Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/S5OQhuklTNl5p1vAvO6o-RI_XaE.roa
File: S5OQhuklTNl5p1vAvO6o-RI_XaE.roa (raw, json)
Hash identifier: 6tZiffAZEHjeL8O02UYVeU4wpV3rzhnevGsxPgfVdKs=
Subject key identifier: 4B:93:90:86:E9:25:4C:D9:79:A7:5B:C0:BC:EE:A8:F9:12:3F:5D:A1
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 11F7
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/S5OQhuklTNl5p1vAvO6o-RI_XaE.roa
Signing time: Mon 26 Aug 2024 05:18:07 +0000
ROA not before: Mon 26 Aug 2024 05:18:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 8068
IP address blocks: 61.220.60.200/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4599 (0x11f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 26 05:18:07 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4B939086E9254CD979A75BC0BCEEA8F9123F5DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5d:d9:db:9b:84:78:8b:5e:80:69:75:d8:ee:
d8:05:4a:8e:e5:6f:a2:40:c4:ac:ba:26:92:13:2b:
4b:96:34:3a:a2:b5:43:ac:64:59:93:5d:24:d6:6c:
32:2e:cb:b5:57:eb:d6:92:db:60:7f:20:18:1c:72:
5d:3b:ba:24:f0:33:7a:50:d0:57:3c:13:3c:fd:e2:
3d:e2:fe:cb:f8:0d:31:8a:5f:4d:26:d3:68:8f:a8:
bc:44:d1:3c:09:87:42:8a:33:9a:18:75:07:ac:70:
72:d4:e2:21:f8:b3:be:cf:1d:2c:40:f4:3f:2d:2f:
5f:da:0e:34:59:d5:bc:73:10:92:02:e1:66:bd:c7:
4f:ab:66:2c:8f:a9:79:81:82:a0:0b:1e:ac:97:e5:
86:87:d9:cc:aa:e2:5d:27:b0:a4:a5:7f:7a:e0:33:
56:e4:43:d0:21:41:9a:d4:ca:1e:b3:91:ad:25:5e:
bc:65:53:a5:d9:ab:de:df:e8:ca:8e:30:66:40:4b:
1a:e7:c8:ec:f9:9c:6e:0e:22:15:97:fb:0f:e9:c8:
80:2b:ff:53:8e:47:f2:01:45:3e:ed:dd:8b:45:e5:
95:5d:d1:ff:d4:6e:b4:87:83:a1:c2:93:57:b4:bb:
32:41:d4:ad:63:f6:3a:d7:7c:7c:5a:89:c4:fd:fa:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:93:90:86:E9:25:4C:D9:79:A7:5B:C0:BC:EE:A8:F9:12:3F:5D:A1
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/S5OQhuklTNl5p1vAvO6o-RI_XaE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.220.60.200/29
Signature Algorithm: sha256WithRSAEncryption
a5:39:22:41:8b:5c:e4:f7:ec:7b:db:68:06:f4:89:20:e5:bf:
24:f4:42:fc:58:dc:e2:8b:3d:a8:67:ea:83:b3:54:e3:67:f4:
55:ad:12:ae:d2:b3:a1:dd:e6:32:6c:b6:02:2a:18:9d:11:61:
84:ec:b7:33:57:bc:09:dc:bf:c6:3d:3c:44:db:e9:ae:9f:be:
88:f3:b8:84:67:ec:2b:6e:a4:23:3c:0a:a1:7a:f0:f8:84:62:
89:e0:55:43:32:dc:d9:8d:86:31:69:a7:d9:4f:13:b0:06:b4:
a8:4b:c3:71:a6:3c:b2:e0:f3:8d:62:47:f5:a4:b8:5a:8f:7b:
9c:ca:c5:53:bc:1d:2e:19:2a:93:6d:86:39:cc:23:92:f3:0e:
12:e2:8f:c2:78:f2:b7:5c:48:24:7b:7b:d1:f2:67:6c:df:db:
2d:ab:1a:f3:a6:7e:e6:78:f3:46:53:c8:e5:7e:54:09:f1:8a:
35:1a:26:44:ec:8c:2f:03:5f:a1:f0:cd:92:4d:2a:b3:39:1e:
ab:d9:8c:db:da:1d:c8:90:07:0f:92:66:67:fb:d5:45:34:84:
7e:03:c8:0a:5b:93:80:0c:16:b3:16:eb:56:fc:5a:fc:ba:76:
c2:7d:a7:29:ce:a2:c0:fc:08:46:2e:a8:bb:44:3e:69:7d:08:
48:14:f3:00
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICEfcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDA4MjYw
NTE4MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRCOTM5MDg2RTkyNTRD
RDk3OUE3NUJDMEJDRUVBOEY5MTIzRjVEQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDiXdnbm4R4i16AaXXY7tgFSo7lb6JAxKy6JpITK0uWNDqitUOs
ZFmTXSTWbDIuy7VX69aS22B/IBgccl07uiTwM3pQ0Fc8Ezz94j3i/sv4DTGKX00m
02iPqLxE0TwJh0KKM5oYdQescHLU4iH4s77PHSxA9D8tL1/aDjRZ1bxzEJIC4Wa9
x0+rZiyPqXmBgqALHqyX5YaH2cyq4l0nsKSlf3rgM1bkQ9AhQZrUyh6zka0lXrxl
U6XZq97f6MqOMGZASxrnyOz5nG4OIhWX+w/pyIAr/1OOR/IBRT7t3YtF5ZVd0f/U
brSHg6HCk1e0uzJB1K1j9jrXfHxaicT9+rF9AgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUS5OQhuklTNl5p1vAvO6o+RI/XaEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9TNU9RaHVrbFRObDVwMXZBdk82
by1SSV9YYUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDPdw8
yDANBgkqhkiG9w0BAQsFAAOCAQEApTkiQYtc5Pfse9toBvSJIOW/JPRC/Fjc4os9
qGfqg7NU42f0Va0SrtKzod3mMmy2AioYnRFhhOy3M1e8Cdy/xj08RNvprp++iPO4
hGfsK26kIzwKoXrw+IRiieBVQzLc2Y2GMWmn2U8TsAa0qEvDcaY8suDzjWJH9aS4
Wo97nMrFU7wdLhkqk22GOcwjkvMOEuKPwnjyt1xIJHt70fJnbN/bLasa86Z+5njz
RlPI5X5UCfGKNRomROyMLwNfofDNkk0qszkeq9mM29odyJAHD5JmZ/vVRTSEfgPI
CluTgAwWsxbrVvxa/Lp2wn2nKc6iwPwIRi6ou0Q+aX0ISBTzAA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:38:19 2025 by rpki-client