Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/81B0GyyUBJhUkkS_XwKSzbJXIFw.roa
File: 81B0GyyUBJhUkkS_XwKSzbJXIFw.roa (raw, json)
Hash identifier: Hnrf2JChDl9cFE58A26agj5iUO5SRaqGmOHN6aRMWZM=
Subject key identifier: F3:50:74:1B:2C:94:04:98:54:92:44:BF:5F:02:92:CD:B2:57:20:5C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 358E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/81B0GyyUBJhUkkS_XwKSzbJXIFw.roa
Signing time: Mon 10 Feb 2025 13:53:28 +0000
ROA not before: Mon 10 Feb 2025 13:53:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 118.232.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13710 (0x358e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F350741B2C940498549244BF5F0292CDB257205C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:bf:98:f9:c5:b2:0c:a6:12:a9:b0:5b:67:
be:61:91:ac:b0:84:f6:ad:d9:39:41:0a:f1:42:30:
ae:99:bd:65:54:69:20:80:e1:55:8c:79:83:41:8e:
60:7e:fa:62:a7:b4:4a:ad:47:84:01:5c:c2:d9:b0:
d1:ce:d9:83:15:28:d8:4b:59:32:a3:3d:e5:86:d1:
73:a1:67:24:98:bc:f0:6c:40:c0:1e:9b:f9:d1:2d:
9a:61:ff:dd:71:3d:ef:16:30:17:11:49:51:a5:4f:
df:c5:8e:74:1f:e7:76:bf:e0:fb:f4:d5:6c:6b:01:
7e:24:d7:bf:bb:2f:05:f3:a8:59:2f:e9:17:99:8d:
80:98:28:96:38:4f:d5:71:28:19:97:79:fd:1e:d3:
37:5f:6f:53:f3:6c:32:d5:58:98:4a:8f:6c:46:54:
77:66:30:6f:80:ba:2e:33:56:c7:2e:4c:f8:26:b9:
4f:48:d2:bd:3d:31:5d:e6:95:e9:fa:01:6b:67:5a:
83:de:25:64:30:e3:48:11:e0:06:2b:26:c3:5c:75:
9a:2e:e6:e7:88:6f:89:6d:b7:0a:70:0b:80:56:81:
91:bc:3c:8c:dd:c0:70:dc:fb:b1:6f:52:df:bf:19:
74:06:2a:40:a5:a5:42:88:8e:65:e3:c2:b9:56:29:
b6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:50:74:1B:2C:94:04:98:54:92:44:BF:5F:02:92:CD:B2:57:20:5C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/81B0GyyUBJhUkkS_XwKSzbJXIFw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.192.0/18
Signature Algorithm: sha256WithRSAEncryption
33:23:5d:09:cd:a7:51:5d:4a:8c:bb:dc:09:65:e5:0e:76:56:
49:29:10:23:00:6b:92:d4:13:b6:18:20:84:54:27:b8:f9:ed:
51:24:01:27:43:5c:1b:24:13:fa:0f:59:1a:21:1f:42:00:8e:
5d:63:4a:bc:fb:8f:77:d2:fe:63:56:f1:9d:81:c0:64:61:66:
e9:1e:1e:5c:ca:e4:9f:d0:57:96:10:80:d0:f2:80:b7:83:6a:
d3:de:1f:9e:c5:94:72:2c:fd:ec:13:fd:c4:26:60:3d:90:6e:
bb:3d:bc:1f:31:fb:0f:fc:d0:a2:ea:48:51:2e:60:d0:62:eb:
d8:64:92:cb:9d:52:b4:b6:c0:43:36:05:dd:cd:e7:f3:cf:fa:
eb:83:5b:05:a9:90:46:57:93:c0:b8:05:f1:bb:38:8f:79:3f:
61:d1:30:b8:05:6e:4f:25:99:ce:d8:8a:ec:b6:58:14:11:69:
65:56:42:0c:47:1c:f3:80:4e:bc:8f:e7:91:97:87:36:3e:4f:
92:4f:e2:4e:12:a0:28:6f:a3:f1:4f:cf:ec:67:99:0f:d9:f6:
94:62:ec:f4:98:e2:4d:74:e2:2c:25:65:3e:1f:aa:97:5d:00:
56:e0:d3:ee:22:78:eb:46:63:61:c2:dc:29:d1:9c:c2:c9:ca:
64:a6:af:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:46 2025 by rpki-client