Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M2F8sNJvnuS7SdvJl5MBYl0vayo.roa
File: M2F8sNJvnuS7SdvJl5MBYl0vayo.roa (raw, json)
Hash identifier: OVuXIQnYEgFw7rRikz7rh4iDicxvicifPUNuifI+boE=
Subject key identifier: 33:61:7C:B0:D2:6F:9E:E4:BB:49:DB:C9:97:93:01:62:5D:2F:6B:2A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3695
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M2F8sNJvnuS7SdvJl5MBYl0vayo.roa
Signing time: Mon 10 Feb 2025 13:54:28 +0000
ROA not before: Mon 10 Feb 2025 13:54:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13973 (0x3695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=33617CB0D26F9EE4BB49DBC9979301625D2F6B2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:a4:6f:1d:d6:a2:c8:be:d5:87:54:ee:7e:
e2:33:fe:d3:4d:2c:d2:e5:1e:dc:d1:88:3e:19:cc:
dc:c5:0f:af:14:ba:b9:57:13:7a:09:b3:5e:a0:88:
61:cd:82:1d:f9:9b:2a:08:00:a1:31:31:04:57:e2:
da:58:fd:59:6b:72:5c:97:81:e4:4f:ac:17:b4:59:
7d:2f:e8:b9:fa:cb:cf:36:7a:ab:6c:7d:26:67:44:
77:4c:05:31:71:1c:7c:9d:32:a1:c5:68:e3:e3:61:
b9:cb:96:0c:55:2a:95:42:6a:e3:3c:52:47:46:14:
cb:62:83:be:9e:33:13:88:26:85:f3:67:26:35:6f:
d8:ff:68:18:ea:fd:4b:7a:72:b4:ff:3b:d2:43:da:
7c:3b:19:5f:71:31:db:f5:f3:34:89:90:8b:e7:d8:
ac:cb:e0:90:4c:e8:d2:7d:75:34:d1:c5:4e:d4:e5:
b2:a3:9c:6f:7d:8b:03:be:b1:66:75:6e:58:47:93:
f8:1f:a7:e6:6e:4c:bc:c6:76:55:53:81:fa:03:0b:
7b:c9:66:4e:9c:9f:00:05:3b:ec:75:44:10:5b:f9:
67:99:8d:59:4a:af:b3:b2:7e:70:21:62:1d:46:51:
c6:28:b4:26:04:39:55:44:05:64:80:a9:a2:05:5e:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:61:7C:B0:D2:6F:9E:E4:BB:49:DB:C9:97:93:01:62:5D:2F:6B:2A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M2F8sNJvnuS7SdvJl5MBYl0vayo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.48.0/23
Signature Algorithm: sha256WithRSAEncryption
44:f7:ff:28:7a:d8:a9:26:30:1a:21:6a:d5:31:c5:49:eb:b4:
4b:9d:f2:6d:ee:d6:c8:c9:42:a6:aa:db:66:30:df:60:31:a4:
10:0d:fe:fb:2d:de:a5:cd:81:60:5a:e7:82:2e:7e:87:8e:84:
d7:5d:2e:d9:39:ac:4c:6a:eb:12:18:e2:3c:04:be:74:1e:62:
6e:9d:31:bf:84:e7:47:33:41:61:ba:61:a6:fe:ad:9e:52:8a:
55:97:9f:39:4b:dc:ec:f7:4a:e7:fa:31:4d:b2:51:f6:ff:6a:
74:26:cd:01:dc:b7:0c:36:74:a7:97:30:c4:ad:6b:11:ce:73:
14:af:9c:09:8e:6c:d7:38:9a:63:86:f2:95:2e:13:da:bb:e8:
18:5f:d5:2e:ab:a4:56:27:fa:b3:13:a1:4d:a4:c3:cf:62:af:
56:fe:d1:a5:9c:c9:47:14:03:bb:bc:e5:d4:75:9f:47:09:50:
a9:2f:d3:99:0f:0a:69:fc:2a:e6:de:2b:ca:d4:71:0c:a9:a0:
7e:dc:8a:b4:30:04:b6:b7:12:c0:cf:bc:d4:d2:e8:40:ef:94:
ee:f8:cf:04:6f:be:61:4b:34:a3:98:49:3a:46:89:13:c6:63:
d4:fa:95:f3:de:0c:23:74:ac:3a:b7:0c:64:76:93:2a:36:ea:
a9:9c:4d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:06 2025 by rpki-client