Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/JzkQjJAPdSaLLSqJTFVd_o9v-6s.roa
File: JzkQjJAPdSaLLSqJTFVd_o9v-6s.roa (raw, json)
Hash identifier: Zk1ghf7E9l4Rw4tnSKhC1aG1p2/ZGcLZD7oByyiceMw=
Subject key identifier: 27:39:10:8C:90:0F:75:26:8B:2D:2A:89:4C:55:5D:FE:8F:6F:FB:AB
Certificate issuer: /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Certificate serial: 0DDD
Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JzkQjJAPdSaLLSqJTFVd_o9v-6s.roa
Signing time: Wed 12 Feb 2025 01:36:46 +0000
ROA not before: Wed 12 Feb 2025 01:36:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131660
IP address blocks: 168.95.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3549 (0xddd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Validity
Not Before: Feb 12 01:36:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2739108C900F75268B2D2A894C555DFE8F6FFBAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:3f:e4:95:7e:d3:65:9b:61:0c:a1:bf:44:
41:0a:db:dd:0c:b8:f0:6b:6c:52:11:3c:f3:bc:45:
2d:e9:86:f7:05:87:61:56:68:a8:aa:dd:ab:9f:40:
78:02:04:d7:fc:61:ae:bf:b0:5f:22:98:30:a8:e3:
3d:7d:b7:d2:b9:a7:fe:da:64:11:8c:9e:47:1d:38:
47:16:4b:fa:f6:63:74:60:b5:fc:ec:35:19:1d:f7:
84:0b:e6:bc:fd:ea:ae:a8:ff:2a:73:e9:45:cc:87:
5c:12:2f:a8:03:1f:d9:8c:1d:01:85:4c:22:d7:57:
75:91:b0:01:52:f8:1c:15:36:f8:fd:5b:01:6d:50:
cb:c3:3a:05:5b:86:f7:a3:de:3e:5f:12:e5:c1:81:
5c:b7:9f:5a:ef:ae:57:da:f8:c6:9d:31:d0:21:16:
9d:14:9b:a9:65:d7:e2:91:b4:60:e6:08:81:87:71:
56:0d:d7:d7:4d:81:81:f0:d4:3c:18:7f:aa:b5:13:
7f:03:59:a2:5f:8e:20:fa:aa:7f:bd:6c:25:fc:b1:
34:22:3f:63:31:3a:2d:eb:f9:cd:f5:fb:cd:af:c6:
50:be:16:16:06:6d:71:da:c5:39:e2:1b:2d:4a:a4:
fc:21:15:2c:2a:2f:d5:91:b6:29:2e:c4:81:79:fc:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:39:10:8C:90:0F:75:26:8B:2D:2A:89:4C:55:5D:FE:8F:6F:FB:AB
X509v3 Authority Key Identifier:
keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JzkQjJAPdSaLLSqJTFVd_o9v-6s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
168.95.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b2:f0:ae:c4:0b:ea:d4:77:43:75:ec:25:d0:2c:31:ae:77:
5d:14:d2:e7:5e:38:ac:17:29:f5:74:f6:35:90:42:35:03:af:
9f:a0:fd:a1:a7:fc:90:0c:32:f3:73:29:18:e2:ff:11:1e:92:
63:95:41:09:1c:76:4e:d1:23:1b:d3:0d:7a:31:f4:d0:f4:a3:
99:be:4b:61:16:c7:a4:06:83:55:5f:f9:75:91:a1:b1:38:67:
89:da:44:8e:e6:92:ec:53:34:e0:72:17:9b:4d:d3:8d:10:a9:
b5:c2:ba:67:c8:58:4d:d8:aa:8e:d0:62:e2:22:1e:f3:a8:27:
11:c7:77:d4:e8:ac:9f:8b:69:89:8e:ea:61:9e:66:75:39:d4:
13:87:34:11:53:c4:20:05:96:5f:da:25:a8:9d:84:25:92:11:
26:7f:59:8a:10:bd:56:9f:a2:56:83:90:65:d9:e8:63:6d:ff:
dd:9e:8d:98:e8:83:6a:fe:62:f9:53:60:75:fe:dc:94:70:36:
9d:a2:c6:21:d8:a8:9f:36:83:5d:b4:4d:73:68:0f:1f:a7:ea:
f6:9a:fb:30:59:c5:70:56:8d:59:f9:ac:54:5e:0d:da:16:bb:
1a:2b:c6:54:11:cf:5f:d2:e0:65:26:b8:31:ba:fb:7a:f7:96:
4b:53:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:06:19 2025 by rpki-client