Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/IJXxIErisNfVkdmmW3INoWWi28w.roa
File: IJXxIErisNfVkdmmW3INoWWi28w.roa (raw, json)
Hash identifier: YVL6QDu0drrudpi2k43ADOb1VqWPRiM/ZS4ZuaTilsY=
Subject key identifier: 20:95:F1:20:4A:E2:B0:D7:D5:91:D9:A6:5B:72:0D:A1:65:A2:DB:CC
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1750
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IJXxIErisNfVkdmmW3INoWWi28w.roa
Signing time: Wed 12 Feb 2025 01:36:35 +0000
ROA not before: Wed 12 Feb 2025 01:36:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 20940
IP address blocks: 203.66.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5968 (0x1750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2095F1204AE2B0D7D591D9A65B720DA165A2DBCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1c:08:28:64:e7:76:10:37:d4:13:e6:0f:8d:
1f:55:91:e8:15:41:7d:48:f3:59:cd:83:ae:26:4b:
4e:22:e0:3a:e3:76:98:49:40:31:f8:b5:6b:59:fc:
82:c9:71:fc:1c:0d:4b:2d:d9:f2:19:27:a3:70:d5:
fd:15:94:8c:15:af:47:6b:d6:25:ec:d4:69:06:13:
0a:6c:92:ae:a2:1b:23:55:4c:55:a2:84:e7:c9:a8:
f2:62:85:47:6d:b0:b1:90:df:2b:16:60:ab:ef:6d:
5c:84:67:d7:3f:81:0e:61:1c:43:3d:fe:3e:f1:20:
c3:f0:ea:d7:c1:0b:77:26:07:bd:5c:9a:84:1b:53:
7b:e0:1f:1d:36:4d:25:2b:a4:dd:1c:ef:6f:01:a7:
a4:75:77:69:74:65:b5:ac:ef:7a:cc:30:47:e5:3c:
a7:3a:e0:f0:38:8f:dc:3b:fe:66:b9:9f:df:77:6b:
9e:d2:20:2c:f1:0b:f3:02:42:21:24:e9:7f:7d:c8:
ad:c4:9e:91:ae:b7:7d:c1:9f:71:19:3e:3b:96:93:
aa:d4:58:9f:06:d7:63:5c:a8:d4:bb:74:0c:a8:68:
ec:0f:d8:d6:86:61:fb:4d:b1:cd:24:91:8d:7b:5f:
64:77:72:cf:0b:f2:4f:50:03:cb:75:a1:50:98:5d:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:95:F1:20:4A:E2:B0:D7:D5:91:D9:A6:5B:72:0D:A1:65:A2:DB:CC
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IJXxIErisNfVkdmmW3INoWWi28w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.66.226.0/24
Signature Algorithm: sha256WithRSAEncryption
36:61:3b:29:17:b9:81:b3:89:5f:a5:81:93:62:20:b8:41:ba:
97:2c:17:d1:ea:cd:3a:83:44:02:b3:95:95:30:39:e4:35:cc:
51:54:a9:66:10:be:09:d0:44:25:2b:c3:4f:f5:7a:dc:54:a5:
c4:a9:a1:0c:5d:d0:c3:a0:cd:28:6b:79:33:84:40:88:16:67:
36:cf:34:32:b7:10:d0:0f:dc:b3:12:83:9e:9c:70:6c:a3:eb:
25:fe:07:b7:ea:8e:c7:b7:58:a7:74:0e:e8:04:c8:21:3c:55:
4b:fb:f0:c8:59:3a:d4:bb:b5:e5:3f:b4:73:72:09:c5:84:8b:
e3:57:14:a4:5c:f4:7c:58:46:66:16:85:77:e0:ce:5d:ac:56:
de:19:b2:16:d8:2a:85:01:a1:70:46:f4:18:c7:ef:4e:9b:88:
fc:a4:3d:36:6b:05:27:7e:74:ed:15:47:88:69:05:fc:e8:7d:
26:93:f9:77:4b:29:05:ad:a5:70:a8:ad:ca:d7:b0:b5:3e:10:
9b:b2:be:29:f3:ac:52:66:fc:f9:12:7a:d2:a8:ae:ba:b4:f4:
9a:ff:49:8f:1d:ec:5a:fc:72:c8:e0:a3:b8:49:b6:0e:46:5e:
75:1f:ac:1c:fb:b1:9d:dd:86:22:45:9b:5c:6f:41:12:46:84:
ac:24:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:38 2025 by rpki-client