Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/91HlRJc57_qWwGTUA27Cccea77E.roa
File: 91HlRJc57_qWwGTUA27Cccea77E.roa (raw, json)
Hash identifier: sXpF3uKJcprTAasR6s9Lrxc/wuChhQRU+1xYtMcfDYM=
Subject key identifier: F7:51:E5:44:97:39:EF:FA:96:C0:64:D4:03:6E:C2:71:C7:9A:EF:B1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3599
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/91HlRJc57_qWwGTUA27Cccea77E.roa
Signing time: Mon 10 Feb 2025 13:53:30 +0000
ROA not before: Mon 10 Feb 2025 13:53:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 211.76.121.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13721 (0x3599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:30 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F751E5449739EFFA96C064D4036EC271C79AEFB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fd:00:2d:3b:d0:e3:bb:2a:53:36:46:11:7b:
9e:14:08:e9:42:11:11:af:48:f8:d4:c8:a1:22:e3:
e7:fe:9a:8e:90:05:82:ab:b1:10:5b:8c:a8:4c:75:
8a:b8:80:2a:78:e1:21:30:3e:24:32:4e:5e:d4:77:
21:20:cd:a1:c0:50:cf:18:43:6e:48:8a:72:e9:14:
02:63:44:3d:8d:89:b4:de:47:af:19:8b:99:0a:96:
de:0b:c4:84:fd:1d:66:e1:1e:7b:f9:ff:88:e3:2e:
cf:23:c2:78:59:eb:61:8f:a3:20:1b:5a:7e:40:4a:
73:24:2a:89:29:31:88:b2:08:90:d7:99:9e:57:dc:
25:35:65:bb:28:74:4c:60:c3:0b:fa:3e:c6:43:3c:
37:64:4d:d8:2a:50:3a:80:74:f7:86:51:68:00:57:
c3:ff:70:a9:cb:19:9f:5f:34:42:87:6c:89:97:36:
c0:02:a6:14:90:a3:e6:60:b5:e6:a6:3f:81:03:f8:
02:ff:64:db:c1:1c:0b:02:9e:21:e1:66:27:70:f3:
70:e5:80:f3:3e:18:1c:10:a2:af:6f:73:31:de:69:
39:21:2a:89:fd:c1:f3:b8:b2:e6:4b:62:a4:5c:b9:
cf:65:bd:c3:02:86:48:bf:02:06:f2:8a:b2:b7:6c:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:51:E5:44:97:39:EF:FA:96:C0:64:D4:03:6E:C2:71:C7:9A:EF:B1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/91HlRJc57_qWwGTUA27Cccea77E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.121.128/25
Signature Algorithm: sha256WithRSAEncryption
64:4d:d9:71:e2:58:77:59:46:fa:64:5d:72:ef:bd:1d:17:63:
1a:7a:5a:50:d9:ff:87:fe:b5:b6:7f:31:40:72:79:39:52:45:
d7:76:52:74:e3:49:90:c8:3d:a3:72:14:1d:03:dc:29:f5:2b:
9b:37:fa:be:dd:95:fb:c7:a3:cd:c9:a6:af:ca:a1:bf:d5:81:
f8:4c:68:60:53:67:b3:ee:fb:c2:92:2c:2d:17:61:7f:5e:ca:
2f:78:f1:51:84:2a:5e:4f:df:3b:25:32:72:79:5b:69:93:6f:
c1:10:67:7e:46:a8:04:de:d1:e4:dc:03:89:05:23:9d:d7:aa:
f3:ba:51:d8:6f:3f:0d:97:2e:23:06:07:15:39:d9:b4:01:ef:
00:9f:86:d3:35:74:5b:c2:a5:ac:87:fa:cd:f4:ad:70:f6:8c:
c0:01:39:d4:44:d0:39:c6:42:f4:7b:dc:b6:8d:25:63:86:2a:
b2:3c:67:9c:e4:15:72:b9:40:3b:07:11:c9:d0:7f:3c:07:c7:
e6:bb:69:74:88:47:c0:61:44:6b:50:db:17:c0:57:84:21:55:
8f:d6:66:b8:22:fa:00:eb:ba:a3:cb:d4:bb:fa:7f:af:69:46:
50:f2:91:cb:32:1a:76:d9:65:4f:f8:f5:62:93:55:0c:e6:11:
b4:b0:f7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:37 2025 by rpki-client