Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/XAMtj0fjwIsPRZepewh25yChJ-w.roa
File: XAMtj0fjwIsPRZepewh25yChJ-w.roa (raw, json)
Hash identifier: XQkY1E8o6Rf8lh0bi+lJTRNCY4OZAPvAV3RshHO8cMg=
Subject key identifier: 5C:03:2D:8F:47:E3:C0:8B:0F:45:97:A9:7B:08:76:E7:20:A1:27:EC
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 125A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XAMtj0fjwIsPRZepewh25yChJ-w.roa
Signing time: Tue 15 Oct 2024 08:18:07 +0000
ROA not before: Tue 15 Oct 2024 08:18:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 800
IP address blocks: 175.111.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4698 (0x125a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Oct 15 08:18:07 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5C032D8F47E3C08B0F4597A97B0876E720A127EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:89:39:f8:49:89:e9:9a:f7:0e:b8:2b:02:
ed:e3:d4:46:f8:16:a4:47:8e:e3:c2:bf:5c:82:82:
80:49:27:63:20:33:be:82:82:10:de:16:f9:60:b6:
bd:4d:d3:9a:44:40:2a:85:29:0a:15:54:5d:c6:2e:
e7:a1:80:51:e4:8b:34:62:f6:23:b0:32:aa:c6:55:
80:84:d9:46:0f:65:07:c7:d0:e8:1f:81:71:32:e9:
a1:07:95:53:14:7d:ca:f2:12:7a:c2:b1:d1:b0:d7:
79:7d:be:72:b6:00:37:a2:97:7d:75:57:d0:7a:f3:
da:ea:53:7c:ac:c2:2b:06:a1:7f:5f:99:c0:2e:48:
ba:6b:36:7c:45:f2:df:88:7d:06:d0:b6:c3:65:06:
fa:56:18:6c:89:55:5b:ae:7d:44:74:ec:59:d4:53:
31:f2:a2:8e:67:57:29:23:df:3a:85:49:92:bb:4d:
9c:32:86:f3:85:4d:1f:58:22:76:78:c5:a2:a5:f9:
fd:9d:e3:ce:a9:fe:8d:9d:c9:ae:3e:e0:9a:07:9e:
95:19:fe:c5:ca:6b:ac:73:ce:23:5a:f3:63:af:3c:
cb:76:08:4f:42:12:d8:e9:b1:54:ea:f1:33:97:d8:
61:d9:89:c3:5a:a6:16:c5:73:da:63:4a:be:e7:d5:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:03:2D:8F:47:E3:C0:8B:0F:45:97:A9:7B:08:76:E7:20:A1:27:EC
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/XAMtj0fjwIsPRZepewh25yChJ-w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.239.0/24
Signature Algorithm: sha256WithRSAEncryption
05:65:03:64:8b:23:60:a7:f6:55:e3:ba:77:4d:ba:6a:cf:65:
64:fb:e5:58:bb:03:b3:d4:bf:8f:b5:79:a6:4e:05:ac:b3:63:
64:d2:48:05:34:65:ac:c2:1e:55:aa:25:5e:76:2d:0d:1f:4e:
2d:88:0e:92:5c:e0:1d:c1:5d:d4:f8:99:4c:78:02:db:19:76:
de:48:c2:fb:05:d8:de:71:53:17:c6:43:7c:d5:3c:ed:4d:bf:
b8:11:d7:81:f8:8c:65:c9:18:1e:8a:a5:61:d9:d0:76:0b:0e:
09:6e:65:93:71:97:f7:0e:99:56:2d:0e:86:89:fd:a7:44:16:
e2:05:8e:b2:ef:54:bf:e9:b0:a2:bf:29:5b:dd:44:71:19:aa:
63:98:9c:f9:7b:cc:fe:05:07:e9:ef:e4:56:bc:dc:cb:56:89:
93:c1:0e:7e:95:02:d5:4e:eb:7b:a7:3e:6b:17:10:76:25:84:
60:ab:17:9e:34:c2:74:e1:6a:cf:9a:fd:bb:61:38:06:5d:56:
a0:8a:b2:9c:e2:12:0c:4a:a8:cd:b9:b8:69:b9:9a:5d:6d:fd:
bf:58:bb:a0:a8:7a:84:ba:a8:76:da:f5:bb:81:74:f2:69:4d:
d6:f5:89:8b:21:97:d7:60:86:ef:c2:79:32:74:17:6f:49:3e:
cb:ca:98:8e
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICElowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNDEwMTUw
ODE4MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDMDMyRDhGNDdFM0Mw
OEIwRjQ1OTdBOTdCMDg3NkU3MjBBMTI3RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1N4k5+EmJ6Zr3DrgrAu3j1Eb4FqRHjuPCv1yCgoBJJ2MgM76C
ghDeFvlgtr1N05pEQCqFKQoVVF3GLuehgFHkizRi9iOwMqrGVYCE2UYPZQfH0Ogf
gXEy6aEHlVMUfcryEnrCsdGw13l9vnK2ADeil311V9B689rqU3yswisGoX9fmcAu
SLprNnxF8t+IfQbQtsNlBvpWGGyJVVuufUR07FnUUzHyoo5nVykj3zqFSZK7TZwy
hvOFTR9YInZ4xaKl+f2d486p/o2dya4+4JoHnpUZ/sXKa6xzziNa82OvPMt2CE9C
EtjpsVTq8TOX2GHZicNaphbFc9pjSr7n1cKRAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUXAMtj0fjwIsPRZepewh25yChJ+wwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9YQU10ajBmandJc1BSWmVwZXdo
MjV5Q2hKLXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr2/v
MA0GCSqGSIb3DQEBCwUAA4IBAQAFZQNkiyNgp/ZV47p3Tbpqz2Vk++VYuwOz1L+P
tXmmTgWss2Nk0kgFNGWswh5VqiVedi0NH04tiA6SXOAdwV3U+JlMeALbGXbeSML7
BdjecVMXxkN81TztTb+4EdeB+IxlyRgeiqVh2dB2Cw4JbmWTcZf3DplWLQ6Gif2n
RBbiBY6y71S/6bCivylb3URxGapjmJz5e8z+BQfp7+RWvNzLVomTwQ5+lQLVTut7
pz5rFxB2JYRgqxeeNMJ04WrPmv27YTgGXVagirKc4hIMSqjNubhpuZpdbf2/WLug
qHqEuqh22vW7gXTyaU3W9YmLIZfXYIbvwnkydBdvST7LypiO
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:37 2025 by rpki-client