Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pc8cEa9ig4ZvVPZVNIjkQzD62zk.roa
File: pc8cEa9ig4ZvVPZVNIjkQzD62zk.roa (raw, json)
Hash identifier: lf2ukOHfFARum4eveBwagEbVAldzWGQfLnDS5ja8FAk=
Subject key identifier: A5:CF:1C:11:AF:62:83:86:6F:54:F6:55:34:88:E4:43:30:FA:DB:39
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3568
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pc8cEa9ig4ZvVPZVNIjkQzD62zk.roa
Signing time: Mon 10 Feb 2025 13:53:19 +0000
ROA not before: Mon 10 Feb 2025 13:53:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 211.76.120.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13672 (0x3568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A5CF1C11AF6283866F54F6553488E44330FADB39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:7a:43:71:05:d8:c2:9d:38:41:22:77:bb:
94:c6:a1:6a:57:a7:49:11:ff:b0:20:8d:b9:b7:d9:
9f:ad:77:58:9a:e8:b4:ac:dc:3f:6f:27:d6:90:80:
aa:51:c7:43:af:96:0c:f1:89:f0:e8:50:27:e3:34:
b6:cb:9e:e9:e7:73:a2:f5:ab:2a:fc:ae:61:fd:d8:
28:08:8a:7b:44:ba:af:ed:ea:81:2d:c6:8f:ad:83:
76:1a:48:ec:33:6e:ba:64:7c:8b:f8:77:bd:b6:33:
0e:bb:cc:65:3a:ee:00:51:4b:e8:27:69:23:3f:41:
d7:58:a8:47:92:c6:24:b0:a5:ed:6b:6e:3b:b0:21:
ef:c1:66:ff:85:2e:6c:cf:52:41:f6:0b:86:bf:f6:
c2:2c:f4:27:c1:76:15:e9:e2:f5:ff:9f:12:ce:b5:
45:2f:64:57:54:c5:58:97:b8:9e:49:07:8f:0d:bb:
fd:a8:05:89:27:c6:d4:28:1d:83:b3:ae:7f:47:d7:
5d:c0:8c:99:5d:ab:a3:c4:8c:9e:44:a2:0b:31:58:
4a:1f:c3:a9:f6:d3:73:30:1e:12:7d:4e:66:2f:1b:
5b:af:8d:2b:38:dc:dc:81:87:1f:3f:d5:27:71:2c:
39:78:0a:8c:cb:cd:3c:5b:0f:96:bb:59:6c:ff:99:
31:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CF:1C:11:AF:62:83:86:6F:54:F6:55:34:88:E4:43:30:FA:DB:39
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pc8cEa9ig4ZvVPZVNIjkQzD62zk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.120.128/25
Signature Algorithm: sha256WithRSAEncryption
7f:5d:d3:a0:20:74:2a:ff:99:a3:2c:b4:3a:e1:1c:34:9c:32:
be:57:e6:04:76:71:eb:c9:d3:ad:cf:e3:e8:44:fd:76:0c:d7:
2b:1c:95:10:ed:30:06:67:8d:eb:d9:66:b9:8a:bb:e6:2c:4d:
07:c5:9c:6c:84:56:ca:ea:2d:c2:9a:30:5c:06:01:cb:c1:93:
3d:cb:e0:52:4b:6a:af:47:73:d8:2f:c9:3f:d5:05:54:d6:52:
00:ee:89:65:3b:f5:b8:51:8a:63:61:19:1b:d4:bf:5f:0f:6d:
34:f9:0f:e8:fc:f1:c7:2e:9f:dd:9c:e0:73:c0:4a:35:d0:a7:
64:29:09:5a:ab:0b:b7:53:62:0c:0d:ae:e8:71:d1:eb:94:49:
f1:fd:00:2c:f0:38:eb:97:36:4c:c0:82:d7:1b:0b:c4:68:a2:
19:73:9f:c5:5c:98:40:1a:a9:58:f3:f8:f7:f9:0e:22:c6:75:
6f:e2:91:b1:02:6d:77:1c:7c:f0:30:fc:37:56:9d:49:80:c2:
fe:35:f4:d2:11:45:65:99:cd:c6:f7:09:56:2e:04:4d:53:29:
d0:84:6c:c4:32:fd:5c:b6:ed:5d:03:16:f7:04:62:f3:44:34:
7c:e9:b8:41:26:2e:c7:99:0d:25:cc:4b:da:f1:2e:11:e3:d6:
6c:3f:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:35 2025 by rpki-client