Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0M7Fhz_qJyyNVwTY0dv4ogcJXEY.roa
File: 0M7Fhz_qJyyNVwTY0dv4ogcJXEY.roa (raw, json)
Hash identifier: OEfvNSZSTnISOXAOyNYpN6mPZHwS/sUBtGdGpifR33A=
Subject key identifier: D0:CE:C5:87:3F:EA:27:2C:8D:57:04:D8:D1:DB:F8:A2:07:09:5C:46
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 364A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0M7Fhz_qJyyNVwTY0dv4ogcJXEY.roa
Signing time: Mon 10 Feb 2025 13:54:11 +0000
ROA not before: Mon 10 Feb 2025 13:54:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 118.232.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13898 (0x364a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D0CEC5873FEA272C8D5704D8D1DBF8A207095C46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0d:bf:86:7d:d7:41:d3:59:1e:da:a5:eb:91:
1c:11:4d:f3:7c:01:37:14:02:0c:02:8f:fb:d7:de:
5b:bb:40:89:5c:0e:e4:7b:e4:24:14:f0:9f:ec:19:
05:ba:55:25:40:6b:88:bc:42:3e:7d:7b:24:68:c9:
12:71:cb:d3:90:6b:fc:34:37:c2:56:0f:6e:fa:c1:
ac:53:20:af:3c:e5:f1:7d:3f:1e:6a:49:d2:77:5d:
b9:8b:24:47:0a:29:67:4b:3a:34:af:42:e4:9c:9e:
cb:60:ca:bc:dd:cd:95:7b:1d:82:ad:8d:11:cb:97:
67:52:a4:f5:ba:9e:93:96:74:89:fd:91:ed:75:b0:
3f:26:3a:34:76:59:d6:e1:55:4d:0a:9b:25:ff:7a:
45:6b:3e:a6:86:e5:59:4f:2a:85:0f:d9:05:8c:b0:
f3:1e:12:08:07:ce:1c:a3:db:a4:27:d3:58:85:95:
47:bc:9d:bd:46:71:61:a7:06:d8:f1:7c:02:57:1e:
a3:70:95:11:a2:46:3e:e1:2f:39:6b:ee:d8:97:02:
27:38:7d:32:5c:c8:54:65:84:5b:e7:af:d1:0c:26:
04:a5:6b:69:6d:d9:db:47:6a:30:d9:7d:c4:92:52:
7f:7c:25:6e:ef:ae:af:21:bb:d4:18:aa:44:cf:fe:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CE:C5:87:3F:EA:27:2C:8D:57:04:D8:D1:DB:F8:A2:07:09:5C:46
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0M7Fhz_qJyyNVwTY0dv4ogcJXEY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.192.0/22
Signature Algorithm: sha256WithRSAEncryption
67:1d:49:37:7f:47:cf:b1:f4:56:1d:e7:23:7d:27:27:ff:fa:
8b:ec:9e:79:d5:d0:07:18:a1:3f:f7:60:52:37:09:5a:1d:22:
c6:6f:05:c2:cd:ea:03:58:bf:6e:34:00:44:d8:70:42:3f:58:
10:16:1a:1b:ad:fe:04:61:a0:11:9b:dd:2a:63:53:35:9a:27:
77:21:c5:f1:73:cc:ab:6d:36:c1:78:06:90:45:54:b7:7b:f4:
83:23:f2:6c:b8:08:85:bc:af:bc:e7:cf:94:86:95:13:5d:87:
69:c8:e8:5e:f9:dc:a8:cc:9f:f8:23:f9:94:2f:2b:6a:47:ec:
ad:a2:e1:33:c5:95:a7:ae:17:7d:b4:6c:49:28:b7:ba:3b:28:
58:13:5c:08:0b:ae:60:9f:65:f9:42:79:18:f9:1c:e8:88:f4:
4c:7d:87:b7:8e:90:d9:37:85:e8:15:fa:8d:15:43:58:9b:7d:
37:7b:27:a7:05:6e:7c:a7:bf:d4:fa:e3:0e:76:c8:27:32:be:
db:74:1f:80:a6:ae:65:2f:52:18:6a:67:1a:b2:56:b6:8e:41:
3a:b8:b5:7f:41:d3:a6:4f:3e:ef:33:d6:ac:f9:c2:9f:d5:5d:
d6:47:b4:a4:d0:9d:29:91:4d:b4:07:67:1e:0b:fa:8e:07:db:
72:d7:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:24 2025 by rpki-client