Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/n0M-kTbJPoRa0-RrE4Nqki7V4Rk.roa
File: n0M-kTbJPoRa0-RrE4Nqki7V4Rk.roa (raw, json)
Hash identifier: heQ87NwY0SAemoLN51diuRHsaANYEvAet0+RWUIiF60=
Subject key identifier: 9F:43:3E:91:36:C9:3E:84:5A:D3:E4:6B:13:83:6A:92:2E:D5:E1:19
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1713
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/n0M-kTbJPoRa0-RrE4Nqki7V4Rk.roa
Signing time: Wed 12 Feb 2025 01:36:22 +0000
ROA not before: Wed 12 Feb 2025 01:36:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 198949
IP address blocks: 210.61.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5907 (0x1713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9F433E9136C93E845AD3E46B13836A922ED5E119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:af:6f:b9:dd:c1:d9:a5:6a:2f:20:2d:99:e1:
ce:b1:73:f9:bf:12:11:f1:5f:58:77:0d:78:e7:39:
0a:f6:5b:66:7f:44:59:b9:83:a6:41:2c:88:c3:22:
4a:3f:95:2d:20:a8:5a:bf:71:e2:ad:a2:b3:ac:59:
47:73:98:6f:d5:f1:64:45:e3:1b:66:93:a1:54:1d:
30:dc:6f:40:5a:7e:f6:fd:8b:91:84:41:8b:97:8a:
bd:2e:7e:49:c3:be:66:22:8f:a4:1c:98:c5:9c:a9:
04:62:a6:fd:15:89:e6:7c:f9:97:3d:61:02:eb:e8:
18:dc:26:b8:57:4c:65:ac:bd:b0:ca:59:60:dd:e0:
c1:0c:f5:dc:18:45:fc:bb:88:9d:a1:20:3a:c0:aa:
8b:98:be:a9:20:48:61:ea:41:44:f4:80:9a:6b:ad:
8a:c9:cf:91:31:21:eb:0e:72:78:6f:a4:80:c0:93:
6c:47:df:a2:53:b0:16:f6:f3:21:93:6d:6a:95:59:
a0:3b:f2:7a:89:8a:f3:13:50:2e:5a:ad:25:0c:7d:
12:4b:01:c3:6f:d6:67:02:45:06:ee:eb:91:19:8f:
40:8e:73:cc:85:05:0d:19:d5:74:de:20:59:f0:7f:
bd:e5:3b:8e:4d:e6:d3:80:f8:56:eb:3d:3a:fc:b7:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:43:3E:91:36:C9:3E:84:5A:D3:E4:6B:13:83:6A:92:2E:D5:E1:19
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/n0M-kTbJPoRa0-RrE4Nqki7V4Rk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.114.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b8:7d:47:a3:ed:68:81:3e:1e:f4:5e:04:2b:d0:0e:e9:f1:
d1:cd:cf:a1:ee:f0:4d:5c:16:1b:6f:1e:b1:46:79:50:c1:48:
6a:42:d1:38:5a:62:8d:00:35:af:76:13:c5:46:5d:a7:63:e9:
cc:7a:44:36:48:60:ea:2c:50:77:04:a7:76:7e:ba:3c:05:94:
91:6c:f2:c8:68:8b:ca:c6:ec:dc:f3:2e:19:cd:9b:2c:a1:09:
ed:1d:50:54:fd:1f:24:00:ce:d8:53:09:6f:f5:ba:e7:77:47:
f4:a9:9c:17:c5:72:77:f2:de:a1:95:b9:71:5c:41:52:2a:81:
62:36:4c:7b:4a:2b:d3:b7:d7:00:57:8a:42:86:78:f3:97:51:
3b:e8:47:49:61:0b:d2:3d:e8:67:1f:aa:c1:bf:c0:92:71:c3:
a9:4a:04:fe:86:18:50:31:69:d4:39:23:1a:5c:8e:d1:57:3c:
35:fd:42:2c:02:d0:17:49:11:e1:9c:54:26:02:15:50:0c:0c:
ed:78:12:8c:31:82:20:de:fb:2d:76:6c:d4:b0:4d:1d:9c:4f:
16:45:96:71:e0:81:21:7f:e1:d1:09:5b:bb:e1:e0:b8:e4:5b:
f9:a5:ee:8e:a9:a2:b2:55:ae:e9:fb:84:db:bb:95:ca:11:49:
33:f4:6f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:48:00 2025 by rpki-client