Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/DabHoN8E9PwlS8tq2aTmT6qQSdQ.roa
File: DabHoN8E9PwlS8tq2aTmT6qQSdQ.roa (raw, json)
Hash identifier: GI+eJF51Mt+Ud4PMyTQVm0Uy2btals2Bg6pFVIieDuY=
Subject key identifier: 0D:A6:C7:A0:DF:04:F4:FC:25:4B:CB:6A:D9:A4:E6:4F:AA:90:49:D4
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 176D
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DabHoN8E9PwlS8tq2aTmT6qQSdQ.roa
Signing time: Wed 12 Feb 2025 01:36:41 +0000
ROA not before: Wed 12 Feb 2025 01:36:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 137280
IP address blocks: 203.69.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5997 (0x176d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:41 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0DA6C7A0DF04F4FC254BCB6AD9A4E64FAA9049D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:26:62:27:33:51:40:cd:93:57:d6:3b:c0:
0e:0f:e2:0b:96:0f:c0:28:8d:1e:00:76:2d:02:81:
4a:d7:62:d4:ec:17:7e:13:64:a5:17:64:f3:bb:a8:
5a:07:9e:b1:4b:4d:08:0a:65:9d:bc:84:6b:7c:10:
1f:17:6e:bc:94:1a:7f:70:27:55:31:d4:76:70:84:
aa:08:8b:b1:7e:61:d8:6b:59:3f:eb:66:0b:94:8b:
46:01:33:5b:f1:b2:09:ea:a5:67:d6:ec:70:9c:f7:
d2:7a:26:28:c6:04:e2:99:cc:3e:8e:16:1f:e1:c0:
b4:ac:f2:19:fc:2f:ae:cf:ac:80:10:ff:ff:63:f0:
d3:eb:39:e4:88:ff:8d:40:79:cd:a9:8a:ac:7a:b2:
7d:c1:3b:96:46:a5:8e:7e:f6:ed:7f:9d:3e:a1:a0:
20:0d:64:f5:88:70:5c:0f:c7:2f:dd:99:e1:1c:2f:
f8:0d:7d:c4:c5:10:b3:8d:d7:94:61:e2:95:36:09:
6b:69:6d:48:05:eb:1a:bd:be:6e:92:f4:ee:46:80:
f2:e7:e4:1d:76:b2:c2:0a:cc:da:ad:86:7c:2b:f0:
1a:36:3d:60:8c:cd:33:9c:cc:a1:9f:5b:53:4b:f7:
fb:05:65:f7:55:8b:fc:d7:26:a0:7e:76:a5:0a:0a:
e8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A6:C7:A0:DF:04:F4:FC:25:4B:CB:6A:D9:A4:E6:4F:AA:90:49:D4
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DabHoN8E9PwlS8tq2aTmT6qQSdQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.69.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:05:68:0d:21:f6:eb:f6:c6:92:e7:ba:4a:a6:27:c9:8e:09:
ce:c4:29:a9:30:e1:0c:12:d0:40:72:a6:e5:60:22:46:bb:5f:
66:7a:0c:8a:9e:28:16:24:ce:2e:a0:c8:56:e0:3c:bf:b3:34:
66:ec:95:df:7b:ab:49:4d:9c:aa:ec:89:bc:a8:99:52:9b:1d:
b3:ed:8e:53:f6:ef:17:fc:e8:8c:0b:9b:b3:f4:05:a1:ba:d1:
e6:f8:7e:e0:e7:13:5a:2e:b2:7f:dd:9c:7b:3d:aa:32:dd:ec:
88:96:c1:89:e8:60:a1:5f:82:a3:e2:a5:f5:7b:29:c6:ed:89:
e5:0a:06:00:28:bb:a5:ae:2f:ee:02:2f:a4:5c:ee:d7:66:de:
b6:68:93:99:db:18:35:c9:fa:2c:4b:5a:31:05:cd:cb:52:bb:
d6:60:2d:0f:dc:af:b3:7b:72:f5:2d:ad:55:a0:70:08:98:b4:
d6:30:d1:df:05:5e:ea:23:9e:e0:93:5d:36:ed:ec:47:a8:66:
2b:35:4a:ab:9e:11:0a:94:86:80:58:c7:f9:43:03:39:bd:04:
7f:da:89:c0:7d:ee:6b:5a:51:2c:44:58:3a:42:38:f7:99:3e:
57:c9:e5:b3:8b:39:3c:b0:de:98:e3:0a:df:ce:f3:a0:e4:af:
e5:d1:eb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:47:10 2025 by rpki-client