Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/lJBNw0_rCV6f_TnQTwH9C_bsvxU.roa
File: lJBNw0_rCV6f_TnQTwH9C_bsvxU.roa (raw, json)
Hash identifier: 7En8dGSGpHR/4ngrBcb+PyMofx2TObX7cbgwvXqZUmw=
Subject key identifier: 94:90:4D:C3:4F:EB:09:5E:9F:FD:39:D0:4F:01:FD:0B:F6:EC:BF:15
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1752
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/lJBNw0_rCV6f_TnQTwH9C_bsvxU.roa
Signing time: Wed 12 Feb 2025 01:36:35 +0000
ROA not before: Wed 12 Feb 2025 01:36:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131621
IP address blocks: 203.75.51.0/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5970 (0x1752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=94904DC34FEB095E9FFD39D04F01FD0BF6ECBF15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:bb:45:75:04:1c:db:a1:c3:4b:a1:47:2a:
c1:ab:53:c9:2e:73:56:88:af:db:3c:f3:62:4a:67:
4a:51:75:e5:53:46:3c:99:59:c3:96:26:7b:8b:0a:
db:17:55:7d:2a:79:7e:75:d4:4c:6c:29:f1:e4:00:
27:ab:3d:9e:bf:aa:68:15:03:2b:25:b7:8e:a4:ea:
a2:18:d9:8b:92:8b:a7:ae:ed:75:d2:87:a4:65:1c:
e4:c6:4d:6a:45:46:24:62:8a:83:b3:5c:09:08:f7:
e0:4d:a5:8d:30:b5:ce:86:dd:ab:bc:62:58:b5:6a:
7c:e5:24:a1:14:33:2c:e9:3c:69:4b:f1:24:d6:b7:
f4:c2:45:39:26:60:4d:0f:e5:50:14:ec:2a:d8:fd:
9e:24:ec:34:dc:ec:95:bb:dd:ac:79:58:fd:2b:57:
f3:b1:ec:df:75:f9:e0:46:b4:b7:c8:ec:67:5e:e6:
28:19:f1:70:7e:11:ed:59:3d:e3:69:16:46:f6:e9:
1e:15:6f:04:77:df:a8:38:79:55:1e:51:95:a1:be:
26:05:f8:fd:ec:34:82:ac:22:05:69:3b:e5:9a:9c:
45:72:f1:85:5b:1c:5d:ec:60:f9:df:f1:35:b3:fd:
df:b0:8f:42:7e:4f:75:88:29:db:16:72:36:40:b2:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:90:4D:C3:4F:EB:09:5E:9F:FD:39:D0:4F:01:FD:0B:F6:EC:BF:15
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/lJBNw0_rCV6f_TnQTwH9C_bsvxU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.75.51.0/27
Signature Algorithm: sha256WithRSAEncryption
4c:db:2c:29:b7:c8:93:b4:ab:7b:ba:91:3e:39:b1:81:bb:50:
95:5b:1f:c4:da:68:b2:e4:07:79:65:98:68:dc:57:01:49:09:
03:c6:d8:74:89:53:d3:47:a1:ac:b6:7b:cf:35:53:89:83:d0:
4d:54:c0:2a:96:89:df:49:87:4c:2d:22:20:1e:fb:c8:e8:1e:
a9:8a:02:04:83:32:f1:31:77:56:50:e6:95:78:68:bf:75:3c:
47:a4:27:1c:e8:5d:34:ed:24:be:29:b9:4f:05:91:04:df:a3:
99:5d:1d:f7:4c:3f:2f:46:28:84:35:db:e6:1b:8b:ba:fe:ca:
56:a0:98:2f:8c:1c:c1:62:82:4b:86:5c:52:9a:a8:e6:45:6a:
f4:8e:85:c3:07:a4:ca:53:88:1e:22:9a:c3:c3:6a:64:2b:ff:
62:e7:5a:d4:a3:5d:45:6e:4f:16:e6:54:d6:80:78:f9:ed:1b:
b3:04:ea:22:12:a8:ee:16:eb:e2:e2:00:a8:cd:34:91:83:3c:
e4:1a:71:dc:37:cf:0f:91:78:7e:42:e2:ad:6c:01:7b:3b:7c:
11:98:d5:33:d0:0c:be:4f:13:f6:4a:cb:b9:f0:0e:c0:80:01:
5b:54:30:c0:f7:9e:7f:0c:67:b9:7d:a5:c2:32:cf:7f:d6:53:
98:d6:00:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:00:19 2025 by rpki-client