Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MvpROBNvko64005fkzwUjljMN8k.roa
File: MvpROBNvko64005fkzwUjljMN8k.roa (raw, json)
Hash identifier: zVyYwZzqOoG9q7yqpTdw0tNsxTqhfKsMQOiPENQ8NV8=
Subject key identifier: 32:FA:51:38:13:6F:92:8E:B8:D3:4E:5F:93:3C:14:8E:58:CC:37:C9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33A8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MvpROBNvko64005fkzwUjljMN8k.roa
Signing time: Mon 10 Feb 2025 13:51:38 +0000
ROA not before: Mon 10 Feb 2025 13:51:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13224 (0x33a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:38 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=32FA5138136F928EB8D34E5F933C148E58CC37C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:f3:b7:d2:a8:bd:a6:25:9a:80:09:dc:54:
dc:ee:71:ed:90:85:85:68:f7:f8:d1:46:e1:76:f2:
97:25:ae:fc:30:cd:63:cd:26:3c:dd:0e:1f:41:26:
64:ba:97:d0:e8:06:fe:a1:b4:82:4d:7f:2a:8c:61:
29:7f:f0:bb:ea:a9:51:ee:21:b9:c0:90:9f:26:03:
30:9f:7d:91:95:d2:c8:ff:6e:b8:bf:fd:91:2c:25:
02:49:21:59:42:da:ef:f4:fd:7f:1d:87:88:39:02:
fa:2a:d0:85:36:75:04:fd:cf:8f:1d:66:83:a4:25:
4c:86:de:d0:12:64:93:87:9a:72:85:bd:d9:b9:d1:
fb:b4:0f:a9:8e:98:79:b3:ef:a9:ad:f9:ab:27:1b:
99:f2:06:ef:02:d7:47:8c:19:8e:80:b5:b2:51:3e:
ce:a1:8d:1b:f8:03:e6:5a:65:86:f1:da:a8:e8:a0:
d9:41:79:52:ae:99:fc:57:89:67:a7:3f:e4:ee:bd:
17:af:b1:a5:46:70:8f:4c:a7:14:92:4f:18:65:33:
fa:f3:99:f2:50:37:a0:0f:3f:61:cb:e2:43:c6:c8:
c7:81:bf:ae:dd:7e:01:33:04:30:4b:69:fb:8b:c4:
78:b6:d1:72:f5:2c:be:cc:87:6e:46:64:29:9e:15:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FA:51:38:13:6F:92:8E:B8:D3:4E:5F:93:3C:14:8E:58:CC:37:C9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MvpROBNvko64005fkzwUjljMN8k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.244.0/24
Signature Algorithm: sha256WithRSAEncryption
40:81:16:51:32:75:c9:ba:08:23:9c:f1:8b:cf:6c:a6:41:fb:
60:c5:0a:de:01:c6:55:78:6c:d2:24:12:db:6e:e6:f9:5a:4c:
28:ab:75:25:cb:90:34:36:78:09:e6:ed:73:8b:72:67:f9:cf:
38:a4:b4:d6:6e:a9:33:35:0f:59:3a:3f:2d:85:17:70:50:95:
6e:15:18:e7:9f:1b:b5:f7:ff:37:bc:7a:8e:58:57:1c:e2:37:
da:19:06:ff:a5:a5:d1:0d:46:f7:8e:75:d7:6a:22:ee:dd:90:
73:f1:0f:5c:46:b0:24:bf:4d:0b:7e:16:dc:17:c4:3b:c5:e5:
45:10:d9:70:a6:f3:4d:c0:4d:4a:a2:71:3b:17:35:b3:d6:b5:
29:3a:17:f8:37:79:d2:3c:91:bf:95:1b:56:81:aa:fe:f2:09:
61:9c:a0:54:ce:3d:9a:06:91:de:bb:85:ea:f8:59:fa:0e:26:
dc:e4:f8:e5:f9:a0:ff:bb:99:6b:91:e8:c2:e3:ec:3c:0e:55:
ee:20:99:f5:ba:9f:3f:11:fd:4c:68:87:61:4c:1a:9d:3e:32:
bc:2f:18:6d:b2:d8:1f:1b:28:3c:ee:2a:8b:ba:0a:d0:18:f5:
6d:30:79:47:6e:56:f6:ea:7e:58:f7:9d:3c:85:d9:c2:9c:a3:
b4:2a:df:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:07 2025 by rpki-client