Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0gdFR9v7-iqAXvb5vC4ADON_8pU.roa
File: 0gdFR9v7-iqAXvb5vC4ADON_8pU.roa (raw, json)
Hash identifier: vQDFCELOGQflWzp7GC+anwb82M4bkE+ivV9lMc/4+fU=
Subject key identifier: D2:07:45:47:DB:FB:FA:2A:80:5E:F6:F9:BC:2E:00:0C:E3:7F:F2:95
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3642
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0gdFR9v7-iqAXvb5vC4ADON_8pU.roa
Signing time: Mon 10 Feb 2025 13:54:09 +0000
ROA not before: Mon 10 Feb 2025 13:54:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13890 (0x3642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:09 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D2074547DBFBFA2A805EF6F9BC2E000CE37FF295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2b:4a:16:1e:41:06:6b:6b:ed:f7:f1:65:18:
a1:c7:fd:70:30:0a:14:3c:62:b9:99:52:e3:88:58:
00:59:88:64:77:69:54:29:50:58:0a:0f:e1:8f:5e:
12:d7:b8:b8:8f:0f:56:26:8c:c8:88:76:a9:b3:bb:
4c:8a:aa:3e:31:15:45:4a:55:56:bc:cb:2f:5a:0c:
e8:87:56:05:1b:20:8a:e2:fa:77:d1:0a:27:cf:34:
05:3f:8a:cd:a5:15:45:71:16:31:8f:64:4b:a5:61:
e7:84:19:c5:f6:e4:be:ab:4c:5f:f8:a5:df:dc:e7:
b1:4b:85:50:01:75:6b:f2:f6:09:15:8f:6a:b1:53:
4e:56:36:37:2b:2b:f3:42:d8:f5:36:77:cb:d3:dd:
87:70:8d:97:ca:03:93:7b:f5:95:7a:dd:0f:df:0a:
95:27:76:73:b6:12:f5:5b:8a:d1:1e:e7:ed:c9:14:
a9:7e:d4:e9:33:42:cd:8e:b8:88:42:83:c4:d3:f3:
65:ff:2f:c6:9b:97:88:37:d6:bc:40:a2:7e:70:80:
22:fa:c9:ad:da:d0:99:bf:c9:93:72:e7:ca:a3:60:
44:41:93:fb:0e:e2:9d:e3:f6:f4:d8:b4:b0:de:c3:
d1:3b:de:46:43:79:a1:d9:d6:4d:e5:29:a5:10:5e:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:07:45:47:DB:FB:FA:2A:80:5E:F6:F9:BC:2E:00:0C:E3:7F:F2:95
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0gdFR9v7-iqAXvb5vC4ADON_8pU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:52:6a:e6:8d:3b:ca:9c:c5:7b:ec:a4:13:2f:d2:95:fc:18:
3b:16:0c:ed:5d:3c:7a:d0:56:20:84:97:59:45:03:10:83:73:
b1:d8:7d:1f:0f:f5:fd:33:ca:36:bb:4c:ee:35:75:6f:df:a2:
fb:13:42:b5:18:e6:7e:c5:66:56:2f:cf:8c:b9:d5:73:0b:5a:
a2:aa:34:f0:b7:2a:c5:8d:d8:28:9b:d0:f3:a1:c6:44:68:1b:
af:11:b8:ef:70:8f:3f:0e:03:cb:e9:20:b0:3a:d6:8b:b6:b9:
11:5f:22:10:04:0f:9a:79:a6:11:2f:62:67:b0:65:dc:4f:72:
81:4e:f6:df:3a:c4:a6:9a:c9:8a:0f:7d:89:0f:eb:99:da:29:
3f:d5:a8:71:c0:ab:70:8a:6a:12:39:ee:18:47:f7:c8:ba:e5:
3f:29:ba:22:f5:de:ef:44:22:76:74:52:9a:ec:21:c5:e7:7d:
dd:32:8c:15:bb:35:6a:a4:c3:ba:db:28:b2:e9:59:69:c6:44:
2f:2a:58:bc:c9:5f:af:d4:b6:b2:4b:72:48:10:d8:22:53:10:
86:c4:5a:27:c8:b0:a2:c9:02:52:a4:dc:34:e1:33:d4:69:52:
00:09:41:29:d0:af:da:a4:8d:c8:1d:01:b1:b6:06:00:76:ac:
1c:78:3d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:23 2025 by rpki-client