Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MvtCrGcO3i7SuLRIsBSXRAi3aUI.roa
File: MvtCrGcO3i7SuLRIsBSXRAi3aUI.roa (raw, json)
Hash identifier: 8HiLG4q9uKOlW1+q72EezuyaMn4YofE9Z8O7WAIpGfg=
Subject key identifier: 32:FB:42:AC:67:0E:DE:2E:D2:B8:B4:48:B0:14:97:44:08:B7:69:42
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 317C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MvtCrGcO3i7SuLRIsBSXRAi3aUI.roa
Signing time: Mon 26 Aug 2024 05:30:30 +0000
ROA not before: Mon 26 Aug 2024 05:30:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12668 (0x317c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:30 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=32FB42AC670EDE2ED2B8B448B014974408B76942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:25:7e:a2:d6:44:32:10:1d:88:e9:2d:e5:
87:56:0d:e0:99:01:89:c6:74:93:b0:ac:85:d0:23:
df:02:81:47:03:11:f6:1f:5a:87:92:7a:99:37:c2:
20:51:8f:71:ff:5d:86:69:2f:0a:78:d6:3a:c8:e1:
dd:7e:04:65:ee:62:e9:61:94:6a:df:ad:0e:96:21:
c4:83:54:5b:32:9f:41:c7:03:d5:c6:42:03:75:6c:
60:3b:94:81:c9:10:87:d7:5a:ac:dd:04:46:92:fb:
e3:79:4c:55:89:0e:57:b8:81:d4:fa:b3:3c:b4:af:
fc:b7:ca:b2:1e:c7:65:16:3d:9e:9e:0d:fe:0c:32:
72:f4:e5:60:62:de:76:de:c2:19:d2:9d:5b:c8:af:
e6:d8:b2:20:ff:08:db:96:af:fa:99:1c:3c:e5:c6:
2f:93:e5:a6:8e:28:20:4a:8b:82:e2:3c:33:a4:ee:
d1:e7:13:a1:eb:ac:ac:8c:76:fc:ab:18:fe:f5:47:
a3:8f:34:58:62:83:5e:18:bf:21:34:63:15:ee:61:
ab:ff:62:3e:35:6f:0f:3d:6c:61:64:71:de:66:71:
16:fa:3e:6b:bf:43:32:1f:5c:1c:8d:8c:41:a9:14:
a0:06:a4:dd:35:58:fe:d4:72:e2:c8:02:c0:21:fc:
3f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FB:42:AC:67:0E:DE:2E:D2:B8:B4:48:B0:14:97:44:08:B7:69:42
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MvtCrGcO3i7SuLRIsBSXRAi3aUI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:8b:38:5e:b5:7a:ee:f0:f8:50:4a:f2:a6:f7:29:bf:af:c9:
07:b9:01:7d:dc:1f:7c:b9:bc:07:b1:73:60:5a:78:59:11:44:
71:77:d6:a1:29:19:81:47:dc:55:7a:6f:ad:5a:b8:4d:5d:18:
1d:7e:e5:fc:ee:db:23:29:c7:09:51:36:50:81:c4:71:97:d3:
80:f3:51:48:b8:7a:3b:a8:34:49:d8:98:5f:00:af:bf:b4:94:
2e:ba:75:e7:e0:0c:cd:eb:84:eb:2b:09:99:b2:a8:7c:61:75:
07:36:c7:96:b7:89:6f:e9:fa:ac:6f:ff:a7:00:89:50:aa:96:
fb:d7:24:d4:5a:6a:e7:79:17:d9:ea:89:5a:7d:4e:45:e3:68:
5c:d0:9d:b6:d8:e1:f9:a8:6d:50:11:17:a9:05:1c:d8:31:52:
95:a5:5f:d3:76:ad:26:bf:cb:1d:81:37:8d:70:2f:f0:ff:f0:
d8:c8:d8:44:71:80:ac:ab:96:9f:8f:8f:b8:c9:de:8d:86:f2:
1f:ab:32:6f:7e:f9:25:b9:7e:bb:bc:28:94:1b:07:64:2b:8e:
1e:d0:84:ed:1a:70:fb:05:10:8c:d3:ef:cc:c8:39:f7:63:aa:
2a:a6:1c:6d:17:1d:50:36:9e:62:9b:85:d3:7b:1d:a1:c6:66:
9d:1d:c1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:59:22 2025 by rpki-client