Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1eSQlBXDdQMDjJ4k-K-pgSLQ7LQ.roa
File: 1eSQlBXDdQMDjJ4k-K-pgSLQ7LQ.roa (raw, json)
Hash identifier: nsEUh4iFA+DfWVD0gfy7cFe5q+RDqtSmrBjD5THaP+A=
Subject key identifier: D5:E4:90:94:15:C3:75:03:03:8C:9E:24:F8:AF:A9:81:22:D0:EC:B4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3379
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1eSQlBXDdQMDjJ4k-K-pgSLQ7LQ.roa
Signing time: Mon 10 Feb 2025 13:51:28 +0000
ROA not before: Mon 10 Feb 2025 13:51:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13177 (0x3379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D5E4909415C37503038C9E24F8AFA98122D0ECB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:76:3c:9d:21:b2:6e:19:e0:f7:39:aa:56:bf:
01:1c:21:0b:36:66:5a:07:c1:7b:c9:9b:ec:10:78:
c2:30:4e:9e:ec:31:b3:be:4d:62:48:1d:ec:50:c7:
5f:dd:bb:50:74:96:88:98:17:82:90:85:be:7e:b9:
9e:08:2a:74:cc:2f:fc:07:c7:dd:37:b9:58:ab:53:
3c:a2:1d:58:bb:6f:f7:6a:ac:19:91:4f:e3:2f:95:
07:62:54:e1:46:49:14:3b:d4:7c:dd:cf:b9:14:e9:
3b:ab:d5:33:18:c0:db:09:3e:86:1a:aa:9d:bf:ef:
b7:f6:79:b8:d8:4f:9b:e6:97:7c:93:1d:57:c1:ca:
16:a9:a5:91:ca:66:55:10:4a:3b:d8:54:35:ac:ff:
f9:18:4c:06:e0:2b:d7:b9:d3:79:0e:50:95:cc:94:
7d:20:6d:ca:b9:16:29:ed:dc:e1:2a:81:72:10:8e:
5b:05:31:b7:2b:12:6e:b6:cb:1a:0b:2c:f3:fe:52:
48:3b:8a:df:c2:61:3a:fc:ed:41:d5:36:18:bb:ac:
96:e3:27:18:19:bf:2f:36:f9:dc:b4:e2:b8:a8:8c:
00:43:b9:24:a3:60:b2:dd:a8:2f:d3:81:ff:6b:03:
a2:46:60:ea:6b:3c:74:02:a2:69:91:09:5d:51:ae:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E4:90:94:15:C3:75:03:03:8C:9E:24:F8:AF:A9:81:22:D0:EC:B4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1eSQlBXDdQMDjJ4k-K-pgSLQ7LQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.178.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:83:17:15:4d:63:c3:be:88:12:38:54:05:98:cc:a5:af:ce:
31:76:b6:7b:69:d3:87:45:61:ac:3b:ac:ec:ec:a3:29:34:44:
db:49:86:ad:1f:4a:1b:da:07:68:63:9f:f2:4a:7b:41:cb:37:
16:8a:f0:14:cc:81:6f:c6:bb:8d:41:f4:3d:0a:70:6c:90:04:
17:5c:5e:62:e1:65:d8:18:4a:10:52:b0:1a:80:12:68:2e:87:
6f:87:d5:e2:aa:ef:8b:15:7d:ea:c7:c9:d4:43:d0:f8:1a:e5:
bd:17:38:b0:1c:9b:71:8c:ec:84:4b:a9:a7:76:c2:f3:18:7b:
16:6e:8e:26:c8:85:d9:61:a5:a5:7c:c0:1c:9b:0b:e2:a5:22:
cd:af:f4:fd:7a:4d:aa:bc:03:f8:10:77:76:61:43:58:59:59:
40:be:c2:40:5c:43:5d:45:d3:ba:84:90:b9:1b:ff:b4:43:1e:
86:c2:43:19:15:8e:6b:c6:52:27:9f:e6:e9:07:17:85:46:d1:
cb:67:93:0b:57:37:94:2c:0c:0c:77:4f:43:95:aa:73:bb:f6:
15:b3:c5:fa:2c:ca:83:54:ef:62:f3:fe:62:ee:ef:61:1a:0c:
7f:26:93:51:a0:29:ef:ba:e4:8a:2e:7e:8d:86:41:e5:9d:4c:
0c:d9:e1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:05 2025 by rpki-client