Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/fpuj3-hzNOH3jNSuaDe_6BTL3Uc.roa
File: fpuj3-hzNOH3jNSuaDe_6BTL3Uc.roa (raw, json)
Hash identifier: VDNInNafPLr3HNrqkIzn28CtS7rbt7AD0Ndcf+3G6DA=
Subject key identifier: 7E:9B:A3:DF:E8:73:34:E1:F7:8C:D4:AE:68:37:BF:E8:14:CB:DD:47
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1761
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/fpuj3-hzNOH3jNSuaDe_6BTL3Uc.roa
Signing time: Wed 12 Feb 2025 01:36:38 +0000
ROA not before: Wed 12 Feb 2025 01:36:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 2001:b400:e9f0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5985 (0x1761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:38 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7E9BA3DFE87334E1F78CD4AE6837BFE814CBDD47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:69:2f:70:b8:78:fe:0f:0e:a3:b0:e2:c1:
8b:4b:0e:c4:5e:1b:65:53:99:04:88:6d:e8:8e:e4:
00:82:ed:ab:d8:50:5f:50:a1:e9:e3:64:e1:87:e0:
d8:6b:27:6a:ff:02:b3:f3:44:fe:94:b5:f2:e9:6a:
58:63:fa:94:07:9e:84:91:a9:f6:09:74:7b:55:27:
36:13:04:be:88:a1:34:c4:85:90:5d:ef:f8:b5:63:
41:84:7f:7f:b8:ee:b8:64:fc:8d:8c:c1:ee:f8:e4:
b4:f1:7c:bc:18:70:9f:1a:08:05:48:7d:dd:96:d0:
13:a6:d1:5e:ad:f8:e0:69:58:1d:d8:0a:85:55:89:
a1:2c:a2:54:a6:1c:2a:af:db:87:07:a1:8b:7c:14:
60:e4:b6:c2:76:75:43:52:29:ce:fd:e8:76:78:c4:
25:ea:98:5d:d3:2d:99:d7:c7:dc:e3:6a:d9:55:06:
59:cd:3e:a3:2d:8c:26:02:8a:f5:49:e2:8a:e4:6c:
cc:71:a4:36:2b:4d:93:86:35:87:ed:07:d6:19:59:
0d:77:9a:16:12:d6:9f:92:64:a6:58:d0:39:16:9e:
f0:19:7a:1c:d1:f4:33:bb:9c:58:d0:96:ac:36:a4:
0a:b4:c5:a0:38:a9:74:bf:5e:8a:a1:75:6e:6e:41:
46:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9B:A3:DF:E8:73:34:E1:F7:8C:D4:AE:68:37:BF:E8:14:CB:DD:47
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/fpuj3-hzNOH3jNSuaDe_6BTL3Uc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b400:e9f0::/44
Signature Algorithm: sha256WithRSAEncryption
9b:6b:36:8a:39:0e:f5:0e:0e:24:74:df:d4:ee:bb:af:5a:47:
d7:b4:6f:af:52:52:d6:63:7b:28:e8:f8:bc:31:63:30:56:e3:
c1:3f:36:6d:58:fa:7e:af:3d:69:ad:ba:24:7a:aa:6d:d7:a3:
f1:a2:3c:ef:f2:d8:dd:29:fb:c5:c7:ba:d1:ca:2e:2c:93:ca:
81:d1:81:8c:26:63:c3:fd:33:3b:35:62:78:44:39:31:ac:14:
00:f5:f3:49:9a:5d:bf:29:7d:39:9d:0c:32:d1:a8:fb:e3:0e:
5d:fe:c4:2c:bf:95:70:e3:b2:4c:ac:ec:b1:82:6b:da:19:82:
de:cf:48:e4:f6:f2:60:50:6d:ae:ae:19:36:3b:50:8c:30:43:
ea:e4:f6:eb:ad:bc:ab:98:d9:b1:0e:74:f3:be:94:3a:7b:5a:
b0:5a:dd:55:e9:f4:02:95:11:d4:5d:09:38:43:2b:5a:1f:81:
96:60:77:e8:a4:35:a3:72:b3:f4:98:a4:51:a0:25:aa:2c:d5:
2b:06:4b:9f:06:72:9d:ea:a3:e1:cf:ab:fa:f3:64:4c:51:f3:
a8:b1:8d:37:04:c5:1c:f7:7c:f3:e6:c4:3e:26:c5:96:b8:50:
ef:51:87:75:96:b7:61:9a:e7:87:34:85:ef:74:c9:17:fc:43:
d2:55:24:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:00:07 2025 by rpki-client