Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/LWZibrO5-PJughUVpKSETh8NCoE.roa
File: LWZibrO5-PJughUVpKSETh8NCoE.roa (raw, json)
Hash identifier: gmPTvt2AcOcsdEx9lUfUvnJ1MiNGn7Km6/IaV/iEUPc=
Subject key identifier: 2D:66:62:6E:B3:B9:F8:F2:6E:82:15:15:A4:A4:84:4E:1F:0D:0A:81
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1197
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LWZibrO5-PJughUVpKSETh8NCoE.roa
Signing time: Mon 26 Aug 2024 05:17:42 +0000
ROA not before: Mon 26 Aug 2024 05:17:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 20940
IP address blocks: 203.69.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4503 (0x1197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:42 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2D66626EB3B9F8F26E821515A4A4844E1F0D0A81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:20:10:b5:80:68:51:a2:6c:03:9e:66:e0:
45:a0:db:5e:a4:df:83:36:64:68:81:60:e0:64:11:
00:90:15:c5:d4:21:9c:ce:91:af:eb:05:c2:c2:b2:
0c:89:c1:85:11:e2:10:a7:28:3e:86:ec:5c:aa:2e:
2b:33:4f:b3:c7:41:15:5d:41:50:49:b1:e1:5c:93:
0a:50:d0:33:80:ac:5e:f2:6b:67:68:b4:67:fa:33:
d8:72:7f:5f:7e:f1:00:92:de:03:9f:e2:b2:90:0b:
60:1f:0c:3c:a5:fd:62:94:17:4a:92:c9:79:07:01:
fc:b5:31:60:4f:c7:5c:e2:1b:9c:f8:ea:a4:e9:59:
7c:a1:cb:69:71:46:1e:8e:d0:e8:df:14:33:6c:d3:
e0:67:61:79:12:4a:6e:8f:03:74:b9:e1:cb:e0:ac:
87:ab:7b:45:b8:6d:38:05:a7:64:27:8c:14:42:a5:
66:56:f3:10:ba:8c:76:40:58:88:0f:53:b8:5c:45:
6a:35:55:f2:c0:92:60:65:93:84:ba:d0:80:09:c7:
22:82:0a:df:04:38:93:f3:6e:3a:aa:c8:3d:7a:98:
b6:12:01:79:0f:43:83:a1:99:ce:78:08:e5:4b:c5:
bf:d0:41:a0:97:b6:4b:06:7d:01:97:9a:84:a7:92:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:66:62:6E:B3:B9:F8:F2:6E:82:15:15:A4:A4:84:4E:1F:0D:0A:81
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/LWZibrO5-PJughUVpKSETh8NCoE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.69.138.0/24
Signature Algorithm: sha256WithRSAEncryption
47:10:10:30:8d:47:39:80:d7:cb:77:00:9d:14:3b:87:0d:24:
e8:1c:a5:3d:98:8e:bf:cb:69:7f:00:d2:de:64:8c:93:72:f5:
5c:50:6b:67:33:79:7b:19:ed:34:3c:98:8c:9b:5d:67:45:6d:
a9:46:25:c7:ff:79:d5:2e:6e:c3:76:76:ef:71:76:7d:c1:14:
e2:32:bf:20:6b:e5:da:83:a5:d4:3c:c3:20:a3:b2:f1:07:47:
76:1b:ae:7a:d9:38:14:3e:ea:c0:c1:28:29:f4:6b:bf:4d:b8:
8d:df:0a:cf:5b:e9:b8:c0:57:d5:1c:f8:56:4a:70:4c:e0:37:
d6:c7:a6:5c:60:2a:5b:6c:0a:b4:e8:d8:09:b5:fd:7f:2e:6b:
d3:f1:c9:87:2d:a2:c4:21:e8:da:ab:46:da:b0:7a:f2:4c:c1:
5d:49:6a:09:31:ed:64:07:8c:5c:6f:10:04:56:f9:04:01:77:
a9:48:e8:d6:e7:ce:aa:f4:78:a5:62:c1:4c:7c:29:38:2a:be:
cf:e8:b1:f0:0b:ac:2c:e5:67:d1:62:c3:1f:f3:a9:a5:3b:e6:
25:af:b0:2b:0b:33:77:ee:af:fa:56:14:84:34:ab:fa:c3:34:
38:ef:79:0a:cd:3f:61:d6:04:7c:58:c0:94:d5:41:b1:d7:63:
64:aa:cf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:21:56 2025 by rpki-client