Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/kjMc05eqrAvprRc8rNFOaxbG1mU.roa
File: kjMc05eqrAvprRc8rNFOaxbG1mU.roa (raw, json)
Hash identifier: 3frkvwZDixzsEUfHEZn0lSAGzQ+YzGHPwj4Dz/Poahw=
Subject key identifier: 92:33:1C:D3:97:AA:AC:0B:E9:AD:17:3C:AC:D1:4E:6B:16:C6:D6:65
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 172F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/kjMc05eqrAvprRc8rNFOaxbG1mU.roa
Signing time: Wed 12 Feb 2025 01:36:28 +0000
ROA not before: Wed 12 Feb 2025 01:36:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 59.112.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5935 (0x172f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=92331CD397AAAC0BE9AD173CACD14E6B16C6D665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:de:0c:ce:3e:c7:fe:f5:65:ab:a6:74:d4:
51:4c:50:c9:c0:0f:76:eb:f1:b8:c4:96:f8:25:a7:
59:a7:bd:27:af:73:bc:67:a3:71:2d:2b:13:f1:1d:
a5:8d:1a:b9:4a:ef:a2:49:ed:f8:b6:82:8a:70:84:
77:59:43:f0:35:8d:e2:1f:3b:84:14:28:20:1c:d3:
26:94:2b:ce:29:83:54:55:15:69:fe:1e:00:06:b0:
2f:49:ac:9c:4b:f7:ed:80:94:7d:35:4d:90:f9:1f:
7c:4d:1e:7d:f7:bd:fc:82:b5:81:6b:fa:ef:33:7d:
20:b1:dc:08:25:67:48:7f:ad:26:a5:9a:db:4e:1f:
80:e1:30:bd:df:47:bf:60:92:c1:d1:f8:c6:74:79:
08:34:31:c2:4e:c4:bd:c3:6f:39:36:5c:97:24:7b:
df:1c:c7:15:07:a4:18:64:92:e5:96:c8:1b:be:0f:
22:f1:e0:1d:d0:44:15:63:b5:10:6f:3d:f1:79:d9:
fa:50:a0:28:47:65:ba:10:28:aa:96:44:27:06:e4:
d6:64:c8:83:4d:2f:a1:2c:c5:1d:fc:0e:cc:fb:2c:
0c:a9:a1:06:0c:93:97:d7:ef:d0:73:02:6b:8a:46:
3f:9a:48:f2:0f:57:21:d7:11:7a:cf:7a:d4:fa:12:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:33:1C:D3:97:AA:AC:0B:E9:AD:17:3C:AC:D1:4E:6B:16:C6:D6:65
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/kjMc05eqrAvprRc8rNFOaxbG1mU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.112.0.0/13
Signature Algorithm: sha256WithRSAEncryption
46:20:61:6d:0f:3d:b0:59:24:fc:e1:33:ca:8a:5d:92:c3:26:
d4:58:3b:a0:25:4f:7d:2c:f0:e5:7c:66:fa:6b:cd:4f:94:83:
a4:64:d1:39:97:cb:46:49:6f:cb:fa:dd:57:41:86:4e:b5:07:
5e:9b:df:fb:f6:ec:a4:62:f3:67:6e:85:2f:48:2b:23:6a:18:
b3:5f:10:7c:83:a0:d9:e8:09:71:11:d6:37:54:e9:5e:0f:84:
fe:95:41:fa:f9:55:ea:d5:f7:33:e3:81:61:ae:ba:58:d6:b1:
a2:68:8c:1b:a2:25:22:75:b3:20:15:05:47:21:cc:c2:70:18:
23:5e:34:80:25:ca:ac:a0:38:39:c1:d3:73:1b:2d:17:a1:90:
4f:22:e8:a3:f5:10:ae:32:fb:81:1d:8e:12:30:2c:82:71:7d:
c9:90:f3:e4:b0:08:0c:95:03:4d:78:c1:1c:ba:f1:3b:21:7b:
b9:ad:0e:17:16:8e:3b:9d:e2:1a:ef:58:67:c3:c8:2c:ed:7e:
2e:b9:e0:54:f9:41:33:5f:98:49:39:32:e0:53:a9:f1:05:09:
4d:b0:3c:33:ca:2d:d3:df:8b:e6:c8:05:8f:7d:c4:f2:f4:26:
fc:89:aa:88:57:f5:4e:17:62:0c:f7:2b:af:56:63:71:d1:7c:
80:a9:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:05:24 2025 by rpki-client