Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/s-dsAocyTa5G_gN8Y5EwAwilIM8.roa
File: s-dsAocyTa5G_gN8Y5EwAwilIM8.roa (raw, json)
Hash identifier: tkldwl20t4x/ZL+rsDmYQKhO9k6Jy03o55PvByaM4Js=
Subject key identifier: B3:E7:6C:02:87:32:4D:AE:46:FE:03:7C:63:91:30:03:08:A5:20:CF
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1774
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/s-dsAocyTa5G_gN8Y5EwAwilIM8.roa
Signing time: Wed 12 Feb 2025 01:36:43 +0000
ROA not before: Wed 12 Feb 2025 01:36:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 10126
IP address blocks: 175.111.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6004 (0x1774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:43 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B3E76C0287324DAE46FE037C6391300308A520CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:28:05:4c:85:67:9f:d7:7e:3d:16:63:03:
12:5c:39:f0:29:ca:b1:7f:7c:2f:62:d1:4d:0c:c1:
1b:a6:f6:e9:f4:be:da:5b:82:cd:72:f5:41:da:9b:
7f:e1:3e:21:af:0a:dd:1b:b0:91:e5:a5:16:97:9d:
c8:03:42:7c:58:8b:9b:8b:0e:3a:29:7b:82:19:4d:
59:98:eb:72:1b:ea:17:1c:e6:c8:a0:c1:f9:8b:c1:
5e:24:9d:9b:99:7f:2f:cb:6e:c9:47:aa:d2:3a:0f:
d4:85:92:91:12:7f:cc:40:4c:23:67:44:58:3c:13:
3e:cc:91:cb:1a:77:19:3f:77:39:d9:87:b4:3d:9c:
18:ba:b0:c4:fb:c3:98:d6:ad:ef:c8:7a:84:8d:4f:
bf:89:36:41:26:11:d7:68:85:61:89:69:72:a2:17:
1f:f8:1e:d5:13:a9:07:4f:54:44:8f:f7:4e:e9:09:
bb:d5:e9:91:aa:18:09:00:b2:be:b9:da:cc:8f:b0:
92:17:12:8c:b6:9c:c3:c9:9d:91:70:01:d4:ab:f0:
d4:ee:fd:ba:65:56:d1:de:6d:4e:53:f7:c8:c0:83:
17:f2:91:d1:01:d6:53:04:b2:66:9c:65:d6:47:8b:
7f:9b:77:de:31:f6:a0:69:cb:68:32:b3:23:6b:6d:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E7:6C:02:87:32:4D:AE:46:FE:03:7C:63:91:30:03:08:A5:20:CF
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/s-dsAocyTa5G_gN8Y5EwAwilIM8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.192.0/18
Signature Algorithm: sha256WithRSAEncryption
77:d9:5c:3c:d4:1e:58:48:64:85:4e:61:27:e7:ec:0c:40:5c:
62:cd:17:ab:00:4f:e4:ef:0c:3a:96:da:fd:80:f2:9a:f6:49:
2f:d2:25:24:d8:29:0b:ff:c1:ab:36:21:a5:e7:52:bf:33:33:
4c:4a:20:d6:37:3c:95:9b:0c:41:35:47:ca:18:d2:be:c6:5a:
92:1d:0d:03:20:fb:99:32:f3:78:44:a8:91:ca:0a:d8:71:40:
6c:6d:9f:42:09:9c:16:42:6e:d6:be:d0:d5:2a:84:25:38:83:
91:4e:eb:cf:5d:20:de:33:e1:4c:56:84:46:42:4a:34:3c:78:
b0:2d:46:cc:a4:b6:c5:b9:2b:45:09:41:46:d9:f0:1c:07:4a:
9b:57:0b:37:20:80:29:e7:c8:77:01:09:f9:dc:9f:3e:56:aa:
4a:57:ba:f9:08:41:66:62:55:51:47:98:bb:4f:f9:e3:18:8c:
74:e1:aa:3b:5c:0a:35:35:e8:4f:fc:46:eb:b0:df:af:1c:77:
9c:d1:3b:66:b6:12:f2:2b:7c:7c:66:43:4f:39:09:df:21:b8:
07:5a:86:b7:38:c1:cf:cb:36:76:e6:3a:48:4a:17:3d:72:28:
59:8d:2d:df:6b:0d:cc:90:89:19:2b:5b:b8:87:16:5a:a7:56:
06:ac:16:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:31:33 2025 by rpki-client