Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/RlFo3dRtRNMgoq5Pm1MknKhskQ4.roa
File: RlFo3dRtRNMgoq5Pm1MknKhskQ4.roa (raw, json)
Hash identifier: zW3xdB79UPX94+kTkJXIAnMrLfGUlr0fjvgJQFQ+Ess=
Subject key identifier: 46:51:68:DD:D4:6D:44:D3:20:A2:AE:4F:9B:53:24:9C:A8:6C:91:0E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11C2
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RlFo3dRtRNMgoq5Pm1MknKhskQ4.roa
Signing time: Mon 26 Aug 2024 05:17:54 +0000
ROA not before: Mon 26 Aug 2024 05:17:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 203.75.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4546 (0x11c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:17:54 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=465168DDD46D44D320A2AE4F9B53249CA86C910E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:34:3f:ab:21:f4:15:1d:8a:38:d8:5d:7f:ab:
44:59:ab:02:05:f4:cd:61:e8:a9:0f:e1:49:18:79:
08:46:76:cf:f5:56:3b:e1:86:f2:07:88:41:31:03:
45:12:8a:98:44:4c:63:de:46:f8:cd:09:c8:03:b1:
43:6f:b4:06:83:7b:f0:63:d4:e9:5d:02:9c:8b:61:
38:cc:b3:ab:98:4b:58:d2:86:8f:ca:b3:8a:79:19:
10:04:b5:68:bf:ff:c3:6d:5c:d8:c2:d7:57:56:a3:
b4:38:ea:35:e3:0b:9b:bb:5f:bd:01:08:5a:9a:71:
71:d0:16:6c:c1:c4:e5:6f:77:0b:ab:86:ed:a5:98:
be:f6:78:5e:16:22:b4:89:19:6f:07:32:36:80:8e:
fe:6f:03:69:6a:d1:04:04:8d:7d:ea:3f:40:43:c4:
45:f2:92:6f:49:0e:8a:43:86:6a:fc:f0:c4:4c:76:
b7:10:eb:0a:cf:97:da:45:77:cd:e0:92:1f:47:85:
66:92:39:09:07:a7:b2:a5:a8:65:ab:39:a4:05:fb:
35:e8:05:1b:c2:74:07:2d:e5:90:9f:23:36:8d:d0:
38:29:f7:42:c0:39:ce:81:f2:b4:39:7f:b2:32:d9:
5f:e5:cb:9b:29:b3:42:17:93:57:a1:a1:76:b6:c2:
74:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:51:68:DD:D4:6D:44:D3:20:A2:AE:4F:9B:53:24:9C:A8:6C:91:0E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RlFo3dRtRNMgoq5Pm1MknKhskQ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:4e:3d:c0:f2:8c:a6:ae:14:c2:2a:d9:6c:ca:83:25:b0:10:
0c:c8:e9:39:da:2a:cc:61:95:ca:ed:a5:3a:8c:02:6b:b1:88:
17:50:df:a6:31:fe:50:e1:ce:4e:34:f1:a4:00:de:51:f7:82:
4d:71:2d:18:06:c2:f3:ee:11:b7:01:51:f7:90:3d:a2:e4:b9:
b5:a3:df:89:a0:14:95:d5:9d:31:da:fa:df:a8:df:5c:de:3c:
98:e7:9a:3b:00:a1:45:d2:c5:e4:40:c8:ed:b7:bf:90:5a:83:
5b:52:b3:dd:45:4d:74:bb:d4:ac:07:e2:28:4d:b7:9e:87:00:
64:3c:c8:00:85:27:07:ed:2b:4c:19:77:8d:37:93:01:9d:11:
d5:67:d6:85:af:d6:a7:79:54:dc:cc:59:bc:e3:7c:75:88:4d:
02:fd:20:2e:65:3b:f1:c9:70:23:d2:c2:e7:36:7f:5e:33:70:
55:0c:b3:64:f0:ec:4a:e3:6a:9a:2a:86:64:64:ba:84:da:59:
f8:41:b6:9f:28:d8:3a:a3:8e:0f:54:2c:95:ac:34:83:a6:33:
e8:25:d9:dc:e6:fb:9e:ca:3c:08:23:23:8b:69:3f:0e:88:2d:
22:eb:19:d1:28:56:4a:bd:77:72:05:e1:53:ef:69:34:38:99:
5b:fc:5c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:26:21 2025 by rpki-client