Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/9VPoymDBXs34wItDrcgx76Xd2vk.roa
File: 9VPoymDBXs34wItDrcgx76Xd2vk.roa (raw, json)
Hash identifier: jSN+mZCkQU8phFW9DUjdiuP3mZ+jUzHKDDYk34KM/s8=
Subject key identifier: F5:53:E8:CA:60:C1:5E:CD:F8:C0:8B:43:AD:C8:31:EF:A5:DD:DA:F9
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11B7
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9VPoymDBXs34wItDrcgx76Xd2vk.roa
Signing time: Mon 26 Aug 2024 05:17:51 +0000
ROA not before: Mon 26 Aug 2024 05:17:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 118.160.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4535 (0x11b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:51 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F553E8CA60C15ECDF8C08B43ADC831EFA5DDDAF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:52:39:5a:30:da:34:ef:84:56:19:8a:ae:
e7:9f:fa:3e:b3:29:79:d3:41:7c:ac:e6:b8:ab:89:
c0:f0:99:4b:7e:6a:be:af:a8:5d:4c:15:bd:4a:d6:
19:a6:7b:6b:ac:7b:eb:88:4a:84:d5:49:ad:82:e7:
79:df:be:88:3e:b3:5c:b9:45:42:30:7e:14:95:80:
a0:f1:d9:de:37:fa:28:65:c7:c1:d4:04:ed:75:2f:
bd:32:75:ec:93:9b:4c:7d:e3:28:f3:f6:3e:cd:75:
f6:e6:3e:42:84:1d:78:9f:d5:52:b9:c3:a0:ed:9e:
bf:da:90:f4:53:35:b8:a9:d6:3b:94:be:e8:c5:28:
3c:3c:44:b6:0b:9a:2a:d8:fd:7d:bb:8f:03:15:91:
7f:d7:a1:ed:ec:a3:bf:bd:eb:5a:ce:c0:6a:3c:2c:
a6:16:2a:51:ba:46:3e:67:26:db:f9:b8:c8:0c:ac:
f0:46:b6:35:f4:97:31:d8:dc:0c:7c:aa:a3:27:06:
8a:a7:f8:b8:bd:c2:be:86:21:31:f0:24:42:ec:b8:
06:d0:1e:32:b0:eb:e3:6f:27:a7:d0:ab:41:9d:5b:
fa:70:16:a1:10:81:7e:85:38:6c:13:1b:f1:24:49:
3c:9c:1b:36:c9:a9:f0:0c:e3:9a:59:94:0c:75:61:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:53:E8:CA:60:C1:5E:CD:F8:C0:8B:43:AD:C8:31:EF:A5:DD:DA:F9
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9VPoymDBXs34wItDrcgx76Xd2vk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.160.0.0/13
Signature Algorithm: sha256WithRSAEncryption
7d:a5:c7:11:b8:55:6c:25:51:7d:a9:5d:63:a6:62:a5:72:ef:
2f:46:12:03:61:eb:a1:1e:ea:2a:a3:6a:ff:12:dd:30:27:18:
58:76:aa:90:70:18:c8:4b:8c:fc:cb:12:3a:4c:1c:f6:6b:1d:
e3:c9:54:c5:cf:ed:36:43:c5:67:4c:94:a8:06:1a:f7:a7:cf:
88:62:98:ec:75:fb:55:8e:24:90:bd:9a:be:68:d1:03:e6:65:
e5:28:aa:29:5f:42:29:ac:42:3d:a2:e7:8a:9a:16:f2:04:b6:
bb:92:ae:38:e6:6e:77:e1:7c:60:ff:6a:54:87:1d:27:30:d7:
23:d7:54:3d:3e:dd:a1:5c:af:15:cf:a6:24:29:39:43:7e:2c:
d8:15:68:ff:e1:f3:cb:d7:3f:b9:cf:31:69:c6:50:7f:ac:90:
57:5c:e5:d1:bb:cf:b1:cf:61:8b:1e:34:d1:b7:7a:b1:e7:ca:
35:e7:36:8f:b3:88:fe:0e:91:50:11:a7:5e:cb:c8:ef:72:2f:
7d:3a:49:2f:9e:7a:bb:35:e0:c4:65:80:fe:8f:0b:bf:e2:d1:
af:29:72:fb:fd:8c:7c:22:66:71:a7:63:d7:7c:e6:76:1c:93:
18:1d:ac:ef:da:ae:91:50:37:c9:c5:d0:58:10:d2:49:9b:8a:
5b:6d:0a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:18:06 2025 by rpki-client