Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/trBjBRhg_OCGiURd5XfE4jr7plU.roa
File: trBjBRhg_OCGiURd5XfE4jr7plU.roa (raw, json)
Hash identifier: ge6jp+qIaKzaEBghWh/d1WA0h8g4LwFrJRiVa9Dzkus=
Subject key identifier: B6:B0:63:05:18:60:FC:E0:86:89:44:5D:E5:77:C4:E2:3A:FB:A6:55
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 17AB
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/trBjBRhg_OCGiURd5XfE4jr7plU.roa
Signing time: Wed 12 Feb 2025 01:36:56 +0000
ROA not before: Wed 12 Feb 2025 01:36:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 203.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6059 (0x17ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:56 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B6B063051860FCE08689445DE577C4E23AFBA655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:bc:28:fa:6b:72:ec:47:e6:cc:98:d3:3f:
30:b5:5d:4b:57:94:87:a2:5d:0c:74:34:15:ce:fa:
e2:65:f1:12:a2:57:ad:75:1e:82:d1:26:36:9a:2a:
1a:ef:43:46:22:44:cc:f2:97:6f:56:3f:39:1a:44:
02:cf:95:a7:64:3a:ca:0e:a0:7e:0b:f6:97:96:83:
56:99:7e:dc:01:17:03:5c:4c:a3:22:cf:50:dc:23:
31:56:bf:d4:2c:1a:54:8d:f3:d0:77:7c:d1:da:b2:
ab:cc:64:c7:75:87:14:46:9f:09:da:c5:97:a7:17:
82:cf:53:c7:83:cf:be:2a:8f:ec:e2:cc:c1:cb:6a:
6e:a6:ba:16:f2:d0:d4:bb:df:50:95:b4:24:f6:d0:
56:5a:0b:3f:98:ee:3c:ad:32:2b:21:49:31:46:ad:
62:9e:1c:c4:63:4c:49:3b:dd:60:c0:82:da:be:11:
9f:58:17:ec:92:82:97:59:14:e3:26:7d:c3:86:c2:
19:07:a8:56:65:fd:8b:80:07:02:12:05:e7:4e:48:
93:fd:c8:51:28:df:cd:23:30:dc:d0:e8:61:a6:09:
03:eb:8c:22:3d:b5:37:d3:12:e7:e4:bf:6d:4d:78:
21:e4:d4:41:1d:af:70:48:c5:94:b8:7a:cf:d3:fb:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B0:63:05:18:60:FC:E0:86:89:44:5D:E5:77:C4:E2:3A:FB:A6:55
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/trBjBRhg_OCGiURd5XfE4jr7plU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:61:fb:ed:7b:24:7f:ba:98:49:91:23:ce:ed:9d:f6:50:ac:
c6:79:7b:be:ab:8e:6e:56:1d:17:f9:2d:13:7e:66:dd:1e:d6:
c3:87:83:ee:74:9c:da:ea:1c:a5:66:3b:af:ae:ea:81:56:c0:
94:d4:ec:9c:5b:92:cf:bd:a3:6d:f5:de:35:f2:4d:62:bd:6f:
22:e0:d6:a9:61:4a:fb:a4:89:b3:b1:d6:c8:20:f1:45:06:41:
c4:ad:86:b4:06:7d:86:80:2c:66:1c:0f:55:76:1a:82:12:e9:
d5:94:14:e4:0a:02:c9:da:ae:09:09:cc:c2:c3:ea:32:5c:37:
c5:42:07:bb:64:69:af:59:6b:ab:de:cc:e2:fc:e5:02:82:25:
61:e7:18:ed:59:1b:9f:e9:96:f8:42:f7:83:1c:65:a0:33:d2:
2f:e2:1a:46:63:f7:58:02:4e:d6:dc:c6:11:24:d6:2e:1c:bf:
92:e5:9e:84:1b:00:90:b0:78:d2:1a:2c:c2:7f:00:e8:45:49:
d3:da:21:88:87:a3:8f:dc:96:fd:15:27:61:3e:28:3b:eb:b7:
37:f7:54:de:5c:c9:ac:ce:e0:15:50:f1:25:26:93:20:8d:27:
7f:ff:d3:45:20:44:10:04:4f:56:16:1c:56:cc:f3:9f:42:22:
f2:22:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:02:53 2025 by rpki-client