Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/To33sfaYvdkCTfeD-qtJPjMJn7M.roa
File: To33sfaYvdkCTfeD-qtJPjMJn7M.roa (raw, json)
Hash identifier: nxEiFwXoG/oJmXk9IkdtKYASf15Ug9baBRtmGzygHzA=
Subject key identifier: 4E:8D:F7:B1:F6:98:BD:D9:02:4D:F7:83:FA:AB:49:3E:33:09:9F:B3
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 174E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/To33sfaYvdkCTfeD-qtJPjMJn7M.roa
Signing time: Wed 12 Feb 2025 01:36:34 +0000
ROA not before: Wed 12 Feb 2025 01:36:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 220.128.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5966 (0x174e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:34 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4E8DF7B1F698BDD9024DF783FAAB493E33099FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:93:e3:44:41:cd:15:0a:5c:25:c2:5f:bc:
1c:13:46:e8:f3:55:b2:35:1d:7b:69:8d:bd:28:41:
03:39:7e:3a:45:04:6e:f0:61:ba:b2:ab:b8:4e:36:
d5:f9:29:ca:59:32:84:f6:d2:a0:86:8e:49:54:54:
37:47:e7:4a:79:a0:90:a1:90:92:35:70:5e:fb:eb:
b5:ad:13:05:1a:7f:fd:dd:56:73:8e:0a:b2:de:cc:
16:26:c6:e4:f4:f6:7b:e3:29:05:86:a7:3f:44:0c:
e6:12:cb:d9:40:6c:5e:4b:a2:77:2f:05:65:34:7a:
78:e1:a5:07:ab:9a:30:00:3c:97:b9:e0:4e:23:1d:
24:73:4c:06:49:c5:69:a8:5b:75:dd:a2:f6:35:c8:
98:c0:ed:43:6c:4e:98:2e:9b:7e:9b:86:a8:8c:a6:
3d:a6:07:6d:8d:3f:40:2a:a1:5b:65:86:35:f1:c7:
4a:53:ea:af:37:79:20:ba:90:79:c0:53:1a:00:3b:
57:af:b0:5b:dd:c7:ef:18:c6:ed:ff:61:b0:0a:01:
b0:04:33:8b:82:ef:61:00:63:83:16:65:c4:b9:c0:
1c:07:0e:e1:84:f7:46:33:86:e3:36:ee:e2:9c:cc:
42:c3:a2:35:5d:40:ef:58:d8:44:b3:70:dd:9c:18:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8D:F7:B1:F6:98:BD:D9:02:4D:F7:83:FA:AB:49:3E:33:09:9F:B3
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/To33sfaYvdkCTfeD-qtJPjMJn7M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.128.0/17
Signature Algorithm: sha256WithRSAEncryption
d0:0f:07:b1:39:c8:9c:65:fe:98:7d:9c:18:fb:cb:3c:30:41:
2f:8b:87:30:f7:09:eb:10:3a:42:55:2a:dc:54:5c:b9:2e:da:
16:27:3d:f8:36:48:f4:02:22:cc:e6:4c:39:bd:23:ee:41:cc:
f3:0e:51:dc:ab:9e:73:95:d6:a2:61:18:d2:b5:62:91:46:97:
2d:0c:0a:cb:e9:47:14:8f:25:ca:b0:44:cb:7a:5f:be:29:1b:
b8:3d:f0:22:ef:54:67:73:c2:09:4b:ec:ed:ee:9c:be:80:1b:
31:34:df:d7:65:11:a5:d7:cc:b6:05:ba:fb:0d:bd:dc:2f:c0:
69:0d:12:65:b6:8e:57:12:9e:a4:52:27:0d:a9:69:56:b1:17:
d6:6e:41:8c:d9:0e:eb:27:38:bd:bc:45:75:52:cd:81:47:94:
07:ae:f2:84:74:a2:7d:07:5d:e2:58:d1:9d:e2:9d:c5:09:61:
75:b1:2a:e5:d7:6e:91:53:cf:53:4c:81:0f:e2:47:d0:10:df:
3d:0b:e1:37:e8:e1:af:3f:10:45:4b:be:a6:b5:51:58:9b:fc:
c8:04:50:be:fd:9d:a8:02:a6:61:f5:fd:19:ef:f4:f5:b4:df:
c1:7e:00:11:9e:8b:54:ba:fe:2f:db:a7:66:b7:88:63:cf:c0:
82:f0:85:2b
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICF04wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw
MTM2MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRFOERGN0IxRjY5OEJE
RDkwMjRERjc4M0ZBQUI0OTNFMzMwOTlGQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCl2pPjREHNFQpcJcJfvBwTRujzVbI1HXtpjb0oQQM5fjpFBG7w
Ybqyq7hONtX5KcpZMoT20qCGjklUVDdH50p5oJChkJI1cF7767WtEwUaf/3dVnOO
CrLezBYmxuT09nvjKQWGpz9EDOYSy9lAbF5LoncvBWU0enjhpQermjAAPJe54E4j
HSRzTAZJxWmoW3XdovY1yJjA7UNsTpgum36bhqiMpj2mB22NP0AqoVtlhjXxx0pT
6q83eSC6kHnAUxoAO1evsFvdx+8Yxu3/YbAKAbAEM4uC72EAY4MWZcS5wBwHDuGE
90YzhuM27uKczELDojVdQO9Y2ESzcN2cGLSpAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUTo33sfaYvdkCTfeD+qtJPjMJn7MwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9UbzMzc2ZhWXZka0NUZmVELXF0
SlBqTUpuN00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH3ICA
MA0GCSqGSIb3DQEBCwUAA4IBAQDQDwexOcicZf6YfZwY+8s8MEEvi4cw9wnrEDpC
VSrcVFy5LtoWJz34Nkj0AiLM5kw5vSPuQczzDlHcq55zldaiYRjStWKRRpctDArL
6UcUjyXKsETLel++KRu4PfAi71Rnc8IJS+zt7py+gBsxNN/XZRGl18y2Bbr7Db3c
L8BpDRJlto5XEp6kUicNqWlWsRfWbkGM2Q7rJzi9vEV1Us2BR5QHrvKEdKJ9B13i
WNGd4p3FCWF1sSrl126RU89TTIEP4kfQEN89C+E36OGvPxBFS76mtVFYm/zIBFC+
/Z2oAqZh9f0Z7/T1tN/BfgARnotUuv4v26dmt4hjz8CC8IUr
-----END CERTIFICATE-----
Generated at Tue May 6 03:04:00 2025 by rpki-client