Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/M7dleRtei3tp0vhdX3pJ1xahlQE.roa
File: M7dleRtei3tp0vhdX3pJ1xahlQE.roa (raw, json)
Hash identifier: llRHyUuN2Yf0BFIRKtbSzw5u0oXCUUkkc96WwvWQ4Nw=
Subject key identifier: 33:B7:65:79:1B:5E:8B:7B:69:D2:F8:5D:5F:7A:49:D7:16:A1:95:01
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 194C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/M7dleRtei3tp0vhdX3pJ1xahlQE.roa
Signing time: Fri 22 Aug 2025 09:02:57 +0000
ROA not before: Fri 22 Aug 2025 09:02:57 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 142005
IP address blocks: 210.242.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6476 (0x194c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Aug 22 09:02:57 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=33B765791B5E8B7B69D2F85D5F7A49D716A19501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d1:d5:6a:b1:cc:a3:d8:27:d4:5b:9e:bb:b4:
67:e7:59:66:f7:ad:45:c3:22:e0:7a:79:4b:4a:d4:
14:8c:99:42:1a:2d:5c:c8:e1:1e:88:84:40:8a:04:
03:2d:7a:09:a2:8c:22:fb:f1:c8:c8:00:14:96:2f:
61:1c:21:62:4c:a9:99:86:12:87:11:8f:d0:5b:fe:
37:0f:d6:7f:82:61:dd:44:71:95:29:77:2b:dc:ed:
80:08:a8:59:93:db:00:06:3f:e9:38:49:bc:c3:56:
6f:b1:4c:09:b1:5c:2a:dd:3f:e7:ab:c9:6c:ff:cc:
2d:8f:f5:0c:67:5b:d9:3b:4a:c3:f3:39:89:15:c1:
2f:11:b7:2b:e9:39:78:d5:90:cf:73:de:00:1f:35:
5a:af:8e:e9:fd:14:93:a2:b1:50:1a:15:08:86:ce:
ef:3c:cf:b4:d1:cf:98:28:de:5b:c8:6f:3d:76:b1:
b5:86:c4:d4:ee:51:3a:f9:5d:ce:1e:d5:e9:11:c5:
41:32:0e:fa:5b:ab:6b:83:e7:36:11:c8:a8:6a:03:
4b:73:1d:9b:38:b5:10:bd:b2:ac:53:24:a9:e3:aa:
f2:b6:fb:8b:32:8f:82:ee:c4:05:1e:9a:be:e5:0b:
86:1a:35:29:63:57:dd:a9:66:b3:b0:af:6a:f0:71:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B7:65:79:1B:5E:8B:7B:69:D2:F8:5D:5F:7A:49:D7:16:A1:95:01
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/M7dleRtei3tp0vhdX3pJ1xahlQE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.118.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ea:95:a9:97:9a:69:f9:0f:f6:a3:87:6a:e7:5b:c3:f6:fd:
99:fd:72:f0:1e:bb:d7:82:fd:c5:62:9b:f7:c6:a8:aa:13:d2:
82:5e:09:54:d4:e9:d1:24:89:5f:f9:65:67:f7:d0:49:e0:1c:
f8:21:75:0c:90:76:67:0a:fe:2a:81:e1:de:08:f4:ad:0d:7c:
48:53:55:35:a0:7d:7a:ad:df:c0:e2:d8:30:71:29:de:3b:cd:
ce:6b:e7:cc:4c:e5:2e:8f:99:66:c5:9c:ce:a4:bc:c9:39:59:
51:ce:d8:68:27:cf:6b:1e:f8:37:11:8c:ce:8d:d2:e5:71:14:
2e:02:61:59:77:43:f4:10:98:06:60:93:66:fd:9c:83:4d:82:
0b:dc:94:1f:de:20:dd:10:35:98:24:ac:29:b4:0c:5a:da:ae:
2e:47:67:54:3f:65:78:f6:69:f7:aa:05:ce:a6:ec:08:2f:6a:
2e:19:e4:0b:17:14:20:d9:c8:8b:32:2f:8f:7c:98:94:b4:9a:
b2:cc:ca:57:d0:c3:4d:4f:79:9b:f8:89:b2:c0:6d:ed:93:1c:
f2:01:39:9d:6a:07:42:e0:bc:0b:17:00:66:ce:b3:b4:aa:2e:
8e:95:f7:da:44:6f:be:7f:bc:ae:7b:ee:fe:86:9e:72:a5:04:
5a:45:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:50:08 2025 by rpki-client