Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6l_JQUP5KrN85M-hoQN4U-yyYMc.roa
File: 6l_JQUP5KrN85M-hoQN4U-yyYMc.roa (raw, json)
Hash identifier: rWYaBIC4VOv5lSxfYApH+FNyt/DHwYi9nSU7eOgBh/8=
Subject key identifier: EA:5F:C9:41:43:F9:2A:B3:7C:E4:CF:A1:A1:03:78:53:EC:B2:60:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35F4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6l_JQUP5KrN85M-hoQN4U-yyYMc.roa
Signing time: Mon 10 Feb 2025 13:53:51 +0000
ROA not before: Mon 10 Feb 2025 13:53:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13812 (0x35f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EA5FC94143F92AB37CE4CFA1A1037853ECB260C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:7e:42:e4:66:ec:35:9b:37:70:3f:a7:0c:
75:85:f4:5f:b9:aa:0f:52:4f:37:f0:bb:c9:14:2b:
fb:61:c5:2a:12:a6:b7:8c:9f:32:6f:e8:37:20:a6:
a5:62:35:c0:94:30:0d:59:ba:50:0a:b8:4b:30:0f:
9d:cf:c4:83:5a:aa:f6:ee:37:81:d4:22:31:77:dd:
91:5d:32:73:39:da:02:3d:4f:62:e3:1f:21:d1:ad:
6f:1b:0c:ab:ee:be:3d:e1:2b:80:7d:cb:33:9b:7f:
75:04:c9:85:c2:50:3b:08:c3:4d:e7:7a:d0:8d:d5:
03:cf:94:d9:52:3b:46:74:6c:b6:05:8f:85:aa:61:
ad:49:2d:64:4b:28:df:e7:3f:97:5a:c4:73:46:1c:
6b:b6:3c:fd:a5:07:a4:7c:91:30:2c:47:6e:96:35:
9d:36:71:ad:be:cc:86:49:a6:a5:3b:37:70:8c:93:
b8:d1:37:f4:65:ca:48:b3:1b:7f:ae:ca:98:5a:4d:
c8:e2:6a:4e:c2:c9:7b:e9:b0:1e:2a:af:da:7c:6f:
3a:70:e4:94:10:36:56:a5:45:1f:dd:5c:a3:43:e6:
a4:f8:fb:fc:fe:81:e3:dc:4c:73:89:ff:41:47:f2:
a0:48:24:91:21:78:f1:80:3b:c8:cd:5a:c6:ee:0a:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5F:C9:41:43:F9:2A:B3:7C:E4:CF:A1:A1:03:78:53:EC:B2:60:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6l_JQUP5KrN85M-hoQN4U-yyYMc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.50.0/23
Signature Algorithm: sha256WithRSAEncryption
22:1c:bb:f8:99:67:56:bc:80:c8:50:82:94:26:d9:14:ee:56:
11:00:30:7b:7c:cb:bc:40:93:be:10:69:06:c3:79:0a:8e:38:
18:0c:80:82:37:11:86:f9:18:62:76:16:3e:79:7a:c3:bb:8d:
51:ec:60:f1:f2:f8:da:26:01:8f:e0:f8:1f:98:5f:8c:e5:76:
07:0f:51:c7:27:59:96:9c:ae:2b:24:15:a7:bf:21:17:07:9f:
52:1a:25:93:47:20:6f:cf:97:aa:d5:0c:c5:32:d7:ea:3f:0c:
12:f2:f8:0a:9f:0a:85:ee:aa:2a:67:da:49:1a:40:fd:46:f1:
dd:c9:a8:e0:9d:bb:43:1b:05:06:a0:59:45:97:1a:36:65:57:
9e:4b:7b:b3:fa:a0:2e:cf:99:98:4f:eb:d9:11:40:d0:06:36:
f5:5e:20:31:1a:7a:1a:53:50:b3:45:a9:df:31:a2:ee:97:f0:
ca:a1:a2:88:59:e0:c4:61:54:9d:7d:00:f5:75:ff:53:5f:c9:
9b:a6:02:87:12:11:4f:59:a5:44:90:51:65:f6:bd:f2:ba:ec:
31:07:d3:ba:8f:db:5c:e2:2b:e5:06:a6:b2:e6:62:21:50:98:
a9:9b:9d:28:41:5e:80:d0:39:ea:c5:ec:f2:d3:4f:d3:82:1c:
ec:94:19:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:03 2025 by rpki-client