Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/pcK_vB5nFbF2vWh-y_LPOPOAo6w.roa
File: pcK_vB5nFbF2vWh-y_LPOPOAo6w.roa (raw, json)
Hash identifier: f4irJ1MzmgpDjNjIRVHIjD2CFXT3FBsz6T+GDxYQAA8=
Subject key identifier: A5:C2:BF:BC:1E:67:15:B1:76:BD:68:7E:CB:F2:CF:38:F3:80:A3:AC
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 14F7
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pcK_vB5nFbF2vWh-y_LPOPOAo6w.roa
Signing time: Tue 11 Feb 2025 23:44:12 +0000
ROA not before: Tue 11 Feb 2025 23:44:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 54994
IP address blocks: 61.221.181.0/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5367 (0x14f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 11 23:44:12 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A5C2BFBC1E6715B176BD687ECBF2CF38F380A3AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:c0:2d:a8:66:8a:d9:fb:99:75:b9:46:38:
f5:45:92:b4:38:32:19:e4:75:26:f7:3d:a6:83:62:
d5:14:d5:63:05:5e:07:05:8c:a7:48:da:59:87:25:
f7:ee:fd:ae:73:b4:77:c7:f6:6c:4b:d9:f6:e9:fb:
9b:3e:df:95:62:d2:65:97:0d:d7:bb:d1:21:f4:cc:
4f:65:2f:41:be:28:cd:33:1d:71:84:a8:72:a3:39:
8d:de:be:89:f0:e2:a1:19:06:3c:58:a6:81:24:48:
55:95:0b:b9:37:5c:96:69:29:d5:4a:f2:3c:30:90:
78:24:02:16:be:1a:0c:d2:69:4f:80:08:51:94:a1:
4b:bd:bf:63:00:56:bd:ce:83:26:26:2b:8e:73:05:
91:5e:9e:f2:69:e3:08:1b:b4:70:fa:96:98:a1:e6:
fe:7e:7d:8d:21:53:88:08:37:7a:14:e7:63:61:82:
a5:43:9a:6e:82:ec:28:47:7b:94:ee:c1:72:0b:d5:
2f:3e:b9:ee:f8:ff:75:5b:60:13:ca:5e:58:0c:37:
10:21:fb:1b:f9:8b:0d:7d:3b:4e:ce:55:7b:ef:6d:
9c:e2:18:09:1f:ba:bb:84:a7:0e:2d:23:a8:23:33:
98:76:e0:ec:5b:62:b9:b6:6b:d2:cf:4b:ab:d1:4d:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C2:BF:BC:1E:67:15:B1:76:BD:68:7E:CB:F2:CF:38:F3:80:A3:AC
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pcK_vB5nFbF2vWh-y_LPOPOAo6w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.221.181.0/26
Signature Algorithm: sha256WithRSAEncryption
be:d9:01:f8:89:27:4b:62:d1:25:e7:4e:1f:41:ea:21:d4:2f:
72:a2:01:54:c8:ff:3f:54:d1:9b:9d:e2:c3:d2:40:20:8e:e4:
d8:4a:0b:12:6e:83:90:f7:23:98:b4:1d:ab:b3:07:a6:89:d4:
95:59:2f:ea:3d:2a:92:e8:24:ec:9b:4f:4d:c1:47:87:75:a9:
cf:b3:88:3b:ca:81:25:e8:78:a8:63:65:b1:ed:f3:39:d8:f3:
a8:d5:07:ad:0a:5f:63:99:a2:2b:e6:2d:7b:89:fe:01:81:6d:
44:06:11:9b:08:96:57:8a:12:d3:c9:d5:66:25:ab:e0:68:89:
53:ef:9d:c2:52:e5:7c:94:1a:d9:9e:f9:08:27:45:79:f4:1e:
74:6c:d1:a2:68:e1:67:3e:3b:06:1d:49:dc:c2:a5:ba:a4:8e:
55:78:3e:9f:4c:c3:79:7f:af:10:8a:e0:dd:c4:ae:93:01:3d:
18:fd:c4:b0:c3:70:17:31:f3:52:a8:06:0e:54:f0:04:7c:1c:
47:24:0c:18:2f:30:50:d9:91:0b:13:9c:2a:b1:cf:ae:c3:86:
de:52:bb:c9:d7:a6:13:49:65:ec:b6:f8:23:92:21:95:14:0a:
ee:13:e8:24:17:44:87:00:a9:0f:15:cd:60:fc:0c:1d:5b:99:
4d:e8:3e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:00:16 2025 by rpki-client