Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IN_bi4FUE4PM2qKLUqAEpxN1zw4.roa
File: IN_bi4FUE4PM2qKLUqAEpxN1zw4.roa (raw, json)
Hash identifier: h3x8LIXg6GPlJhmZLDyiHAG69dRx3CPcE7UwrWVBxWw=
Subject key identifier: 20:DF:DB:8B:81:54:13:83:CC:DA:A2:8B:52:A0:04:A7:13:75:CF:0E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3646
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IN_bi4FUE4PM2qKLUqAEpxN1zw4.roa
Signing time: Mon 10 Feb 2025 13:54:10 +0000
ROA not before: Mon 10 Feb 2025 13:54:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 211.76.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13894 (0x3646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:10 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=20DFDB8B81541383CCDAA28B52A004A71375CF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:6a:13:04:bc:28:51:98:2a:94:9f:d7:07:
be:24:86:73:98:c5:5d:72:d0:a9:c6:30:9f:55:6b:
51:3a:4d:ef:2b:55:b6:41:66:16:12:80:26:e9:c2:
b3:27:87:f2:5f:35:8a:e2:c9:d7:e3:8f:8e:63:4f:
d0:0d:9a:e8:c8:eb:05:a5:50:75:90:a0:b1:51:86:
e8:7f:f9:bd:54:3b:4c:5e:29:a4:83:06:0f:ec:9b:
2a:5e:49:7c:d2:2d:21:11:ee:9b:55:90:86:92:90:
9f:c3:da:74:a1:b1:33:53:d0:16:8b:19:e6:2f:e5:
f9:45:6a:dd:a4:21:65:1f:bd:dd:48:1c:d4:e1:30:
60:8b:74:74:0e:36:31:f3:6b:d3:47:d0:d1:d8:86:
17:f0:7d:b6:4b:2c:05:4b:f8:00:07:7e:4b:11:bc:
3f:e9:fb:68:bf:71:51:d2:c4:40:06:2d:81:8c:55:
77:67:71:29:87:27:64:03:11:7d:a8:d2:07:ae:87:
22:75:6f:21:9e:3c:25:70:c8:27:9a:5b:63:b3:f1:
3b:f5:de:db:25:a6:5e:e8:c9:4b:86:f9:34:a2:ba:
67:06:7b:0c:71:9c:0a:54:96:a7:9e:6b:27:0e:5a:
89:6e:18:78:ec:a1:2d:ec:80:b9:c3:16:c3:5e:02:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DF:DB:8B:81:54:13:83:CC:DA:A2:8B:52:A0:04:A7:13:75:CF:0E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IN_bi4FUE4PM2qKLUqAEpxN1zw4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.125.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0a:d0:f2:33:13:10:a2:c0:67:b7:0d:9d:08:d1:13:8b:e1:
27:f3:75:a5:5b:f1:11:e3:ca:d6:22:c6:9e:1d:6f:15:c9:af:
01:c5:ca:cc:0b:99:41:36:90:c6:c4:98:e7:ec:e6:a9:e9:ef:
44:87:11:86:a4:f8:04:33:57:16:88:de:fa:4c:76:c2:67:69:
b4:d9:47:bb:6a:90:11:50:b5:c4:87:eb:e2:84:61:92:71:60:
19:68:b7:66:0b:5c:a1:1d:84:2e:ef:97:6a:5f:9f:09:44:7f:
04:91:cf:d0:4a:b3:ac:fa:ec:94:17:cc:44:9b:03:67:a8:40:
df:b2:a2:25:06:73:b4:77:81:77:6e:67:f3:52:29:4a:f6:38:
d3:f9:cf:2d:ae:aa:5a:4d:49:ed:ca:65:9b:18:6b:f1:84:22:
86:33:52:3a:c0:9e:4b:55:f5:66:63:b2:c0:cd:74:63:c2:10:
1e:61:2c:2f:db:dd:a0:1d:34:13:b3:29:9a:c8:96:27:ea:8a:
64:86:a9:94:89:36:ae:26:9f:21:81:b3:f7:97:9c:9c:58:61:
a6:7f:f0:45:ff:cc:e1:e5:21:80:0d:4a:ec:93:36:8a:e0:b3:
e3:62:34:66:16:e1:97:16:de:a7:80:51:a1:38:de:12:13:78:
ae:cb:e8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:58 2025 by rpki-client