Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/tLso2lTSuTP7guQyLuw9eBK-4lM.roa
File: tLso2lTSuTP7guQyLuw9eBK-4lM.roa (raw, json)
Hash identifier: F+sbggpdGdFrEEaUxNcIRoZ9mrtekm1RieM9Rb5E4ho=
Subject key identifier: B4:BB:28:DA:54:D2:B9:33:FB:82:E4:32:2E:EC:3D:78:12:BE:E2:53
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1778
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tLso2lTSuTP7guQyLuw9eBK-4lM.roa
Signing time: Wed 12 Feb 2025 01:36:44 +0000
ROA not before: Wed 12 Feb 2025 01:36:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 60.248.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6008 (0x1778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B4BB28DA54D2B933FB82E4322EEC3D7812BEE253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:aa:25:ad:bc:56:90:2b:6c:9e:a8:3d:19:97:
cf:84:07:e3:fc:30:60:52:bd:4d:07:18:d0:4e:06:
95:f9:3c:45:cf:2b:57:53:75:75:29:4f:d0:0a:64:
56:64:44:db:e2:3d:d5:6d:8c:9f:d2:13:f7:b5:5f:
f0:91:56:95:bd:bd:fd:bd:c8:5c:8b:cd:f0:34:40:
e3:c3:50:d0:bc:29:08:78:c5:5a:2b:7c:c6:44:98:
fa:07:7b:b8:19:58:ec:e4:81:b8:16:51:5b:d9:40:
de:03:b4:5a:7a:d3:8b:15:8e:20:99:b0:62:c7:72:
22:2a:83:cc:9a:7b:45:e7:b8:e0:e8:61:cc:33:77:
2b:de:23:c4:f9:74:f4:a7:ea:02:64:85:c1:43:98:
ca:72:80:8f:2d:98:49:ec:0e:cf:38:80:52:19:59:
ac:85:5a:55:e7:7f:36:a6:12:32:c5:3f:0f:b6:51:
5f:e2:21:04:bd:45:6a:d3:9f:87:e8:30:55:a9:ce:
6a:81:35:52:db:71:3f:cc:26:f1:ae:79:3b:40:87:
5f:8d:e0:ab:a7:71:b6:7f:ab:55:06:8d:68:f1:e6:
11:4e:fb:69:e7:95:a7:fd:20:b5:a1:33:d3:c9:1d:
73:47:d9:85:96:df:4c:3c:ad:b8:05:ab:e2:90:ac:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BB:28:DA:54:D2:B9:33:FB:82:E4:32:2E:EC:3D:78:12:BE:E2:53
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tLso2lTSuTP7guQyLuw9eBK-4lM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.248.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:1f:4d:fd:5f:95:ce:b2:e0:08:11:dc:52:73:16:dd:d3:39:
fb:19:70:78:a7:28:fd:0b:0f:f9:4c:cd:96:64:1d:a3:59:89:
2a:2b:35:60:6e:07:61:73:58:4f:6b:db:b2:67:56:dc:7b:fc:
f3:05:42:1c:ab:a0:9f:b6:0d:08:9f:fd:6d:0d:f3:63:ac:5c:
2d:84:ab:1e:a3:42:41:dc:04:e6:a7:60:f0:59:c0:18:1f:fe:
b1:98:3d:fc:2b:b8:7b:2f:07:57:9f:e6:14:8e:1b:9e:14:6c:
a8:45:25:54:19:7e:97:f6:c1:ba:b5:ff:2b:ae:f0:85:92:1c:
ea:7f:3b:12:b9:b7:fd:cb:ea:3b:d9:8f:b0:47:d3:ff:7a:eb:
3c:20:52:fe:af:4f:3b:f9:ed:f5:1d:c1:4c:8f:6b:14:c6:d4:
2b:fe:0f:a2:d8:cd:7b:e6:8e:c2:3d:47:fd:a7:c2:e2:22:02:
2d:ce:19:36:69:d8:40:5a:fa:c6:5a:22:9c:31:3b:14:5b:a6:
17:20:bd:77:fd:47:cc:12:7f:2c:74:89:9a:03:88:b4:2b:05:
6e:95:46:ba:fe:1f:a7:80:c4:c1:40:67:93:93:f1:49:25:7b:
d3:61:25:31:96:da:3a:6a:21:a5:56:00:eb:62:16:80:be:94:
ae:56:a3:ae
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICF3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw
MTM2NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI0QkIyOERBNTREMkI5
MzNGQjgyRTQzMjJFRUMzRDc4MTJCRUUyNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVqiWtvFaQK2yeqD0Zl8+EB+P8MGBSvU0HGNBOBpX5PEXPK1dT
dXUpT9AKZFZkRNviPdVtjJ/SE/e1X/CRVpW9vf29yFyLzfA0QOPDUNC8KQh4xVor
fMZEmPoHe7gZWOzkgbgWUVvZQN4DtFp604sVjiCZsGLHciIqg8yae0XnuODoYcwz
dyveI8T5dPSn6gJkhcFDmMpygI8tmEnsDs84gFIZWayFWlXnfzamEjLFPw+2UV/i
IQS9RWrTn4foMFWpzmqBNVLbcT/MJvGueTtAh1+N4KuncbZ/q1UGjWjx5hFO+2nn
laf9ILWhM9PJHXNH2YWW30w8rbgFq+KQrGj1AgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUtLso2lTSuTP7guQyLuw9eBK+4lMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC90THNvMmxUU3VUUDdndVF5THV3
OWVCSy00bE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAPPgw
DQYJKoZIhvcNAQELBQADggEBACYfTf1flc6y4AgR3FJzFt3TOfsZcHinKP0LD/lM
zZZkHaNZiSorNWBuB2FzWE9r27JnVtx7/PMFQhyroJ+2DQif/W0N82OsXC2Eqx6j
QkHcBOanYPBZwBgf/rGYPfwruHsvB1ef5hSOG54UbKhFJVQZfpf2wbq1/yuu8IWS
HOp/OxK5t/3L6jvZj7BH0/966zwgUv6vTzv57fUdwUyPaxTG1Cv+D6LYzXvmjsI9
R/2nwuIiAi3OGTZp2EBa+sZaIpwxOxRbphcgvXf9R8wSfyx0iZoDiLQrBW6VRrr+
H6eAxMFAZ5OT8Ukle9NhJTGW2jpqIaVWAOtiFoC+lK5Wo64=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:00:18 2025 by rpki-client