Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/wp-g4lrSoTCKIVwghKpJv6IORRs.roa
File: wp-g4lrSoTCKIVwghKpJv6IORRs.roa (raw, json)
Hash identifier: Igjr6MxSeasSe2AQ4kJWLIDYFbTiitt5KX6TdCgppi0=
Subject key identifier: C2:9F:A0:E2:5A:D2:A1:30:8A:21:5C:20:84:AA:49:BF:A2:0E:45:1B
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1763
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wp-g4lrSoTCKIVwghKpJv6IORRs.roa
Signing time: Wed 12 Feb 2025 01:36:39 +0000
ROA not before: Wed 12 Feb 2025 01:36:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 43.255.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5987 (0x1763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:39 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C29FA0E25AD2A1308A215C2084AA49BFA20E451B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:29:83:2d:73:45:61:a9:ff:49:ab:19:46:
90:d3:bb:9c:51:cc:70:97:3f:91:1d:45:25:24:78:
cf:ea:ca:7d:48:fa:7d:ff:18:75:7b:91:9a:f0:ca:
85:94:6f:f8:38:01:16:46:75:21:70:0b:04:d8:96:
9d:49:db:98:0e:3d:08:c1:1d:5b:97:70:de:79:14:
3c:1e:20:95:33:45:32:2b:e2:f8:16:ee:c7:5a:34:
27:04:c6:58:43:5d:be:34:cd:16:2c:27:de:14:a5:
a1:74:2a:2e:00:c7:2d:b3:3e:12:76:5c:42:c6:3e:
c8:0a:ce:69:a0:35:6d:8a:df:4e:cc:77:bf:65:1f:
a9:d4:b8:38:1e:25:c1:be:bd:d0:bf:c3:72:72:0e:
e8:5e:2d:d4:f5:79:90:4e:5c:92:d7:e0:f6:3a:96:
87:56:26:f4:0f:c3:09:0d:6d:da:d2:f8:88:5e:c2:
79:7c:f0:80:6e:f6:cd:f3:a3:1f:e5:d3:c2:d4:5c:
8e:ff:e3:53:a3:25:53:ca:de:87:09:9b:eb:3b:7c:
ec:98:8a:c3:d4:d4:ad:09:0e:a3:da:ea:f8:3a:c1:
e8:b9:69:2f:04:62:af:78:12:43:d0:cf:48:8e:6c:
92:00:0a:55:9f:a7:68:2b:d0:37:81:0c:e0:19:a5:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9F:A0:E2:5A:D2:A1:30:8A:21:5C:20:84:AA:49:BF:A2:0E:45:1B
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wp-g4lrSoTCKIVwghKpJv6IORRs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:54:46:bf:9a:9b:82:78:28:0d:bb:96:49:ff:eb:eb:33:91:
e2:b1:fc:26:8d:94:c7:98:70:47:d8:ae:dc:23:e8:71:58:85:
8c:8c:76:57:40:d8:8e:54:f4:79:8a:16:26:04:f5:14:7d:53:
fc:68:3b:9f:7e:4f:d5:7e:49:73:58:c8:ab:7a:3e:6b:d7:fa:
96:48:58:c4:c5:33:a0:b8:d0:d4:4b:a5:be:eb:b3:39:25:cc:
e5:fc:9b:1a:11:6f:3f:86:8d:ad:bc:01:04:ab:87:38:e6:9c:
eb:90:a6:60:36:01:8b:4a:35:7d:f5:75:e6:f7:37:f7:a1:f8:
a8:e5:f7:12:0e:78:b7:33:dc:9e:3c:84:23:28:cc:a5:6d:f3:
9e:a1:bc:8d:6d:54:90:fe:e1:d1:17:b4:25:3b:6a:f8:56:68:
ff:dc:d8:e7:fd:34:53:22:73:91:3a:ea:68:8b:ce:ef:03:51:
23:e5:f0:15:e3:4f:4d:54:ac:cf:a6:4b:12:06:3e:67:cd:23:
32:75:b6:5d:99:e2:d6:aa:db:f4:3b:99:61:d1:a0:a9:60:3e:
47:b4:84:fd:4a:9e:a2:97:76:e8:fc:37:cf:b7:7f:4d:1c:96:
47:83:ff:42:77:57:77:cb:08:1f:b9:48:e9:32:19:ec:16:88:
a3:fd:cc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:00:14 2025 by rpki-client