Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Kq5oBPzkbPhSIrh-EkbqlPYcAHo.roa
File: Kq5oBPzkbPhSIrh-EkbqlPYcAHo.roa (raw, json)
Hash identifier: qXKXKv76DfuEpz4F8bMqlFn2A6XkGmd3s8KW5M2OVjU=
Subject key identifier: 2A:AE:68:04:FC:E4:6C:F8:52:22:B8:7E:12:46:EA:94:F6:1C:00:7A
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 1945
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Kq5oBPzkbPhSIrh-EkbqlPYcAHo.roa
Signing time: Fri 22 Aug 2025 09:02:55 +0000
ROA not before: Fri 22 Aug 2025 09:02:55 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 142005
IP address blocks: 210.61.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6469 (0x1945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 22 09:02:55 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=2AAE6804FCE46CF85222B87E1246EA94F61C007A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:ac:1e:25:f2:39:95:67:7e:5d:28:d6:13:
c6:69:bb:65:fe:8f:d5:eb:9d:ba:9b:66:21:88:d1:
91:f5:d9:7a:90:36:c7:2a:2b:9b:7c:82:74:26:35:
e7:4d:3e:7c:f2:0f:7e:b6:72:a7:13:c0:1b:d1:90:
4a:c9:3f:ee:e8:f7:fd:ef:a9:21:cd:e0:84:b3:0a:
76:cc:e7:56:28:c8:07:fb:d1:0e:a3:3b:da:c7:dd:
6a:25:b7:3c:85:31:98:72:f0:8c:0e:3f:3b:d4:02:
a9:82:9d:08:e7:55:01:6b:9d:37:df:dc:a2:19:05:
08:d4:a7:17:3c:38:f2:7e:ea:56:1d:d2:83:d0:a0:
7f:7d:09:d6:34:ad:7e:11:3a:24:17:af:04:4e:6f:
bc:e1:bb:91:f7:76:48:e6:68:71:67:a6:1e:68:13:
55:6b:31:42:d3:62:8a:34:ba:cc:df:32:7f:62:9e:
34:5d:2f:17:4b:81:cb:10:1e:ea:8f:52:f9:6a:01:
12:6e:4f:09:5b:06:7e:91:18:cb:39:82:90:d2:1b:
c9:4f:29:71:8f:3a:26:e5:02:40:c3:49:ae:dc:0c:
14:d4:30:7f:9b:dd:af:21:30:65:7a:1b:d7:24:15:
c5:d8:31:ef:08:ae:e7:a9:1c:06:b7:db:d8:13:c1:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AE:68:04:FC:E4:6C:F8:52:22:B8:7E:12:46:EA:94:F6:1C:00:7A
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Kq5oBPzkbPhSIrh-EkbqlPYcAHo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.107.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:01:6d:fc:4b:bb:4c:0e:16:99:fc:02:d5:a9:07:47:4c:b5:
50:2d:df:85:ce:b7:d4:b5:78:1d:48:8f:f8:3c:35:5f:f9:93:
86:57:e8:0c:bf:2d:04:2a:6a:26:74:17:0d:0f:cd:49:1e:d2:
be:ed:e7:46:03:57:df:7f:c0:e2:b9:fa:17:4a:df:95:86:39:
90:6c:bb:f7:4f:f2:14:6f:0d:a5:fa:66:0f:f5:ed:df:46:78:
e5:7e:3e:7a:f3:11:30:95:0d:33:34:88:35:1f:6b:0c:29:02:
2a:0c:6d:41:03:54:b1:ba:2e:37:dd:91:d1:05:fb:9e:52:fe:
32:04:c9:4e:a4:5a:17:a4:f1:6c:14:ae:67:29:48:e0:58:b1:
4f:10:97:a9:a7:cd:15:4a:23:ea:87:cb:90:e7:cd:55:cb:7d:
a9:13:f9:3d:f9:9a:c5:fa:97:cb:44:bc:14:47:c2:72:91:46:
1b:a6:8b:75:8e:52:ea:8c:e5:04:ae:ee:e2:33:5e:05:b2:09:
c2:a7:de:6e:6e:13:29:b5:04:ce:0d:fa:12:1c:7a:fd:03:a2:
d9:22:ca:28:89:e5:23:14:b6:40:86:af:78:a0:c6:09:4e:93:
73:8a:f2:b2:82:cd:19:57:50:8a:bf:ae:25:01:b4:b5:ea:99:
75:7e:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:48 2025 by rpki-client