Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dSUOBspsnCypO7ReEBXa3mCM984.roa
File: dSUOBspsnCypO7ReEBXa3mCM984.roa (raw, json)
Hash identifier: W3TPwyhKPvVUb4ySsjN5h74Md5tfgXnP0NkR4atQkE0=
Subject key identifier: 75:25:0E:06:CA:6C:9C:2C:A9:3B:B4:5E:10:15:DA:DE:60:8C:F7:CE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 314A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dSUOBspsnCypO7ReEBXa3mCM984.roa
Signing time: Mon 26 Aug 2024 05:30:19 +0000
ROA not before: Mon 26 Aug 2024 05:30:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12618 (0x314a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=75250E06CA6C9C2CA93BB45E1015DADE608CF7CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f8:91:c4:33:34:e9:a8:8c:19:64:3c:3a:b3:
30:c3:ee:c3:aa:04:9e:7b:96:ba:87:73:04:7c:a6:
91:00:27:d8:db:4f:f3:b2:d7:97:4c:80:63:d8:e2:
2d:2d:db:57:cf:0e:d6:d2:30:3f:09:5a:cb:d2:8a:
a7:f9:3a:d5:4a:5d:dd:d5:db:e3:34:fd:6e:14:fd:
c6:0b:b8:f7:c2:fc:99:66:31:6c:32:f6:88:70:12:
5a:65:3b:ef:63:2f:02:3e:b3:9d:7e:38:b4:85:dd:
47:a9:24:05:7c:19:29:2f:c4:7b:ff:24:4a:e0:de:
87:5e:fe:6b:6e:9e:a3:ee:73:7d:9a:72:7b:3d:38:
6a:e1:e5:96:3b:42:a0:36:7c:24:34:8e:9d:4e:90:
55:84:4f:ba:d5:4a:7a:c1:78:e9:23:cd:b3:70:e5:
0f:01:01:fd:a4:4a:78:79:6e:53:4b:79:27:29:01:
a9:a4:5b:de:5f:c0:f5:b7:b5:97:5e:b2:14:f8:c9:
df:ea:34:f8:6a:30:b4:ba:e3:8c:4a:c8:44:2c:48:
78:cf:3a:c5:c3:06:36:30:a6:5a:c2:fc:d5:6e:e4:
79:bc:4c:c2:8d:17:51:67:5e:5b:90:85:6f:6f:32:
5e:a9:e5:ab:ee:9c:5c:d9:f2:3b:91:f9:02:12:fa:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:25:0E:06:CA:6C:9C:2C:A9:3B:B4:5E:10:15:DA:DE:60:8C:F7:CE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dSUOBspsnCypO7ReEBXa3mCM984.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.245.0/24
Signature Algorithm: sha256WithRSAEncryption
21:38:0a:81:fe:c3:98:39:6e:a5:93:64:b1:db:ea:41:4e:fa:
ba:ce:41:cd:6a:4d:39:d5:cb:a3:63:0a:ba:78:5d:a9:52:da:
4d:80:b9:33:04:2d:1a:99:f5:cb:82:d9:64:76:24:c1:9e:3e:
fe:c4:90:83:30:da:8c:80:4a:71:52:ad:80:fa:9f:9b:f1:3e:
15:1b:12:8c:a3:d5:99:53:2a:69:68:94:d0:98:d4:7f:e8:82:
ff:05:1c:c5:65:3a:d5:65:87:51:e1:90:77:13:35:92:e5:7d:
d0:27:78:d6:d1:6e:9d:39:02:9e:d3:42:4e:7d:27:ec:64:5f:
41:b7:eb:c1:4c:83:62:c5:16:dd:56:64:52:b7:b6:4e:d4:9b:
50:d9:20:b0:60:61:3f:6a:bf:4b:cd:02:11:a1:53:89:5e:24:
b4:0a:19:36:9c:da:16:75:1e:bb:0e:06:30:2b:c7:e6:ab:2a:
96:51:f2:30:80:98:61:43:50:6c:0b:24:62:cb:1f:c8:53:4e:
44:9f:30:be:06:f9:84:8e:f9:13:d8:01:23:b6:4f:2d:5d:a2:
e0:b1:b4:9b:6a:7b:d9:79:aa:11:e0:7a:fb:1c:13:22:31:2a:
40:f5:03:47:36:ce:ee:64:92:55:9e:aa:9e:43:5f:0d:5c:85:
af:be:92:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:50:11 2025 by rpki-client