Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/AsnzKdEYsCxVvgYWW5g_tLry2B4.roa
File: AsnzKdEYsCxVvgYWW5g_tLry2B4.roa (raw, json)
Hash identifier: wsOCE3uzZH+mmMls6H0kc0eGyCViMwOq9A2HnfvfxCI=
Subject key identifier: 02:C9:F3:29:D1:18:B0:2C:55:BE:06:16:5B:98:3F:B4:BA:F2:D8:1E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1787
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AsnzKdEYsCxVvgYWW5g_tLry2B4.roa
Signing time: Wed 12 Feb 2025 01:36:47 +0000
ROA not before: Wed 12 Feb 2025 01:36:47 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 33717
IP address blocks: 220.128.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6023 (0x1787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:47 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=02C9F329D118B02C55BE06165B983FB4BAF2D81E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:06:ff:18:2a:e2:9f:1d:56:f7:f5:b9:82:fc:
db:83:9b:5c:57:15:8b:12:ea:31:41:a9:48:89:80:
e6:a9:e2:2e:cd:1d:9f:82:cd:0a:20:c3:ec:a2:8c:
f4:2e:1d:ed:d1:96:27:06:a7:82:fb:78:25:d7:30:
0b:84:7c:a9:74:a2:2c:26:9f:3e:fc:91:8a:ed:56:
da:3a:84:5d:f2:eb:7c:0f:1a:7a:a4:29:1f:cc:88:
be:82:4f:44:d3:0f:fe:d4:51:02:ed:98:fb:22:cf:
78:cf:80:b6:fe:2e:d7:1e:71:c2:1f:9c:b2:b3:37:
86:92:7e:ba:e9:fa:eb:5e:eb:e0:e6:ba:7e:a1:b2:
b2:be:f7:41:29:7c:dd:0c:be:2e:60:e0:80:35:d2:
12:8c:b4:a0:15:c0:01:d5:41:26:91:9f:5f:01:0f:
15:ab:40:ab:0a:f8:df:05:76:d7:4e:13:e8:20:9b:
5a:00:15:f2:77:26:48:d6:a2:33:be:7b:c8:75:77:
03:32:1f:b6:6b:c6:29:5e:1c:76:30:e0:b7:0d:89:
2e:72:01:81:98:2b:a8:89:67:b2:b8:a4:d0:49:e0:
e1:42:9f:a4:1d:75:6c:24:37:02:ec:17:6d:5a:bf:
24:5e:64:c1:05:c5:f8:9a:49:ba:b7:3f:bc:7b:8d:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C9:F3:29:D1:18:B0:2C:55:BE:06:16:5B:98:3F:B4:BA:F2:D8:1E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AsnzKdEYsCxVvgYWW5g_tLry2B4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.55.0/24
Signature Algorithm: sha256WithRSAEncryption
93:4d:7b:85:f6:34:3c:96:58:1a:f2:4f:9c:b7:39:b7:f6:a8:
45:b7:86:7a:c3:55:1f:6d:3f:ec:5a:1d:35:5a:53:92:f3:e5:
45:1c:d6:34:f6:60:f9:bc:e3:84:7d:6e:09:72:81:00:c5:af:
0b:c4:c0:88:d9:21:73:54:1e:06:ac:54:d9:bc:71:89:97:ea:
f6:d4:15:27:43:79:94:a4:d3:cd:c6:a5:e9:c2:7f:a5:2f:c0:
3c:46:12:d6:51:28:27:5b:bd:ac:d1:37:17:18:1b:bf:46:91:
09:26:4e:7a:12:4e:fb:bf:79:8e:3d:38:2d:18:5b:fa:6e:28:
fb:47:60:82:86:df:c6:a7:34:7d:b3:ee:ce:e5:f5:0f:51:de:
11:a3:c1:3e:20:df:98:b8:d3:ab:2d:b2:91:e5:44:b2:8f:39:
c9:f1:cc:13:e0:ef:e9:12:62:ca:7d:14:b1:40:bf:3c:e5:e6:
f7:b6:f1:9c:6d:9c:73:2a:85:2e:de:80:27:18:70:dd:c5:eb:
66:6c:05:62:b4:ad:e4:02:f9:5c:18:bb:5d:66:f6:82:47:bb:
02:e1:77:6c:b7:ea:30:d7:4a:83:23:7f:15:c0:38:6e:5b:4f:
11:17:aa:9e:4e:30:6f:d9:c0:55:65:38:8e:7a:9e:d0:36:2f:
4c:0a:73:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:09:33 2025 by rpki-client