Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ICSJvkR1uYu_rW3bB_B8HRfb3vc.roa
File: ICSJvkR1uYu_rW3bB_B8HRfb3vc.roa (raw, json)
Hash identifier: tg5ZGo/h+oygkhLQg3wk44Ey8L2nABulNVYvU9v3o1k=
Subject key identifier: 20:24:89:BE:44:75:B9:8B:BF:AD:6D:DB:07:F0:7C:1D:17:DB:DE:F7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3647
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ICSJvkR1uYu_rW3bB_B8HRfb3vc.roa
Signing time: Mon 10 Feb 2025 13:54:10 +0000
ROA not before: Mon 10 Feb 2025 13:54:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13895 (0x3647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:10 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=202489BE4475B98BBFAD6DDB07F07C1D17DBDEF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:76:b9:70:0f:57:51:59:51:c7:e3:dd:a8:4b:
a9:cd:3a:ba:a1:7b:2a:f3:53:c2:9c:5c:16:00:e9:
75:11:6f:53:6f:1a:9d:e3:30:e4:ce:07:21:96:d6:
d4:6c:82:74:55:c5:d7:42:6f:0a:d4:71:30:27:6e:
47:bb:3e:d4:9f:d4:4a:c0:e4:da:df:97:f6:9b:ec:
f6:ee:b6:35:a6:24:aa:26:c0:d0:31:a1:f3:86:1c:
70:3b:e6:11:18:5a:a0:bc:58:8c:d3:41:d3:21:cc:
05:76:bd:a4:3f:e1:64:86:3e:ec:8b:31:d7:96:1f:
c8:97:33:32:13:b0:14:56:bc:15:fb:d3:4d:bc:04:
b6:2d:2c:a5:e2:c3:39:a5:14:99:61:e5:6a:35:fb:
b4:87:7a:ad:ce:20:af:1e:4b:a1:46:42:44:80:f7:
f2:63:8f:1f:13:de:31:4f:be:ba:2f:1f:ba:e5:08:
56:85:61:eb:e2:95:c6:ce:50:00:bc:54:5a:74:2f:
7f:8b:db:f6:93:13:9f:19:3c:fa:4d:e5:d2:bc:9e:
74:74:40:36:05:75:fa:95:0a:51:fc:1b:c2:8e:f5:
b2:8b:17:a1:94:93:d7:91:78:dc:57:0a:b5:c9:cb:
90:eb:c7:57:73:34:e4:38:03:d0:fc:18:ca:4a:e9:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:24:89:BE:44:75:B9:8B:BF:AD:6D:DB:07:F0:7C:1D:17:DB:DE:F7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ICSJvkR1uYu_rW3bB_B8HRfb3vc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:88:21:77:46:94:23:51:11:bf:ba:41:d0:e3:9c:36:7f:f3:
68:b0:f0:68:da:78:64:a7:0d:60:7d:a3:68:f8:d9:3c:10:44:
17:3b:6a:c1:a9:d9:b4:67:62:39:8c:64:ca:3e:75:71:74:4e:
3b:db:65:07:e7:92:b2:06:89:45:a8:0b:3a:c7:55:13:fe:47:
c2:81:3e:6e:ef:2e:8f:b5:db:73:ef:af:8b:83:9e:91:b9:ea:
53:9b:34:10:20:e4:e0:cc:5c:4b:dc:f6:e8:88:98:7e:15:91:
fd:4d:91:47:ea:4b:f5:eb:b0:d8:81:b6:bf:13:12:59:d6:00:
56:66:be:c0:42:85:6a:04:85:fb:04:d7:09:20:71:7b:13:54:
61:54:93:48:02:7c:24:a5:10:0c:35:c8:98:21:bc:4b:57:c0:
12:3b:c2:f4:91:2e:b0:e7:af:ea:e8:a1:79:11:a1:d8:77:5b:
f9:82:7c:06:69:28:70:cc:d8:81:db:24:36:f1:1d:70:85:7f:
54:e2:2f:68:7c:82:65:be:d9:8c:b4:3a:8f:7c:b1:2b:96:1c:
fc:00:93:8a:ec:06:b7:37:d0:43:5b:f4:4f:b7:ae:b9:11:fb:
a2:95:da:5d:c9:ba:a6:fe:04:6c:78:f8:3e:91:8f:0a:fe:7d:
5e:40:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:58 2025 by rpki-client