Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B0HQlU9p8Nx-izTxxk9MKot0J2s.roa
File: B0HQlU9p8Nx-izTxxk9MKot0J2s.roa (raw, json)
Hash identifier: OIWS07l4m7gIwVUS4Olcf9GxGDIpIVEB4EzrMM+6Ieg=
Subject key identifier: 07:41:D0:95:4F:69:F0:DC:7E:8B:34:F1:C6:4F:4C:2A:8B:74:27:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 362F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B0HQlU9p8Nx-izTxxk9MKot0J2s.roa
Signing time: Mon 10 Feb 2025 13:54:04 +0000
ROA not before: Mon 10 Feb 2025 13:54:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13871 (0x362f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:04 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0741D0954F69F0DC7E8B34F1C64F4C2A8B74276B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:03:79:50:6f:4e:95:e0:d1:96:c3:7e:f2:
99:5e:f8:79:b4:1b:31:38:b1:a3:2a:dd:3e:68:cb:
81:eb:1d:08:d5:21:e6:6a:0f:6a:85:c4:5e:8d:45:
55:53:20:76:98:e6:4e:65:d3:da:83:cf:00:49:c0:
b7:d8:92:76:56:0b:d0:cf:0a:60:a6:7f:1d:44:a8:
0a:3c:5f:de:bd:a1:3d:22:b6:1a:3d:32:ed:8b:34:
01:19:30:09:c0:65:68:86:8e:ee:8c:0c:bb:b9:0a:
11:5a:29:0a:73:f3:e3:31:9b:c0:6b:40:89:0c:91:
45:ed:a7:15:45:dd:3d:02:1f:1f:46:19:20:58:ea:
a8:e3:e2:5f:3f:f9:ed:87:a5:db:27:33:a5:77:43:
f4:9e:48:d3:3b:66:dd:0b:11:48:dd:62:f5:d4:c8:
6c:64:6c:6f:c6:83:9b:91:33:72:d3:23:0a:a2:b7:
7e:49:03:bb:64:d3:c4:ba:4b:20:13:93:d9:9d:07:
7f:1e:94:9f:88:70:4c:d4:2b:91:86:ef:fa:51:ed:
1a:fb:a3:e5:4c:09:d7:6f:83:8d:56:c9:bf:b0:41:
aa:32:b0:a4:49:1b:bd:b5:ac:ae:05:86:1e:22:2a:
56:84:db:c5:68:18:1e:ea:ec:47:a7:9a:e5:86:2f:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:41:D0:95:4F:69:F0:DC:7E:8B:34:F1:C6:4F:4C:2A:8B:74:27:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B0HQlU9p8Nx-izTxxk9MKot0J2s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.184.0/21
Signature Algorithm: sha256WithRSAEncryption
18:36:8b:b2:14:3b:b8:17:96:69:c3:53:63:fd:f6:55:d9:3b:
fd:df:72:02:fe:f9:e8:4d:2c:ed:1c:4b:0f:68:4d:d1:a7:16:
f8:4d:cd:9a:21:b2:36:8e:72:73:cb:4b:86:e1:4b:f2:3a:30:
c1:f4:e6:c7:21:10:ce:e2:a6:cb:f1:eb:e4:83:b7:3a:61:35:
bb:6b:81:d0:3e:a0:98:d3:37:50:29:82:9d:f3:e9:92:f2:8a:
38:fc:88:3a:b8:a7:d6:03:cc:70:9e:b0:fe:25:43:57:36:42:
0f:a0:86:0d:bb:cd:8f:b6:e6:8d:ba:db:3e:90:ce:4e:5b:77:
d5:be:21:24:2f:1f:8c:4b:04:8d:52:fa:c3:0a:6d:f5:97:51:
aa:5f:cf:7c:5a:a3:1e:57:f7:23:f2:61:4a:88:2b:bc:3c:8d:
62:31:22:47:14:1f:90:54:43:a8:6c:20:4f:2b:6a:67:4e:80:
22:ff:f3:08:2f:41:2f:43:c4:f8:c3:ad:45:62:d0:e7:dc:d2:
2f:9c:86:b9:fd:2c:98:0b:ee:62:20:70:cd:ec:b3:9b:35:95:
11:f8:fa:37:37:d3:4c:99:e4:02:ec:1b:85:b8:ef:90:05:5c:
10:e7:d8:4b:3f:8a:30:c1:96:4d:43:6f:ca:b3:62:5e:60:b5:
37:8d:86:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:43 2025 by rpki-client