Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AKkdgIevXOWNHJjNx9zxPHx3w4o.roa
File: AKkdgIevXOWNHJjNx9zxPHx3w4o.roa (raw, json)
Hash identifier: gdPrKKWzgAbqy/FiLrodYQ4Cz2D2EwDeFA4z2i2kErE=
Subject key identifier: 00:A9:1D:80:87:AF:5C:E5:8D:1C:98:CD:C7:DC:F1:3C:7C:77:C3:8A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36A3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AKkdgIevXOWNHJjNx9zxPHx3w4o.roa
Signing time: Mon 10 Feb 2025 13:54:31 +0000
ROA not before: Mon 10 Feb 2025 13:54:31 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 211.76.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13987 (0x36a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:31 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=00A91D8087AF5CE58D1C98CDC7DCF13C7C77C38A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:13:95:7a:34:83:63:25:46:7d:8a:12:1b:
d9:7a:a7:bd:b8:9b:bd:7b:d7:19:8b:1b:10:8c:9c:
76:4a:9a:b7:be:53:a9:15:9a:0f:5e:de:17:a4:b5:
eb:db:33:6c:a0:1d:b3:a3:5a:3d:0c:36:99:76:2b:
44:7b:8b:e0:a5:b0:01:2d:68:58:0a:fc:bb:a1:39:
79:60:5a:ab:67:6f:51:e2:18:83:bb:25:f3:bb:71:
49:33:56:2a:17:20:42:ef:47:4a:c7:80:ad:65:e0:
d6:f4:f2:92:19:1d:a3:0d:48:9f:d0:b9:6c:1d:df:
e9:79:99:8a:78:94:29:77:40:25:c4:8c:19:d3:79:
05:58:9a:5e:22:83:a0:72:62:6e:3c:89:89:c7:c5:
43:04:e0:ff:6e:a7:f2:da:30:70:f5:dd:e9:1b:1b:
1f:3e:ff:9f:cd:9c:71:1d:f3:7d:46:db:fc:2e:b7:
97:20:1e:32:7e:f8:e3:b5:f5:8a:5b:39:0a:98:e5:
0e:a3:95:48:fe:65:8d:56:f6:f0:d9:66:e5:f5:c4:
ef:b4:b4:06:dd:60:6e:42:35:83:16:8c:3f:3b:2a:
bd:06:f3:4d:2b:2f:3c:f2:5c:e8:f4:7b:13:cd:19:
e3:00:dc:4c:d3:a0:4c:0d:bb:4b:4f:46:0e:b5:b1:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A9:1D:80:87:AF:5C:E5:8D:1C:98:CD:C7:DC:F1:3C:7C:77:C3:8A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AKkdgIevXOWNHJjNx9zxPHx3w4o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.122.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:93:d6:5f:ae:99:9e:1f:05:2a:f8:49:9d:13:75:19:d7:5a:
a3:82:84:19:95:50:9f:e4:bc:ba:ea:54:a2:de:97:5a:5b:cc:
c1:c5:e7:ff:d6:a4:51:b6:20:ff:c1:6d:77:5d:fd:fd:bc:ff:
25:68:00:66:5e:f6:b0:97:3e:17:09:e6:f0:9c:d3:bb:0c:4e:
02:58:9d:39:38:a6:bc:5a:6c:57:26:17:c3:fc:40:13:29:f8:
c0:82:54:da:40:f1:99:18:05:c8:f8:13:cc:78:e9:32:48:fb:
e0:d5:0f:7b:5c:0a:07:ca:49:01:96:04:b7:07:58:bb:d2:e0:
b4:bc:2d:13:30:9a:64:95:63:1d:57:00:f2:0f:7f:18:98:9d:
a5:e8:ba:b1:be:9f:fb:1b:35:3e:85:cc:2f:b5:d6:22:6f:e1:
1e:09:ed:c8:aa:0b:ce:3c:6c:9d:b2:c4:ca:7f:69:31:bb:d9:
d1:44:cc:03:ad:b3:bf:be:c6:cc:ad:44:df:e8:b7:0c:32:e1:
6a:51:c6:d3:c2:cc:ef:dd:f9:d7:cd:f7:51:2b:2b:66:7f:c1:
e0:91:69:dc:0f:cf:a4:ed:1a:cb:66:03:fb:0a:76:df:2a:11:
b0:ae:fd:1e:93:08:48:a6:45:a3:13:af:bf:c1:2f:9f:08:57:
8b:5a:81:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:54 2025 by rpki-client