Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/GtzqTz4vr9qJE0Kxj8j_AK2EADc.roa
File: GtzqTz4vr9qJE0Kxj8j_AK2EADc.roa (raw, json)
Hash identifier: PBA+5CUYUSV8wosic/SIUQgGuOU+35kaeUptcs1t3jE=
Subject key identifier: 1A:DC:EA:4F:3E:2F:AF:DA:89:13:42:B1:8F:C8:FF:00:AD:84:00:37
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11EA
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GtzqTz4vr9qJE0Kxj8j_AK2EADc.roa
Signing time: Mon 26 Aug 2024 05:18:04 +0000
ROA not before: Mon 26 Aug 2024 05:18:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 220.128.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4586 (0x11ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:18:04 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1ADCEA4F3E2FAFDA891342B18FC8FF00AD840037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:b0:94:2f:a6:a5:8a:50:74:3b:9d:2a:0f:
47:cb:95:af:8d:b9:3b:67:d8:c7:d9:d5:76:87:92:
31:00:3d:17:f8:06:a5:d6:b2:01:68:f7:c9:42:b3:
e9:f4:b3:d4:6b:c5:36:af:da:f9:5d:72:3e:e5:1f:
a8:03:2b:04:f5:4a:e6:49:cb:ec:05:42:a7:c6:1b:
27:e4:8d:04:2f:4d:a1:5b:09:be:83:df:04:96:89:
70:e1:7a:ca:19:1e:98:27:00:1e:50:1d:5e:ac:f8:
f9:4e:34:e3:42:86:1e:5c:35:c5:9e:0c:5b:25:8f:
e2:8d:75:a6:86:49:ab:ce:35:32:a8:be:01:1f:1b:
18:21:ac:86:5e:93:a6:05:05:88:73:8e:f7:91:7f:
91:b2:74:f9:72:00:b1:fe:31:27:25:6c:df:b1:0d:
45:5b:79:88:8e:e2:f0:38:d3:09:07:9e:c3:73:e9:
8b:c7:f8:da:b4:a3:15:3f:f5:a2:de:54:22:c2:71:
4e:85:48:a7:96:41:41:09:89:0b:86:ae:3a:56:34:
d2:d5:54:89:82:0e:0c:56:7f:98:e0:60:d5:79:34:
fe:25:0d:da:01:07:9e:47:b8:4b:88:50:35:5c:ac:
1d:a6:8a:49:e2:6c:b2:1f:7f:2f:99:15:05:90:df:
8f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DC:EA:4F:3E:2F:AF:DA:89:13:42:B1:8F:C8:FF:00:AD:84:00:37
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GtzqTz4vr9qJE0Kxj8j_AK2EADc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.128.0/17
Signature Algorithm: sha256WithRSAEncryption
31:ab:18:a3:88:fa:96:a2:53:ad:d7:b6:63:bd:41:b7:fb:6f:
e8:d3:b6:79:2b:5a:2e:54:e3:8f:2d:18:21:49:d2:b5:63:ba:
a7:42:81:ed:97:1a:da:60:8f:fd:b5:18:1d:3e:a2:a1:ad:ab:
71:bd:fc:11:f6:af:32:a3:b9:2d:d3:2a:26:2e:b1:48:ca:83:
b9:a3:24:ee:43:53:2c:a9:b8:37:ae:d9:8f:8f:5a:97:07:2c:
2f:e7:57:51:c3:37:09:3c:c0:1a:58:9f:17:79:bf:e7:f9:d7:
39:8b:ff:1a:5a:13:08:63:ba:fc:1d:ed:ab:df:7e:03:d9:d5:
89:0b:5f:7b:84:63:a0:d5:e1:15:15:fd:b9:33:66:b4:30:3a:
68:ad:01:61:f3:ad:c9:6c:d7:b2:c0:24:9e:c2:03:6c:65:8f:
c8:2d:4d:62:a2:84:02:b0:1d:f7:ea:9b:dd:53:e4:73:c8:b4:
d3:2f:2e:fa:5a:8a:fa:40:d7:4d:fe:dc:87:7a:45:52:fd:68:
f5:93:53:79:91:99:7d:14:79:62:26:aa:85:92:f2:b3:68:79:
83:b4:d4:0b:37:ab:72:74:e1:62:78:a7:cb:9a:1c:1a:2c:88:
48:2a:ba:a1:35:33:0e:1e:68:b2:7f:51:61:83:89:c9:68:3e:
e3:e7:8f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:38:21 2025 by rpki-client