Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JQLIa5Iab3woVRLQg2ShBvJtXaQ.roa
File: JQLIa5Iab3woVRLQg2ShBvJtXaQ.roa (raw, json)
Hash identifier: 1DPARH3fsBtnJj/WfPSADhDkOHmhRAF1AkFuxsDuIM0=
Subject key identifier: 25:02:C8:6B:92:1A:6F:7C:28:55:12:D0:83:64:A1:06:F2:6D:5D:A4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33B8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JQLIa5Iab3woVRLQg2ShBvJtXaQ.roa
Signing time: Mon 10 Feb 2025 13:51:42 +0000
ROA not before: Mon 10 Feb 2025 13:51:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 211.76.113.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13240 (0x33b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:42 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2502C86B921A6F7C285512D08364A106F26D5DA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:56:f5:f0:04:f8:4d:e4:a9:95:48:f6:cc:
2b:c2:3b:27:a8:e9:6d:85:a5:59:f5:72:b6:57:1a:
4c:37:58:23:ea:e3:53:3e:89:74:f1:de:0b:d1:6d:
c6:71:2c:fd:82:2e:b7:d8:58:3e:b9:c6:f2:59:5a:
fa:7e:83:1b:87:9c:7b:b2:4a:f1:76:2f:fd:33:5d:
55:f8:d8:dd:a7:40:ef:6c:1f:6b:f1:8e:db:e6:ac:
d1:11:a1:f9:3f:7c:ed:dd:96:d2:08:3e:fe:09:2a:
71:18:ce:d0:39:86:56:8b:45:c2:30:4d:21:ce:da:
c2:e7:da:67:56:b5:94:2e:69:81:1e:95:1c:d7:78:
b1:d7:d2:e8:f6:e1:07:a5:1a:86:2b:34:85:20:ab:
ca:a8:43:31:89:25:1d:01:f2:f8:b9:d2:11:60:a5:
13:f2:3b:c3:ce:88:f5:c3:4b:d0:d5:11:b2:f3:ed:
e1:ba:2f:c6:b7:8e:69:35:03:32:75:fb:97:2b:aa:
51:22:25:ec:c0:01:23:03:13:bd:43:8d:d4:d9:7e:
b4:54:eb:8e:b6:d9:fd:f8:19:05:bf:26:c0:9f:ff:
6a:9d:91:e1:25:64:b5:e8:ad:84:33:91:aa:26:26:
37:bb:fc:31:81:8f:e9:f3:aa:d0:4d:90:25:6a:2b:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:C8:6B:92:1A:6F:7C:28:55:12:D0:83:64:A1:06:F2:6D:5D:A4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JQLIa5Iab3woVRLQg2ShBvJtXaQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.113.128/25
Signature Algorithm: sha256WithRSAEncryption
a1:3d:26:f6:be:eb:97:4e:68:55:d9:bb:c7:73:1f:95:d0:2d:
a2:56:1b:f9:b6:89:96:88:aa:89:57:78:90:36:97:b4:31:c9:
ee:12:31:33:de:21:fd:68:dd:4a:d4:0b:f4:2e:5c:7a:5c:9b:
99:01:14:ca:eb:d9:cd:57:6f:cd:2e:b2:f3:d7:a5:0c:17:f3:
86:fb:9c:22:5a:09:8e:47:6e:a3:e5:aa:00:ad:b5:14:ca:91:
16:6b:71:2b:b9:2d:69:98:b5:10:55:b1:e1:a3:1f:c6:59:75:
25:00:fa:ec:f3:62:d1:eb:d2:14:5c:33:9c:31:2e:59:75:09:
12:19:85:b6:c6:e2:04:50:d3:af:74:d5:12:34:70:21:e3:04:
aa:61:d0:07:9b:cd:46:7f:54:b4:d8:b1:c5:ac:71:90:e1:98:
0a:d1:86:09:22:5f:23:80:56:77:39:36:66:6b:cf:fe:fb:95:
74:3e:d9:20:d2:e7:a7:77:42:16:ac:49:50:be:d2:76:85:a1:
f0:9c:bf:79:eb:f2:46:c8:4a:68:d1:e0:02:f3:f9:cf:6c:c6:
0d:c6:e9:2b:bc:8d:ae:6e:b7:f9:c6:c0:fd:d4:9a:da:cf:ac:
3c:85:43:90:27:0a:2a:47:35:80:00:64:49:91:10:d0:eb:52:
f8:db:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:12 2025 by rpki-client