, json)
Hash identifier: GYGL45N9RM8hzhKvta8/9Cu2CpcetnJ1m2z8XF0+g9A=
Subject key identifier: 0A:04:99:B4:30:03:A1:77:4A:80:F1:B6:E1:00:6B:CE:73:89:BD:F9
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 17A8
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/CgSZtDADoXdKgPG24QBrznOJvfk.roa
Signing time: Wed 12 Feb 2025 01:36:55 +0000
ROA not before: Wed 12 Feb 2025 01:36:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 20940
IP address blocks: 210.65.144.128/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6056 (0x17a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:55 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0A0499B43003A1774A80F1B6E1006BCE7389BDF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:6b:7b:22:a6:a2:3f:d5:30:6d:4b:bb:46:
32:53:0f:ae:40:ab:ab:f9:66:b0:07:c9:24:1f:cc:
d0:dc:66:81:51:a4:c0:1b:ae:e9:a9:83:0e:6d:6e:
ba:17:4e:0c:9c:f2:2e:4f:7a:94:8a:a8:9a:5e:aa:
6d:9f:3b:62:b7:62:e7:06:7f:d8:62:8f:f6:3d:ea:
ca:9b:7a:e7:94:5c:2d:56:28:60:f5:66:07:fa:72:
34:79:c8:3a:d9:bb:65:6c:08:0a:53:b2:32:1f:0d:
fe:b8:02:62:c2:5b:20:3b:64:0f:05:38:da:10:ca:
3f:de:9a:b9:cf:d3:9d:22:f6:3f:61:d2:b8:d5:6f:
86:f0:4c:6d:65:a2:eb:9f:41:3d:d5:5d:21:07:eb:
8e:fe:b1:3b:60:e3:11:c6:87:64:1b:5b:71:f2:bd:
3e:ae:39:4c:76:74:49:cd:5c:d0:31:3a:b6:ec:c1:
5b:6d:a4:52:e8:42:1d:8c:89:6f:98:ab:3c:63:2e:
94:57:b9:59:b6:dd:33:64:4b:10:9d:4f:0d:3b:7c:
3a:88:37:bd:b3:de:01:ef:33:de:7b:f4:30:56:2b:
91:ab:40:21:fb:5c:7f:92:b8:5e:a8:9b:30:c6:f4:
b9:74:6d:26:f8:2e:ef:a4:1b:16:ec:05:97:ca:dc:
64:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:04:99:B4:30:03:A1:77:4A:80:F1:B6:E1:00:6B:CE:73:89:BD:F9
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/CgSZtDADoXdKgPG24QBrznOJvfk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.65.144.128/26
Signature Algorithm: sha256WithRSAEncryption
36:c8:01:29:c7:72:ae:c6:a8:38:31:23:20:63:62:53:c8:0a:
4f:16:4a:a7:d6:c8:57:06:89:76:36:5b:fa:35:e9:a5:d1:18:
33:42:36:d9:16:45:1f:c9:b6:5e:8c:50:f2:5b:75:5d:52:e5:
b9:88:67:5b:4d:77:ae:c0:f8:e4:7d:ac:44:75:87:08:23:37:
ba:3c:6c:87:25:b8:46:58:c5:53:86:71:ba:11:be:42:8d:74:
aa:2a:8e:5f:1c:25:9e:89:51:1e:5d:e3:10:98:41:f4:67:94:
2f:73:21:42:5d:ed:23:9d:bc:91:e7:72:93:f7:92:47:55:44:
bd:79:3e:9f:53:99:ff:9d:ea:9f:01:6c:9f:67:ce:61:22:91:
a1:76:1a:53:7e:54:54:54:ed:59:c4:59:34:02:e4:03:b0:d6:
29:e4:79:11:31:a2:81:18:b9:b7:39:6c:77:29:17:9d:e5:ed:
83:d0:b5:67:31:69:49:c2:78:1f:32:ea:81:5b:4d:d6:27:a1:
8b:97:bc:7a:66:24:31:1c:e8:68:99:1d:f0:b7:b4:fd:6b:37:
86:2f:6e:a1:86:75:76:11:99:29:6b:4d:63:a1:ec:d5:d0:d6:
34:88:1b:74:00:64:d1:ba:bc:b8:1c:69:33:11:d9:34:f5:e6:
2f:b5:b9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:44 2025 by rpki-client