Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1WTXaYK5K7PZssw0EkhacdA-OOM.roa
File: 1WTXaYK5K7PZssw0EkhacdA-OOM.roa (raw, json)
Hash identifier: HxEueAQQh7mlNhMqwwfS4RLYB0d0Qy30qQnNDwm65j0=
Subject key identifier: D5:64:D7:69:82:B9:2B:B3:D9:B2:CC:34:12:48:5A:71:D0:3E:38:E3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3671
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1WTXaYK5K7PZssw0EkhacdA-OOM.roa
Signing time: Mon 10 Feb 2025 13:54:19 +0000
ROA not before: Mon 10 Feb 2025 13:54:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13937 (0x3671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D564D76982B92BB3D9B2CC3412485A71D03E38E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:ea:5e:86:59:33:db:2e:74:19:69:90:55:
9e:30:fd:ba:8e:cc:83:5b:90:5a:28:30:6c:e4:e6:
23:42:ce:82:2d:2d:a4:5c:08:8d:6f:84:34:e4:b2:
c2:8d:9e:63:32:af:5e:b1:5d:57:cc:4d:1f:0d:fe:
8c:bb:ba:44:15:8c:b9:4c:4c:d9:f6:60:d8:8b:45:
65:7e:2b:10:3e:1b:ee:ea:f2:71:a8:39:97:9e:7b:
a5:70:a8:37:d4:5a:71:7b:2c:be:48:ac:bb:39:59:
a8:ce:d4:15:3a:a0:f4:67:1e:99:6c:40:66:0b:bb:
11:45:92:0a:61:4c:53:e9:fb:06:3a:5e:07:be:7b:
58:eb:b9:08:f7:87:89:57:48:99:5f:61:e6:2c:73:
ce:2d:f3:13:5c:e2:2d:b1:06:b6:0b:42:96:af:75:
90:09:f9:2a:15:ec:3f:68:5f:4d:c3:6c:67:b5:1a:
c2:f0:b0:4e:4f:6e:fe:95:4c:e1:a9:c0:52:63:af:
63:da:7b:09:68:ed:7f:26:dd:24:be:67:6d:5b:42:
ee:5e:6e:86:d9:15:9f:ac:3f:90:3e:08:16:27:47:
3e:26:6b:23:66:e7:82:9c:79:be:fe:3b:53:4d:c4:
22:19:ad:52:fb:6f:71:19:7d:1d:70:64:86:97:1b:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:64:D7:69:82:B9:2B:B3:D9:B2:CC:34:12:48:5A:71:D0:3E:38:E3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1WTXaYK5K7PZssw0EkhacdA-OOM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.248.0/21
Signature Algorithm: sha256WithRSAEncryption
04:13:90:5b:6c:e8:52:f8:ff:4e:23:ba:ca:dd:78:13:e8:dd:
eb:e7:b0:9d:c6:b9:2c:1c:c9:26:d1:cd:7e:d5:33:08:cf:48:
7e:44:6a:4c:ac:cc:1a:ad:9c:58:10:6e:54:43:3c:e9:df:cb:
38:c4:0b:0f:eb:86:d0:6c:8a:14:e8:9e:6d:46:73:50:b9:51:
ed:52:04:6f:64:50:42:06:39:fb:a1:93:05:f6:e9:51:a6:c1:
4e:74:fe:27:d7:71:11:a2:71:ce:84:aa:2d:07:35:ee:f5:a1:
f3:0d:6d:99:c0:d1:e4:20:ce:04:80:c3:17:21:8c:fb:cc:fd:
86:8e:05:8e:a1:9c:2d:b5:ab:5b:a4:08:81:23:48:20:4b:a6:
24:00:eb:ca:09:16:33:7c:b7:58:9c:63:4e:23:64:1a:b6:78:
d7:b3:8b:d5:f2:46:5a:1b:d9:c4:92:8b:a2:b2:f2:36:67:61:
e3:e2:99:41:3b:2c:94:f8:10:06:5d:73:76:bd:63:ce:d1:80:
20:8e:27:85:66:4d:de:56:a2:14:b9:dc:7b:36:30:24:d5:bb:
19:7d:6d:8f:90:d7:01:84:9d:24:cc:11:a5:69:10:88:10:37:
c7:58:c4:88:d0:7a:1b:f3:53:f7:28:7a:01:20:7a:81:3d:03:
fa:11:e2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:51 2025 by rpki-client