Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/D1_UdVyDUWLxY7RTs3vq5g293E8.roa
File: D1_UdVyDUWLxY7RTs3vq5g293E8.roa (raw, json)
Hash identifier: JwFvabh+Of0h9duu38aCyLtKA8Ftio7MJyQaJScyjY0=
Subject key identifier: 0F:5F:D4:75:5C:83:51:62:F1:63:B4:53:B3:7B:EA:E6:0D:BD:DC:4F
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 17AA
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/D1_UdVyDUWLxY7RTs3vq5g293E8.roa
Signing time: Wed 12 Feb 2025 01:36:56 +0000
ROA not before: Wed 12 Feb 2025 01:36:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 218.160.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6058 (0x17aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:56 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0F5FD4755C835162F163B453B37BEAE60DBDDC4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:cd:4a:e5:7d:a8:c4:9b:22:3d:42:ea:30:
ff:26:b3:2d:51:14:f5:14:1a:84:ae:98:58:b4:4d:
d0:c0:c3:14:d2:69:1e:c7:ca:55:4f:dd:76:ca:55:
ea:b7:97:1c:be:27:d2:83:40:09:4f:8e:14:65:2b:
d5:98:7e:e1:0b:c6:09:72:20:bb:d2:03:e0:b0:16:
82:0b:bd:be:27:d9:c8:9d:32:2c:18:2f:5c:c6:73:
ff:9b:a3:25:f1:fe:3f:32:27:09:cc:c2:8a:a7:4c:
23:0f:1d:fa:d9:03:6f:cf:f4:20:76:32:d0:43:c0:
fc:78:0e:a3:1f:fb:b2:a1:d7:4f:d6:a3:1b:aa:8c:
31:62:d2:b0:c8:e2:f0:c8:6c:32:79:2b:a4:a5:f7:
43:65:ee:30:a0:49:ad:89:a2:01:03:93:38:b9:77:
11:cc:21:28:87:49:bc:8e:40:0b:b3:25:d3:5c:8f:
a7:ca:e0:6c:5b:74:96:8e:50:01:6e:3f:39:f5:0f:
93:f4:ae:e5:f9:bf:82:7c:9f:43:3e:71:71:ea:8e:
b2:50:ab:b8:b4:4d:84:c2:20:fb:56:1e:42:a5:b8:
62:75:1b:88:5d:f7:a7:ac:1d:c3:5b:04:e4:67:42:
75:d9:19:b1:04:0d:e1:cc:d2:a7:65:a6:c5:cc:63:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5F:D4:75:5C:83:51:62:F1:63:B4:53:B3:7B:EA:E6:0D:BD:DC:4F
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/D1_UdVyDUWLxY7RTs3vq5g293E8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.160.0.0/14
Signature Algorithm: sha256WithRSAEncryption
54:f3:44:3f:ba:28:e4:4f:9e:aa:86:9b:46:94:d0:d1:a3:d6:
7e:77:05:c6:fb:81:90:dd:6c:15:4d:a2:d8:b3:a8:f3:87:85:
f5:c6:58:84:65:a7:25:cf:fc:43:89:46:cd:26:41:f6:75:ad:
88:1a:a8:75:b2:65:24:f3:33:2e:66:5a:a8:c5:3d:90:8b:a0:
ce:7d:5c:6c:1c:df:b9:44:6c:c9:20:8e:a7:61:55:e0:4f:e4:
63:88:20:61:75:71:00:db:ad:cd:f1:f6:03:06:ab:35:f0:de:
25:31:34:9b:d7:03:00:98:37:17:eb:88:b7:17:00:c5:42:3e:
42:29:9f:73:16:d5:06:f0:2c:fc:31:ee:ee:18:b1:29:54:9e:
5c:67:d2:d9:ca:c5:eb:88:92:fa:66:7d:53:84:80:97:b6:ac:
9d:5e:93:19:50:e8:fc:df:85:9f:df:b8:37:d7:9c:33:2d:a9:
1e:4b:0a:3f:44:62:c0:2e:f3:75:76:ed:51:24:53:7a:89:08:
a8:a7:a2:d8:1b:c5:2e:aa:93:01:eb:25:70:56:8a:0f:60:3e:
38:08:c0:31:49:94:16:4e:2c:6d:1f:3d:d5:72:bb:84:55:06:
ee:5d:9e:dc:30:80:0f:63:ab:24:23:fa:8a:dc:ff:28:e8:45:
d9:b4:78:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:31:06 2025 by rpki-client