Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/bxjG5kOYPgftyu40hAGt-sj9Ewk.roa
File: bxjG5kOYPgftyu40hAGt-sj9Ewk.roa (raw, json)
Hash identifier: I7htHOZG6F29EZ1PBpsFl5LTKeBsElaEsHT9FiK9K3s=
Subject key identifier: 6F:18:C6:E6:43:98:3E:07:ED:CA:EE:34:84:01:AD:FA:C8:FD:13:09
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 17C6
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bxjG5kOYPgftyu40hAGt-sj9Ewk.roa
Signing time: Wed 12 Feb 2025 01:37:03 +0000
ROA not before: Wed 12 Feb 2025 01:37:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 211.75.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6086 (0x17c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:37:03 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6F18C6E643983E07EDCAEE348401ADFAC8FD1309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:9e:aa:6a:7f:05:57:d3:9a:74:ad:1f:1d:
bb:bb:75:e5:3f:22:ee:66:e3:5b:8c:53:7d:d9:b7:
e3:0f:31:02:3f:e3:a3:30:cd:09:3d:da:04:95:89:
a4:8b:74:6c:7d:40:f6:2c:b7:0e:45:7d:77:e7:39:
2d:e5:72:f0:fe:71:fb:eb:c4:ed:4c:90:16:03:63:
29:35:45:24:f1:e2:64:e2:bf:a5:6b:56:ae:d3:bb:
f0:72:e0:3b:b7:30:36:4b:1a:c9:09:ca:40:4a:e3:
fd:8a:fe:41:c7:e7:cd:99:90:0f:a3:5b:93:ad:2b:
a0:ac:f9:8d:dc:6b:a6:f3:d7:cb:00:04:48:ae:48:
56:64:79:cf:6e:27:a4:a6:ff:85:04:bf:3b:9b:8c:
66:07:fb:ed:37:e6:b2:73:38:f8:3b:23:b5:51:13:
f9:d6:01:c1:46:f9:9e:87:68:59:cd:83:45:22:a3:
9e:8b:d9:c9:b8:54:e6:8c:6c:37:bc:da:28:70:97:
aa:a2:99:a4:3d:07:a9:f8:c9:95:9a:dc:4c:5d:75:
0b:29:19:0c:24:8d:57:57:79:cd:99:3a:c7:31:f7:
07:69:00:03:f8:51:37:ea:57:08:64:e1:93:b6:28:
44:81:2c:61:82:44:34:a1:35:f9:d0:ea:be:af:09:
f2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:18:C6:E6:43:98:3E:07:ED:CA:EE:34:84:01:AD:FA:C8:FD:13:09
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/bxjG5kOYPgftyu40hAGt-sj9Ewk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:a2:1c:6a:7f:ff:17:50:2f:a8:24:39:3c:25:59:ca:70:cf:
fe:36:8f:20:8a:15:00:85:14:7a:ce:c4:ec:c2:b0:77:c3:8e:
0d:97:9f:49:b1:f6:c9:f5:e4:4e:c4:17:82:a3:02:a2:da:c8:
58:42:e4:9b:e6:8a:fe:02:1b:a2:4f:b5:12:7a:22:a3:54:35:
e3:a8:2b:e5:3e:53:53:ed:6a:36:b8:d9:2d:81:c4:c2:be:27:
5c:08:0b:f6:fa:f0:97:23:ae:33:f7:1d:46:10:fc:b9:cf:d2:
30:82:cb:e6:be:01:04:18:29:87:76:3f:c3:02:5d:a7:95:7a:
22:0b:09:07:82:e5:3f:be:f2:bc:55:9b:49:94:20:cd:1d:67:
ca:98:fd:e1:1e:eb:bf:f8:7e:26:71:9a:59:64:f1:8c:ff:31:
78:03:15:0e:78:22:30:de:ec:3f:ba:9b:3f:b2:20:c8:0f:e0:
20:a7:d0:b1:53:68:21:97:00:2a:0d:01:d7:8b:3d:2c:15:6e:
c5:1e:45:a6:0f:24:ed:3d:0b:6e:f1:f4:10:c0:c0:2f:e1:a3:
23:6d:20:06:92:ed:c0:cf:83:a7:93:38:50:16:21:6e:57:20:
83:65:ce:99:17:52:20:1c:3c:ab:aa:46:4e:45:fb:12:56:bf:
3d:34:c5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:39 2025 by rpki-client