Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3C8RRnScUftHOYK0aLgIKc3wbi4.roa
File: 3C8RRnScUftHOYK0aLgIKc3wbi4.roa (raw, json)
Hash identifier: J9XMgBXRaCqkPylV83u7LSMBDqOF5LYA8kp11K1TbUU=
Subject key identifier: DC:2F:11:46:74:9C:51:FB:47:39:82:B4:68:B8:08:29:CD:F0:6E:2E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34D3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3C8RRnScUftHOYK0aLgIKc3wbi4.roa
Signing time: Mon 10 Feb 2025 13:52:43 +0000
ROA not before: Mon 10 Feb 2025 13:52:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13523 (0x34d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:43 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DC2F1146749C51FB473982B468B80829CDF06E2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:24:57:fa:15:29:3b:c1:ef:c5:57:b3:f6:
f5:eb:90:85:74:00:26:cd:94:af:03:ac:f4:b4:89:
16:14:0e:7f:07:8c:19:d6:25:0f:0d:f4:8a:e7:8b:
74:09:8d:6d:f5:2f:6c:23:5a:d5:e5:b3:b8:d8:11:
0f:90:ec:e4:ec:ac:da:74:df:61:8e:3a:3a:d6:7b:
0b:b7:8a:ed:43:fe:92:07:9f:7b:76:43:29:0b:9e:
d1:89:f5:a5:83:86:7c:ab:fb:eb:ec:0f:8f:dd:0b:
6f:ea:60:fe:ce:a1:2e:5a:98:fc:61:19:ce:3a:ef:
e9:9a:99:21:21:3b:98:13:18:25:11:60:c9:82:71:
3e:bb:3a:77:03:87:63:6b:ed:08:1f:41:a5:e5:c5:
a7:05:ab:98:20:60:c6:80:cd:8a:b6:f4:27:bb:b2:
b2:05:4f:f3:3e:56:9e:4a:d7:32:7e:38:5f:e9:91:
79:77:13:db:bf:cb:f2:7f:48:b8:81:55:ff:10:ad:
0f:32:cc:20:39:5f:72:5c:86:48:44:85:0a:3a:75:
8a:25:f7:bc:76:14:45:97:27:c8:bd:90:41:75:be:
e6:c9:b0:48:a9:15:0c:dc:44:3d:a5:d5:6e:f9:4f:
39:86:a8:1a:bb:01:1a:2f:d7:a6:a6:90:5e:2d:f6:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2F:11:46:74:9C:51:FB:47:39:82:B4:68:B8:08:29:CD:F0:6E:2E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3C8RRnScUftHOYK0aLgIKc3wbi4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.128.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:1d:0a:38:94:67:79:8c:76:8d:91:d0:13:2f:5f:80:b9:a1:
72:5e:31:d1:ef:49:44:f9:00:82:34:e4:55:a0:68:2d:e3:60:
ba:e8:1c:aa:1d:25:f6:0e:ba:58:46:ac:a0:98:3d:c2:7e:4f:
79:fc:3d:87:d7:1e:1d:e5:14:e3:ff:31:ee:a7:c3:1d:08:5a:
28:d6:37:18:de:11:ab:0d:97:e9:07:f3:f2:23:d8:93:11:37:
06:98:05:bd:54:e5:61:f8:90:66:c5:be:92:16:15:8d:8c:c3:
20:a8:51:94:de:f0:ae:58:62:88:21:25:fb:81:26:dd:b8:84:
7b:60:f7:74:4e:16:5d:86:4f:11:a6:07:2d:41:68:00:cd:81:
e7:93:ca:f0:b7:a7:1c:b6:df:23:8e:ba:4b:ef:ca:5a:28:7e:
ae:f6:bc:7a:5d:ff:09:20:26:4e:01:e0:bd:c8:48:fc:ae:7b:
fc:92:0d:36:21:b8:82:72:91:3a:52:66:33:cc:c8:8c:26:8d:
a6:18:26:41:32:5b:70:17:f4:e9:ae:4f:81:75:91:eb:4e:a7:
9e:dc:52:45:63:93:b4:be:b8:f8:50:3d:20:d8:e0:10:84:9e:
5c:f6:e0:f8:ff:07:ef:e0:14:27:2a:a8:a2:63:54:5f:15:74:
5f:b5:5b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:57:07 2025 by rpki-client