Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TcOTlwRRCJxQsBTRYphebUFfFqY.roa
File: TcOTlwRRCJxQsBTRYphebUFfFqY.roa (raw, json)
Hash identifier: 07NYGt1Peq7niO6fMrciiP4Od5NLYHrZwMpRi7rOyks=
Subject key identifier: 4D:C3:93:97:04:51:08:9C:50:B0:14:D1:62:98:5E:6D:41:5F:16:A6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3145
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TcOTlwRRCJxQsBTRYphebUFfFqY.roa
Signing time: Mon 26 Aug 2024 05:30:17 +0000
ROA not before: Mon 26 Aug 2024 05:30:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12613 (0x3145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:17 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4DC393970451089C50B014D162985E6D415F16A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:e4:7c:2b:da:8e:2d:37:fb:1d:36:c4:0c:
78:a7:8c:bc:de:b2:8d:ce:5c:45:42:eb:3d:65:98:
2f:34:5f:4f:b8:7a:4b:e9:93:af:79:1b:8e:51:2c:
5e:a3:60:32:d3:b0:91:9a:40:95:ea:4b:be:f2:66:
bc:9d:b1:cf:f6:1c:a6:24:fe:3d:ca:72:ea:cf:bf:
66:7a:3b:56:28:12:b3:a1:02:04:a4:d0:5f:8a:c3:
66:92:34:20:44:d1:df:04:95:08:17:f2:c9:fd:e1:
00:d5:c9:d9:78:16:10:7a:fc:88:d9:e1:8c:d2:ee:
2c:98:78:68:32:dd:9a:46:21:ef:2d:55:26:55:84:
44:08:29:b9:1d:df:db:57:56:b5:6b:2d:1e:23:1e:
d8:09:81:ba:f3:a3:a1:c8:40:68:dd:db:c6:17:78:
81:73:15:dc:64:0e:e6:2b:17:0b:e7:73:6a:b9:46:
ee:5f:9c:98:47:01:22:85:e6:e0:88:a3:02:d8:7f:
e7:9e:28:a5:7a:06:64:10:e1:1f:ba:1b:62:05:65:
25:18:b8:99:3b:46:bb:47:02:97:b3:dd:e4:1e:d7:
97:8c:a5:d7:8a:b5:ee:fb:b1:96:f9:b3:8e:d2:82:
d8:29:12:d2:ff:a8:da:d4:d7:62:e8:f5:ba:38:d4:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C3:93:97:04:51:08:9C:50:B0:14:D1:62:98:5E:6D:41:5F:16:A6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TcOTlwRRCJxQsBTRYphebUFfFqY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.128.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:55:27:a5:f5:0d:b1:55:b8:3c:38:eb:9b:36:2e:8b:aa:05:
29:e5:78:80:e6:22:b9:d6:fb:55:c0:42:c3:05:72:bb:29:3c:
28:c7:17:f0:16:0b:13:28:a8:26:73:a4:3b:fa:6a:8c:25:91:
f9:12:c6:b6:ec:81:38:80:d9:9d:f7:9a:1d:74:98:ad:54:61:
c5:04:19:bd:02:40:88:f4:e6:1c:76:f9:3a:c8:bb:3c:25:7f:
f7:8d:6c:87:c0:83:93:a4:36:5b:b5:63:83:62:04:05:19:da:
e5:8c:e1:a1:14:8b:2d:a4:26:c0:b4:be:d3:56:ae:44:42:60:
47:11:30:22:b1:c4:6d:09:02:61:6e:2a:39:75:3c:4c:9d:75:
75:37:64:7b:86:2e:7b:36:aa:92:c9:78:b9:de:56:eb:30:fa:
78:7f:58:57:9d:a6:3f:27:40:0c:fd:d3:5c:5d:72:f2:f0:66:
78:06:26:ea:ed:6d:e5:95:35:1a:dd:0e:a1:7d:ff:1a:ab:aa:
34:aa:c9:df:18:b3:52:f2:f8:1a:10:3c:07:f7:66:12:8a:5c:
fa:93:b7:92:91:4a:99:3b:63:c1:06:cb:7c:3b:ad:29:6f:22:
9a:0c:cc:a7:bd:35:b1:09:5a:d4:5f:af:06:f0:97:84:ef:e9:
48:2e:b5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:52:32 2025 by rpki-client