Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5vpFHTlPagQuRzB8b89hv2TIxeg.roa
File: 5vpFHTlPagQuRzB8b89hv2TIxeg.roa (raw, json)
Hash identifier: 0+XUGYQvVVQoYAE+BM7zgMAuc9Da9V4r1x/7/KxE+k8=
Subject key identifier: E6:FA:45:1D:39:4F:6A:04:2E:47:30:7C:6F:CF:61:BF:64:C8:C5:E8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33AC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5vpFHTlPagQuRzB8b89hv2TIxeg.roa
Signing time: Mon 10 Feb 2025 13:51:39 +0000
ROA not before: Mon 10 Feb 2025 13:51:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 118.232.96.0/19 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13228 (0x33ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:39 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E6FA451D394F6A042E47307C6FCF61BF64C8C5E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:80:eb:b5:18:72:ae:a3:6a:c2:0e:58:56:
b4:ed:15:9f:49:78:37:81:e3:05:4e:e1:e9:9b:51:
df:6c:34:1a:05:dd:76:62:15:48:5e:50:71:8b:06:
2b:cd:bd:1a:c9:61:bd:17:6f:b5:3e:b3:3c:84:7f:
a7:e5:b0:9a:1a:4b:b7:8e:d5:ed:e8:19:ad:2b:44:
57:19:b3:df:5b:ce:76:3c:8c:d0:27:c7:d7:37:da:
b4:4a:1c:ab:6f:e8:4d:44:c6:fd:c6:70:c0:e9:97:
77:d6:79:93:61:b3:34:74:25:42:b8:b2:fe:dc:49:
d8:ed:1f:24:3e:c9:8c:df:5b:83:8a:f2:c7:8d:50:
a0:e5:c1:00:cb:3d:bf:17:01:6b:3c:c5:cf:bc:96:
2c:4d:6c:e9:b5:b5:d9:a8:89:23:b0:a7:c1:4e:6f:
25:0d:80:3d:d1:7d:d3:b2:d8:6b:f8:9f:20:10:ef:
4d:47:83:42:5e:8d:14:b3:35:55:35:79:76:10:ff:
be:5b:48:09:e1:f4:1b:3e:73:89:78:6c:e3:45:d3:
d3:64:5c:26:29:87:50:69:82:95:35:3f:43:dd:75:
fb:ee:8d:50:21:f9:9a:ff:c8:56:8d:2a:53:f7:1b:
d2:86:e2:c7:26:54:60:4c:aa:a8:a5:94:68:75:cc:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FA:45:1D:39:4F:6A:04:2E:47:30:7C:6F:CF:61:BF:64:C8:C5:E8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5vpFHTlPagQuRzB8b89hv2TIxeg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.96.0/19
Signature Algorithm: sha256WithRSAEncryption
79:33:c6:7c:23:ce:43:05:b3:a5:c4:de:7f:17:de:11:95:00:
ee:38:a4:d5:21:06:39:16:9f:ce:38:b9:6a:a7:c3:48:b7:b6:
da:66:17:b1:28:50:dc:3d:21:3c:a4:2e:6b:10:6d:60:19:d7:
35:66:9f:c4:21:e3:be:9b:9a:cf:36:b6:8a:06:e4:3f:2d:bb:
31:29:d6:68:47:d7:6c:5c:a3:b1:f6:6b:3b:71:8c:8d:ec:64:
95:f8:d4:97:ef:9e:25:0e:1c:fa:93:b8:a1:32:eb:21:6c:9d:
51:9f:3b:a4:12:b0:de:ff:8e:4a:ac:7e:07:c9:c7:74:0b:4a:
64:db:2b:ca:49:04:81:e5:aa:67:cd:25:af:9c:29:b4:ec:b6:
71:a1:6e:d3:8b:76:b3:30:ee:dc:21:4c:ba:b3:8e:10:b6:89:
51:3c:e5:d3:30:8f:1c:7d:48:fe:64:f3:66:e6:76:d2:92:f0:
36:a5:c0:11:df:98:85:cd:a0:cf:1c:c2:54:f3:bd:d7:42:0d:
ed:33:37:88:31:9f:9a:a8:7a:53:76:74:18:d0:e8:16:16:f6:
68:3d:dc:3e:c3:da:16:77:e6:99:c0:2f:ec:04:e5:ee:de:2b:
2c:7f:83:9a:c8:47:a3:00:96:7c:3c:9a:ee:58:59:16:41:84:
19:40:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:46 2025 by rpki-client