Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ENs7o1gOHzRi565h9wsoLGpnC0w.roa
File: ENs7o1gOHzRi565h9wsoLGpnC0w.roa (raw, json)
Hash identifier: h9XA2Ky+p3aHlJJvZgzNRRp40DButpD/KQ1s1gtGtxs=
Subject key identifier: 10:DB:3B:A3:58:0E:1F:34:62:E7:AE:61:F7:0B:28:2C:6A:67:0B:4C
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1779
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ENs7o1gOHzRi565h9wsoLGpnC0w.roa
Signing time: Wed 12 Feb 2025 01:36:44 +0000
ROA not before: Wed 12 Feb 2025 01:36:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 203.75.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6009 (0x1779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=10DB3BA3580E1F3462E7AE61F70B282C6A670B4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f7:db:9c:bf:24:3f:5f:f6:14:c4:ba:94:e0:
73:99:d4:f2:67:07:a6:2d:d5:19:8d:1d:36:e8:7a:
cf:ad:0c:20:37:0b:de:39:ab:a0:b3:23:a0:84:85:
48:73:11:54:fe:3b:d5:97:d5:62:b3:70:ce:a4:22:
af:cd:3f:9d:a4:42:16:5b:e9:77:82:8c:00:1f:ab:
8e:f4:74:63:1b:b6:a2:dc:85:bd:5a:9e:ba:9d:20:
c3:34:e6:b6:5b:4d:2d:08:a9:f9:3c:83:4e:af:f0:
79:c7:ec:5f:e5:e8:0d:67:76:b2:10:c4:25:f2:92:
69:bb:d8:76:5d:21:a6:e5:11:28:37:01:a7:37:c5:
e2:21:d9:04:fb:0c:eb:11:7f:1b:4c:e9:a0:fc:92:
42:33:13:f6:65:3c:b4:c1:38:d5:ba:2f:8e:25:5a:
32:01:1e:cb:98:b1:64:9f:05:0e:30:d2:46:8a:d2:
e6:9a:c0:5e:21:5e:9e:c1:d2:86:e1:5c:ac:4c:6d:
7f:13:e3:95:24:fd:0c:bd:da:68:c2:4e:05:ee:5a:
48:f7:dc:a4:d9:c1:38:cb:17:cd:ab:f2:44:e1:53:
1d:49:93:da:fd:e0:fa:10:82:4e:97:d5:3f:4d:d2:
1c:16:0f:63:50:dc:d0:82:19:ae:7e:2d:02:50:4a:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DB:3B:A3:58:0E:1F:34:62:E7:AE:61:F7:0B:28:2C:6A:67:0B:4C
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ENs7o1gOHzRi565h9wsoLGpnC0w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:cb:5c:6a:c4:db:22:7b:58:ea:2b:56:ec:e5:e4:46:2a:e7:
85:4c:a4:b2:08:28:29:22:e5:61:ef:26:5a:40:6b:09:e5:a9:
a8:02:02:3e:9f:f1:34:17:1a:2f:9b:1c:db:4d:5e:50:58:d2:
ff:31:8f:37:b1:67:d4:77:02:17:ea:78:ac:9b:44:43:50:76:
85:e1:40:d9:82:a4:ff:08:60:9d:02:25:9b:26:3b:8e:85:99:
11:9e:99:e9:1e:09:cc:11:65:8f:5e:63:ab:a1:dd:49:44:c2:
8b:ba:f4:9d:5b:e2:31:ad:ec:e4:83:6d:b7:24:b3:8d:b0:a2:
aa:72:3a:aa:46:69:ca:1c:51:9b:93:7f:bc:a0:e4:27:d1:2f:
71:62:2e:35:ad:4a:b8:a5:b6:71:da:be:79:dd:68:40:a9:42:
1d:54:62:22:82:63:be:b0:94:4e:2c:9f:e8:48:a1:c8:a1:08:
3d:b6:39:55:ac:de:b1:77:10:c2:0a:f4:cc:9e:78:de:86:2a:
2f:6b:9b:74:9d:09:ae:ba:f7:01:f4:68:a6:89:0e:43:d3:f6:
07:a8:b8:8f:48:4b:25:12:29:08:a9:aa:cd:98:fa:83:da:f2:
ad:bb:84:bd:77:d7:2b:61:90:db:87:24:e7:24:32:d6:f4:11:
10:63:7b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:07:58 2025 by rpki-client