Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IMRUFs5bwkzGA4skI1WBILoczb8.roa
File: IMRUFs5bwkzGA4skI1WBILoczb8.roa (raw, json)
Hash identifier: 5Ng/s6krr3EyHEIZm8UH3JCD7Kvz9C7Bmv75gmAnwWc=
Subject key identifier: 20:C4:54:16:CE:5B:C2:4C:C6:03:8B:24:23:55:81:20:BA:1C:CD:BF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 30D3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IMRUFs5bwkzGA4skI1WBILoczb8.roa
Signing time: Mon 26 Aug 2024 05:29:51 +0000
ROA not before: Mon 26 Aug 2024 05:29:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18429
IP address blocks: 118.232.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12499 (0x30d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:51 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=20C45416CE5BC24CC6038B2423558120BA1CCDBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:48:10:45:61:28:69:9a:20:77:76:9d:0b:
4a:40:31:6c:d2:22:94:75:04:3e:5f:92:b0:6e:f3:
13:69:94:dc:29:45:f0:4d:9a:7b:cb:36:65:56:42:
bd:f6:87:41:c0:1a:59:72:05:bb:77:a7:1e:ba:3c:
03:fe:01:3a:9f:e1:72:61:1e:25:06:ae:74:dd:75:
60:0b:6e:94:b6:c5:dc:f2:bf:41:09:0d:9a:40:33:
2c:6d:a8:a6:de:f2:7c:5a:b3:25:f9:27:ec:f1:ce:
2f:b6:61:91:33:fb:99:cb:61:b5:63:3d:12:59:d8:
66:4f:87:f1:7e:c7:c3:f1:bb:48:74:44:f9:2f:74:
51:d7:67:74:45:0f:d8:9d:61:75:cd:b5:6b:c9:ac:
38:14:06:48:e4:ef:5f:6d:23:54:ea:25:f3:a8:65:
1c:0c:7b:50:a8:2e:22:76:6d:f7:96:08:46:a2:8d:
a2:d6:a0:15:3f:41:3f:ba:57:13:83:71:80:a5:88:
d3:f1:07:d0:9b:7c:09:42:6b:88:68:99:2f:ad:5e:
57:36:85:c5:36:8b:20:ed:3d:0a:19:2f:75:ec:c0:
fa:d0:a6:e8:53:1b:ce:c1:f2:15:dc:ea:27:86:ca:
dc:19:80:b8:99:34:29:8b:c3:92:df:97:40:e5:65:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C4:54:16:CE:5B:C2:4C:C6:03:8B:24:23:55:81:20:BA:1C:CD:BF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IMRUFs5bwkzGA4skI1WBILoczb8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.199.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ca:e2:cb:a8:9d:fa:42:8f:8e:98:37:87:cf:86:62:8d:d3:
65:e9:78:97:dc:16:96:f1:03:1b:f6:ef:67:e4:28:94:f8:ca:
95:83:38:ae:51:4a:38:6e:6c:8f:f1:c4:05:44:d6:57:a9:e0:
9b:c6:46:e5:41:76:15:55:17:a7:d5:e2:17:c6:90:e8:2f:c3:
f3:ff:2d:67:89:dc:16:08:96:78:86:4e:ab:78:32:3c:9c:7a:
7b:ff:c5:de:67:16:17:80:ae:cf:ce:28:5a:85:5b:6f:50:e0:
aa:1c:ff:b9:c5:ab:14:a7:c2:ac:34:34:8d:a2:d0:13:bd:3b:
42:bc:77:ca:2b:bc:d6:93:c5:31:da:48:82:37:77:b7:7d:98:
db:90:87:f2:7c:9a:47:8f:42:e2:6d:90:e1:45:04:92:0b:53:
bc:6f:32:1c:85:e5:e6:bc:3d:b2:71:55:95:f2:96:80:28:c8:
7d:be:92:ae:3c:40:07:42:9f:60:3b:13:df:98:19:91:51:14:
4e:bd:26:62:79:5b:92:29:6b:7f:2f:dc:81:ef:15:0b:1c:ca:
3d:16:c1:3b:99:0b:17:4f:ce:b7:77:af:da:fe:df:fd:48:b5:
7b:90:f0:f3:9f:10:04:97:12:b9:05:56:53:88:98:cb:89:28:
17:fd:36:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:57:06 2025 by rpki-client