Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8frnErl9_Y6g2q2l-j1e4PWpo9w.roa
File: 8frnErl9_Y6g2q2l-j1e4PWpo9w.roa (raw, json)
Hash identifier: pozT4ZeIBCJyytqwzB5RuHUAdxc9007xkumPaPEUCCM=
Subject key identifier: F1:FA:E7:12:B9:7D:FD:8E:A0:DA:AD:A5:FA:3D:5E:E0:F5:A9:A3:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36B0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8frnErl9_Y6g2q2l-j1e4PWpo9w.roa
Signing time: Mon 10 Feb 2025 13:54:35 +0000
ROA not before: Mon 10 Feb 2025 13:54:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14000 (0x36b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F1FAE712B97DFD8EA0DAADA5FA3D5EE0F5A9A3DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:e3:ce:96:0f:6b:e3:70:e7:47:31:7b:a8:
3b:9f:88:4d:c1:5c:e3:21:62:42:2f:2b:7a:59:b6:
2e:ac:8f:23:a7:c1:62:6a:38:1b:e0:1c:f2:4d:cf:
a1:e2:0c:fe:43:d5:67:e0:23:52:1b:1c:ce:ee:4e:
f2:14:d7:ec:04:5b:df:e1:c2:a9:01:7f:74:c1:40:
43:f2:73:a7:10:5a:f9:eb:43:dd:2e:af:5e:34:df:
61:dc:50:fa:72:f6:8b:24:4f:59:29:81:2f:52:92:
87:25:56:9e:d2:6b:83:72:cc:dc:57:1c:d9:33:5e:
61:c9:58:c9:c2:26:26:64:12:05:b4:98:d4:f3:28:
e3:e2:b9:ee:f8:43:cf:29:0a:28:37:34:4d:c6:33:
84:18:78:58:cb:ca:dc:96:57:2f:ac:3e:69:3f:1b:
63:b1:44:eb:49:a5:b5:b5:d9:ed:70:a6:69:41:51:
24:aa:16:74:1d:a0:4b:9c:97:c4:51:01:24:9a:f4:
27:b3:a9:b7:a3:49:4e:13:9a:21:59:21:1e:50:58:
3e:87:03:ac:69:f7:30:82:2e:a3:17:85:7d:46:e3:
5f:27:db:1b:29:0b:a0:5e:e5:74:98:4f:bf:46:01:
f2:38:2d:c1:c1:12:7c:22:50:fd:44:f7:5d:c5:69:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FA:E7:12:B9:7D:FD:8E:A0:DA:AD:A5:FA:3D:5E:E0:F5:A9:A3:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8frnErl9_Y6g2q2l-j1e4PWpo9w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.64.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:42:95:7b:7b:81:a2:58:11:db:61:30:3b:d2:e1:21:a4:69:
0e:a7:74:fe:e8:22:f4:4e:4e:30:68:b7:3f:27:21:4f:26:11:
1d:0f:bc:c4:18:72:2f:4c:91:87:bc:65:ea:6c:40:27:c0:78:
1d:04:74:c6:41:0c:63:e5:f0:e6:b3:67:7d:12:d8:56:bb:77:
0e:1c:41:8b:50:d1:28:5c:35:47:7e:7c:ce:31:69:fa:bd:71:
be:b5:4e:15:45:a4:06:13:dd:1f:a3:7f:90:39:e1:74:6a:a8:
99:ad:f6:99:41:0c:a9:6b:49:31:e9:ce:9a:ba:fa:66:a8:71:
05:d0:1e:52:dd:b3:23:e4:f3:87:c0:81:b5:fa:da:00:12:20:
f9:5f:ac:85:69:cb:bf:f1:1a:9f:85:76:63:30:84:cc:26:a0:
58:f2:68:65:c6:d0:c1:27:3c:1a:f6:b0:06:94:92:94:e2:dd:
b5:0b:ae:75:5f:bc:1e:78:bf:84:29:f3:72:89:7e:6e:2b:1d:
58:a4:99:a1:83:4a:54:33:c0:80:e8:56:be:7c:92:05:c1:d3:
16:e1:a0:10:9f:d2:12:fb:6f:4b:90:90:c0:55:26:72:a7:f9:
77:ed:a3:5b:8e:b3:82:40:55:a9:d0:d0:be:5e:48:08:5f:b9:
f6:15:fc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:17 2025 by rpki-client