Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-LKpCtw7jujmTituVblEpRbGwkg.roa
File: -LKpCtw7jujmTituVblEpRbGwkg.roa (raw, json)
Hash identifier: Jh2rU7BaS6ZPZDgss3JqoNeKNn7E0s4mIiPxDyPCPOo=
Subject key identifier: F8:B2:A9:0A:DC:3B:8E:E8:E6:4E:2B:6E:55:B9:44:A5:16:C6:C2:48
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35FA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-LKpCtw7jujmTituVblEpRbGwkg.roa
Signing time: Mon 10 Feb 2025 13:53:52 +0000
ROA not before: Mon 10 Feb 2025 13:53:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13818 (0x35fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F8B2A90ADC3B8EE8E64E2B6E55B944A516C6C248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:91:00:3b:a5:72:80:bc:c1:be:11:b4:91:
2b:ec:7e:96:17:d2:2b:ed:3d:0c:ae:d8:d7:80:0d:
a4:e4:bb:51:f2:84:b1:0b:a6:5f:74:ac:c8:52:58:
e2:bc:7d:33:bf:1d:32:50:7b:2a:0c:16:c5:6f:47:
c7:77:b9:16:81:ef:4e:7a:a5:74:f8:47:99:40:df:
9b:6a:e7:77:30:10:b0:ff:6f:4f:c3:33:a3:53:44:
39:d1:b1:92:1b:bd:7b:59:36:71:5c:e7:dc:97:29:
a0:01:ef:03:db:c1:55:98:b8:56:66:c5:bc:af:2e:
f0:92:eb:db:71:10:6d:4e:2e:c6:21:0c:70:d3:8a:
1f:c6:37:4f:7f:b5:46:3d:29:58:00:b5:65:b0:c8:
c6:de:0f:09:43:c8:e8:f4:58:e7:e9:1b:4f:9e:93:
ce:e8:1c:1b:ac:12:40:97:d2:35:f0:db:b7:82:d5:
0f:31:ad:80:59:39:0c:fc:07:f8:81:25:56:db:75:
e3:b0:c2:73:f3:4f:e5:4e:10:41:8b:bd:e4:5c:ae:
5a:99:ed:8c:14:39:9b:bd:a8:e1:a4:2e:08:d9:7e:
9e:08:45:e8:ba:1a:1f:c5:3d:c3:29:80:ba:e0:7c:
85:f4:a6:58:2f:a4:77:2d:03:5b:56:c8:6f:e9:c3:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B2:A9:0A:DC:3B:8E:E8:E6:4E:2B:6E:55:B9:44:A5:16:C6:C2:48
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-LKpCtw7jujmTituVblEpRbGwkg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.60.0/22
Signature Algorithm: sha256WithRSAEncryption
90:23:8b:17:bb:9b:b8:13:2d:82:58:19:15:3f:77:f4:94:53:
c1:0b:49:d7:ed:87:74:17:03:f1:a7:4a:16:ac:02:72:f6:a3:
20:2f:e2:f6:95:ad:fa:fe:79:ee:ae:fe:8a:ee:b9:98:1b:d5:
cc:68:18:0d:3c:27:de:a1:4b:7f:3c:23:71:63:08:a8:8f:0a:
84:67:f0:9f:c4:b0:c2:02:da:63:85:df:f1:c6:ac:50:cc:2b:
83:e8:fe:83:ba:0b:5e:e7:b1:e6:c0:14:2e:3d:c5:36:88:12:
a1:cc:81:7b:eb:4c:26:56:60:cd:27:a5:47:ed:95:56:c6:5f:
1e:50:32:dd:04:a0:2a:c4:32:c4:80:2b:80:c8:07:ed:56:eb:
22:cf:52:b1:48:8b:72:c7:b9:e8:99:4d:91:ef:ab:a8:09:0b:
42:46:c5:59:2b:21:3e:52:cd:9c:87:d3:75:34:d2:05:bd:5b:
47:b8:a1:85:68:e8:50:39:c5:a3:55:20:4c:2a:5a:e8:d6:13:
43:c1:b4:06:8a:e7:e0:7e:37:0a:f8:0b:92:8b:cb:b4:bf:fb:
19:9c:e2:25:de:3b:1a:17:49:f7:38:37:97:04:37:32:8f:1b:
2c:c2:a2:92:30:3e:2a:58:98:e6:94:05:df:64:5f:b0:14:9c:
f1:f2:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:21 2025 by rpki-client