Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/vEUaZzvCkN9N-f8qsCM4-r76toQ.roa
File: vEUaZzvCkN9N-f8qsCM4-r76toQ.roa (raw, json)
Hash identifier: wkde6JOHtsrCEEhCuAooZawq2Fnfe5PB5HU+7JndEZs=
Subject key identifier: BC:45:1A:67:3B:C2:90:DF:4D:F9:FF:2A:B0:23:38:FA:BE:FA:B6:84
Certificate issuer: /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Certificate serial: 0DDA
Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vEUaZzvCkN9N-f8qsCM4-r76toQ.roa
Signing time: Wed 12 Feb 2025 01:36:22 +0000
ROA not before: Wed 12 Feb 2025 01:36:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9680
IP address blocks: 168.95.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3546 (0xdda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Validity
Not Before: Feb 12 01:36:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BC451A673BC290DF4DF9FF2AB02338FABEFAB684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:06:af:10:e0:7e:04:d5:5d:66:51:27:32:40:
9d:34:87:6f:4c:ea:26:cd:a1:c6:7d:2a:8d:e6:7e:
ce:14:30:e2:f1:a8:cd:12:47:03:8d:e8:be:32:af:
ab:a3:5a:1c:48:ff:11:e5:24:62:9c:bc:75:b8:95:
25:e4:e2:c0:06:b5:81:d8:08:13:48:34:77:f0:8a:
56:ef:4c:37:16:ed:33:fd:a5:f3:19:f3:d1:f3:b1:
7a:ab:5b:d7:74:6a:11:e9:a7:66:0c:85:4c:29:ad:
7e:1e:49:64:ce:89:69:c2:29:b5:3a:76:9a:87:b9:
b6:9a:68:7f:5a:c0:91:fb:09:cc:c2:5d:a1:b0:ee:
cd:49:38:d0:be:3e:d1:90:4a:77:d5:a1:7e:a7:31:
bf:94:42:33:62:4c:b8:fb:d7:39:85:45:2f:c7:e8:
a1:95:cf:4b:ed:a7:12:e2:70:e9:b9:77:d8:9a:47:
0b:0f:25:25:ae:05:7a:7f:69:1b:ca:53:c2:56:0b:
aa:15:67:fa:06:dd:18:2c:f6:56:aa:b3:a3:ed:4b:
8b:80:05:db:28:db:39:1f:ea:1a:b5:91:04:84:57:
51:e9:fc:d4:89:9d:2d:1b:8e:39:d9:1b:a2:7f:e9:
39:bb:95:e4:03:57:f5:63:74:46:71:1d:20:01:3c:
86:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:45:1A:67:3B:C2:90:DF:4D:F9:FF:2A:B0:23:38:FA:BE:FA:B6:84
X509v3 Authority Key Identifier:
keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vEUaZzvCkN9N-f8qsCM4-r76toQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
168.95.245.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a4:5d:82:07:d8:50:0c:31:ba:52:7b:65:a2:11:20:6e:9d:
7f:27:e1:13:16:17:59:15:2f:07:4a:aa:18:b7:f8:c2:b5:ee:
cc:9c:a1:0c:ae:b8:f0:5e:f4:e3:65:82:18:c0:93:2c:8a:4e:
d1:d1:1b:ab:d0:bb:01:1b:b2:85:48:b2:0a:98:da:55:17:b4:
69:e6:d5:f4:03:08:2a:70:ac:52:ea:22:e7:3a:d6:a7:11:10:
b0:97:3c:2c:20:33:1b:c2:9a:42:b5:d5:b5:59:b1:f2:69:83:
93:b5:1f:84:c4:92:73:dd:f8:b6:37:84:63:62:25:91:1c:33:
bc:4e:af:06:2c:50:0c:ab:e0:81:fd:cf:7c:1b:12:90:25:0c:
0e:80:d7:48:a0:3e:1c:f3:7f:78:f5:aa:7f:ee:f2:59:64:f2:
d0:b1:d2:68:38:cb:fb:75:ec:38:c8:b2:34:1e:99:3d:12:1d:
b2:fd:98:df:46:f5:71:8b:58:ee:25:21:4d:15:97:69:1a:e1:
0d:68:4c:2c:3f:c2:df:e6:51:31:e8:52:c1:0b:ec:87:ff:8c:
bc:a4:22:e0:f1:a2:e9:7f:71:3f:c6:04:ff:1a:3e:85:1c:b0:
d8:b0:dc:e1:4b:08:8f:ea:bf:d2:f1:a1:70:44:a9:75:5e:2a:
07:99:89:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:18:49 2025 by rpki-client