Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PjajskBidtRKs83Un5yE45v9T44.roa
File: PjajskBidtRKs83Un5yE45v9T44.roa (raw, json)
Hash identifier: rpRjUA+6SAyrm6LD03pQVi+BEEcE5Z3B8jXh7Ro5Q4E=
Subject key identifier: 3E:36:A3:B2:40:62:76:D4:4A:B3:CD:D4:9F:9C:84:E3:9B:FD:4F:8E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36BB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PjajskBidtRKs83Un5yE45v9T44.roa
Signing time: Mon 10 Feb 2025 13:54:37 +0000
ROA not before: Mon 10 Feb 2025 13:54:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 211.76.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14011 (0x36bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:37 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3E36A3B2406276D44AB3CDD49F9C84E39BFD4F8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:36:7f:73:51:59:6e:49:3d:91:6a:73:a4:
4e:00:34:0b:67:9d:83:38:ef:a7:cb:cf:d7:d0:82:
e0:fc:7b:02:87:b1:c5:08:8a:3d:2c:6c:12:8c:54:
73:87:9c:e0:01:48:66:9a:32:5d:57:bf:9d:ea:91:
4d:42:7e:8d:02:7e:f9:57:70:b3:5c:d8:0e:3e:84:
5c:5e:b8:f5:16:39:07:21:ab:6d:c5:4f:c2:4e:d3:
a6:cd:25:3d:42:b3:d5:b1:41:97:05:e3:bb:1c:23:
f0:68:8e:a7:b5:81:8e:d7:ad:14:45:04:69:32:61:
61:71:05:3e:8b:55:36:6b:f8:41:55:ef:7e:fc:4c:
9c:05:13:0f:a2:34:eb:3b:3d:51:88:2f:24:b4:7a:
9a:60:08:ef:68:8d:1c:a5:1f:0a:09:14:7f:4e:86:
2d:6a:3d:e5:e9:8a:c3:e2:9c:aa:0f:34:3c:97:e1:
05:b9:19:ea:62:e7:09:4e:2f:70:ab:9e:c8:b3:6c:
57:4d:16:ff:cf:62:77:24:0c:36:d9:75:04:2d:6d:
c3:f6:1c:18:5d:da:9e:7f:90:e1:9c:87:32:dd:01:
2b:37:5a:c7:70:cb:b7:f3:21:55:9f:ae:92:04:16:
26:cd:d4:70:cd:af:e4:60:35:1c:a8:7c:98:c3:8e:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:36:A3:B2:40:62:76:D4:4A:B3:CD:D4:9F:9C:84:E3:9B:FD:4F:8E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PjajskBidtRKs83Un5yE45v9T44.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.116.0/24
Signature Algorithm: sha256WithRSAEncryption
99:27:8f:b5:e9:6f:7e:a5:b1:79:1d:90:29:77:44:ba:62:f6:
ab:d2:59:0a:aa:37:c5:0d:93:dc:4f:d3:40:88:1d:07:79:d6:
ac:ed:d2:19:e2:5d:8e:58:af:ae:f8:34:cb:64:0d:ad:a9:31:
7e:72:1d:dd:04:26:8e:59:84:c6:05:8f:87:fd:3a:be:8e:6c:
9b:3e:9b:80:48:1c:00:7c:14:b8:cc:7a:79:32:ca:b8:61:5e:
77:25:fb:37:30:b1:d6:0c:d1:94:a9:8f:57:0a:72:cf:d7:4a:
b8:1e:03:48:fb:3e:80:fa:9c:56:49:36:09:44:98:92:57:c4:
d4:20:80:a8:c0:61:58:91:bd:d3:64:ef:bc:ad:e3:79:7c:2e:
ff:1d:5e:74:2b:4f:dd:73:99:70:62:54:92:b4:53:ff:d6:45:
ec:54:2d:e1:30:25:9f:50:22:50:ff:f5:56:28:b5:5c:7c:34:
98:f4:c1:2b:3c:36:13:23:c6:91:1c:89:31:cb:1c:f1:56:60:
a9:bd:69:74:dc:72:53:bc:fe:6f:91:4b:6a:8b:bd:d1:9d:bb:
6f:be:c8:6f:06:11:c6:ab:3e:d9:a9:f0:d8:77:61:01:98:bd:
f7:00:a1:d1:7a:13:2e:a1:8b:c4:4c:a4:b7:b3:66:72:5a:06:
cf:7b:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:08 2025 by rpki-client