Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Pghw2OkCEYxe1pTZ-SJSeS34cOQ.roa
File: Pghw2OkCEYxe1pTZ-SJSeS34cOQ.roa (raw, json)
Hash identifier: pstoMKVC4GpbMj1rgq034KElkiq8BaQexuPIrOZzr5s=
Subject key identifier: 3E:08:70:D8:E9:02:11:8C:5E:D6:94:D9:F9:22:52:79:2D:F8:70:E4
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1220
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Pghw2OkCEYxe1pTZ-SJSeS34cOQ.roa
Signing time: Mon 26 Aug 2024 05:18:16 +0000
ROA not before: Mon 26 Aug 2024 05:18:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 220.128.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4640 (0x1220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:18:16 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3E0870D8E902118C5ED694D9F92252792DF870E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:f7:2b:2c:2b:39:7d:85:00:73:14:cd:8d:
ef:d2:01:74:d9:26:a7:00:29:72:92:0c:69:ed:6c:
9c:50:70:9e:50:76:11:1f:3f:3d:40:87:19:b4:01:
68:ef:ff:80:84:39:b0:8c:5b:ca:b8:60:86:3f:9a:
5b:bf:1d:00:2c:e0:6c:11:3e:27:4d:d1:d6:6b:72:
f1:0e:ef:02:ba:d3:3d:c9:18:f4:e1:67:05:46:05:
6d:39:c4:14:5f:77:a3:fb:8f:1a:5d:3b:b2:a8:aa:
5a:46:73:d1:17:01:30:be:3c:c3:61:a2:69:16:b7:
a1:06:e0:61:f8:d3:43:f5:9b:09:bb:6b:4d:e4:a0:
d8:17:0c:3b:7a:2e:df:7b:d2:26:5a:eb:26:26:66:
50:23:6a:63:dc:f1:16:c0:51:28:0e:40:8d:f6:61:
7d:3a:0a:f8:c9:20:b9:aa:bd:b0:e8:9a:a0:f4:3d:
fa:10:52:cc:39:b3:89:fb:44:04:6b:af:41:e3:e9:
a5:ba:81:00:c0:d7:eb:61:2b:f7:82:38:a4:8a:42:
01:73:b8:33:b4:60:bd:f3:c0:32:b7:81:6d:d3:23:
a9:b4:08:4d:9c:dd:13:72:4e:20:70:e0:35:14:6a:
97:4c:7b:f0:c3:99:c8:b2:56:0e:cc:56:d8:cc:36:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:08:70:D8:E9:02:11:8C:5E:D6:94:D9:F9:22:52:79:2D:F8:70:E4
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Pghw2OkCEYxe1pTZ-SJSeS34cOQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.79.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:0f:db:bc:f9:a6:6d:61:c9:75:49:e3:cc:4b:72:36:58:c6:
84:87:74:64:fc:44:cf:16:42:3d:d9:6a:2d:5e:91:eb:88:5e:
78:52:aa:6f:23:36:a3:e6:7c:46:12:85:2c:b1:47:ce:d9:04:
f0:c8:fa:54:ce:8a:76:bd:09:9e:f0:8d:51:60:7c:1c:eb:40:
5b:59:a2:e0:48:c8:96:98:d1:3a:35:86:92:78:0b:09:25:02:
09:75:df:c6:c8:40:99:2c:d8:be:a3:50:75:53:82:c5:90:a0:
e4:19:f2:e8:34:48:c1:54:48:25:e8:df:bd:e8:c1:97:55:70:
a3:d5:e5:9a:8f:e8:1e:a5:0d:5a:c4:83:1e:f6:9d:33:bd:ba:
18:b8:fc:f6:5d:7c:40:05:0f:67:d8:6d:97:de:c9:2f:bb:d6:
15:72:77:46:5c:ee:da:1d:35:fe:4e:ba:43:7c:84:8a:2c:ba:
25:ae:98:d3:00:8c:0d:d6:8b:0a:b3:b1:ab:5f:a4:f4:72:27:
44:38:7b:2f:91:58:b5:02:d3:fb:d4:eb:30:9d:56:d7:bc:3b:
54:25:b4:1c:17:8f:db:e2:b1:e5:1e:75:8c:25:90:d5:02:fd:
70:13:57:d7:8b:15:b9:69:f1:3f:28:20:02:91:9d:b5:99:aa:
0c:73:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:24:41 2025 by rpki-client