Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/MOaFq2iIk8-GsbTNSN0LYhDFRzA.roa
File: MOaFq2iIk8-GsbTNSN0LYhDFRzA.roa (raw, json)
Hash identifier: H+sr8bFzLNlonAB6wdZKvrjHiQZNgKcbO3dcWbbzWdI=
Subject key identifier: 30:E6:85:AB:68:88:93:CF:86:B1:B4:CD:48:DD:0B:62:10:C5:47:30
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 175B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/MOaFq2iIk8-GsbTNSN0LYhDFRzA.roa
Signing time: Wed 12 Feb 2025 01:36:37 +0000
ROA not before: Wed 12 Feb 2025 01:36:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131660
IP address blocks: 114.25.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5979 (0x175b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:37 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=30E685AB688893CF86B1B4CD48DD0B6210C54730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:8b:e5:90:bd:d0:e8:97:51:ea:3b:10:f8:
7d:f8:37:04:d0:cb:ae:45:fa:45:0d:8b:44:9e:6e:
ea:34:24:5b:ea:56:32:2f:d3:19:88:f9:9d:02:eb:
f1:66:91:69:13:36:de:11:74:e2:22:9f:04:a6:95:
d1:fc:cd:09:32:52:63:39:16:c9:3f:65:46:3f:12:
69:04:0c:7c:28:47:f4:40:97:a7:89:2e:13:ab:dd:
0a:6a:f2:10:4b:db:1f:cb:9e:c8:07:e8:8e:59:73:
88:4b:66:7c:98:83:69:5f:c8:e4:fd:06:b6:98:12:
4a:85:d4:89:25:97:f9:4a:fe:57:c7:fc:38:eb:59:
a9:56:4f:28:f1:28:55:ce:12:fc:ed:8c:f6:ad:8c:
bb:a3:eb:cd:9a:c2:a7:95:61:24:d1:5b:12:08:17:
af:bf:1d:2d:df:b5:e6:21:59:76:74:28:83:11:7b:
72:0b:34:f4:ef:fd:7b:4d:4a:ec:92:75:08:38:68:
bd:9f:98:07:24:6b:d4:03:d2:eb:41:e9:6e:f0:4a:
da:d4:78:9b:a5:4f:f0:9e:2b:1b:2f:69:ce:9c:2a:
74:c3:4d:52:f1:9a:b2:60:05:67:37:89:23:37:7c:
67:aa:e1:94:a5:76:16:48:6d:14:90:76:fa:43:40:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E6:85:AB:68:88:93:CF:86:B1:B4:CD:48:DD:0B:62:10:C5:47:30
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/MOaFq2iIk8-GsbTNSN0LYhDFRzA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.25.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d3:8a:71:4d:e0:7d:76:79:d8:02:2a:42:c4:62:88:17:09:
af:fa:14:fa:ba:5e:fb:06:4e:ea:32:3f:b3:29:02:79:02:49:
fa:61:15:f8:65:1c:bc:90:73:35:97:ff:c7:bd:fd:97:48:d8:
23:bb:28:ba:af:a2:ce:e1:8a:e6:28:ca:77:4c:87:5a:c4:43:
6f:ac:e8:39:7b:64:f1:41:1e:b4:9e:ca:3d:b9:b0:4e:d4:bd:
0d:2f:b1:f3:0e:c2:e9:2f:1a:9a:02:e5:ae:f6:3d:f8:90:dc:
e5:02:07:b6:c6:66:48:13:e1:0a:61:fc:f9:b4:b4:85:40:be:
0b:5d:9a:f1:3a:46:6e:8f:b6:85:b0:c7:bb:f0:3c:2b:7d:da:
b3:b1:a4:43:0d:d8:88:09:19:b2:48:ce:42:de:38:49:9e:38:
64:b7:c4:a3:5c:82:00:86:88:5b:54:ef:61:10:c2:12:94:37:
f4:6d:79:e9:a3:bd:fd:c9:0a:10:fe:9b:2e:c7:58:40:c6:4b:
5d:46:90:9c:f0:e5:28:8f:e3:c8:23:ed:52:56:e6:27:eb:fe:
c8:72:6b:60:0d:84:99:73:f9:0f:22:a5:0a:2f:4d:7d:a1:77:
2a:be:af:ca:ef:74:50:0b:96:f0:66:35:9a:63:3f:86:e6:17:
ad:1f:ff:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:17 2025 by rpki-client