Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nEWOATS72IqEl8TDDloUHIvI7ek.roa
File: nEWOATS72IqEl8TDDloUHIvI7ek.roa (raw, json)
Hash identifier: PE/Sg8JOo+jgW4G4mo9Xtfdr3OE47GccbEmSmXNB1fU=
Subject key identifier: 9C:45:8E:01:34:BB:D8:8A:84:97:C4:C3:0E:5A:14:1C:8B:C8:ED:E9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 30DC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nEWOATS72IqEl8TDDloUHIvI7ek.roa
Signing time: Mon 26 Aug 2024 05:29:53 +0000
ROA not before: Mon 26 Aug 2024 05:29:53 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12508 (0x30dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:53 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9C458E0134BBD88A8497C4C30E5A141C8BC8EDE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:62:96:79:11:48:b3:de:55:5d:2c:c7:e7:81:
18:f4:97:34:ee:f4:7d:58:19:5a:a8:77:10:f9:a1:
09:3c:19:26:62:78:ca:75:9a:6a:20:7a:ae:d6:81:
88:71:f3:f8:fe:39:cb:4e:31:2d:21:72:eb:06:d5:
67:45:46:0a:43:02:ac:8a:1d:b7:46:af:d9:c3:4d:
f8:00:40:1e:0c:51:e6:0a:9e:46:84:f0:d4:47:69:
67:f1:ea:b2:11:c8:b2:75:7d:4c:63:ea:0b:d7:76:
f3:7f:29:24:9d:43:95:78:6f:cc:7c:15:d4:14:be:
d2:4c:f9:ba:e8:31:38:a8:c0:61:90:c4:17:ac:85:
ed:6b:07:41:62:d8:4e:ae:dd:34:a0:31:dc:1d:cd:
13:a0:7d:84:da:33:1b:99:ff:8e:7a:8c:0f:8a:0a:
cc:2d:af:c0:ca:15:b7:8b:18:da:11:c4:24:28:aa:
3f:eb:76:ce:44:74:a7:af:e9:00:66:32:37:21:ae:
75:b6:54:a4:9b:de:69:f0:e1:7d:80:02:7d:60:3d:
6b:1a:65:32:2f:fd:98:73:10:1a:38:13:c0:bf:cc:
00:7e:bd:ad:42:19:b1:d9:16:b0:56:31:61:59:ea:
06:6f:12:9c:07:2e:31:ad:0a:bc:d3:d9:bc:db:e6:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:45:8E:01:34:BB:D8:8A:84:97:C4:C3:0E:5A:14:1C:8B:C8:ED:E9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nEWOATS72IqEl8TDDloUHIvI7ek.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.119.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f8:39:aa:10:36:f2:56:d6:e4:fd:79:f0:b9:b1:79:fd:af:
0f:e5:5c:d1:77:80:84:9c:93:c8:21:a5:44:da:73:25:27:0c:
e3:e3:04:c7:80:ef:22:5b:83:5d:57:45:f5:d0:63:20:74:b7:
df:0d:12:da:03:ca:21:e5:7f:3a:78:09:8f:dd:0b:b6:f9:aa:
db:58:4b:34:8e:3f:f9:8c:e2:07:10:27:96:bb:40:68:20:c8:
c7:34:86:33:e7:5d:90:0f:10:66:13:12:b6:51:be:6f:65:7c:
60:0f:46:04:f7:e4:f2:13:08:47:e7:47:af:39:5f:54:1e:e5:
c8:fd:c3:ae:a4:66:be:ea:15:6a:ab:29:9b:d5:5b:8b:6a:1b:
95:a8:f3:eb:8e:38:59:6e:ce:8c:26:15:1f:de:22:63:ca:b7:
98:3a:26:ce:83:33:8b:c2:08:f1:19:80:26:f8:d8:c4:84:2f:
c7:7e:fe:fe:83:f2:fb:a5:ab:dc:b9:11:89:b2:68:7c:06:59:
00:42:6c:3a:26:fd:c1:9a:0f:fb:18:79:d6:18:42:c5:0c:da:
80:18:06:64:23:1b:f6:f1:1f:d4:1f:16:b5:a6:ec:06:e2:47:
ae:61:76:81:87:61:38:1e:6d:5b:c5:ff:4e:3d:b8:bc:d0:ab:
15:01:87:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:57:16 2025 by rpki-client