Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T9FXHY_SWcVYMgm72DdyF6hJsd8.roa
File: T9FXHY_SWcVYMgm72DdyF6hJsd8.roa (raw, json)
Hash identifier: ROHHaLu51wgMByx3OEvJ6OGFZkposMVBnXKFBcH90Xk=
Subject key identifier: 4F:D1:57:1D:8F:D2:59:C5:58:32:09:BB:D8:37:72:17:A8:49:B1:DF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35A9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T9FXHY_SWcVYMgm72DdyF6hJsd8.roa
Signing time: Mon 10 Feb 2025 13:53:34 +0000
ROA not before: Mon 10 Feb 2025 13:53:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13737 (0x35a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:34 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4FD1571D8FD259C5583209BBD8377217A849B1DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:de:6b:2e:e7:fc:e0:12:7d:81:00:84:fd:
fa:a6:de:9b:46:d1:64:c7:db:0f:69:3d:f3:b5:d8:
41:b6:dd:12:bc:11:c8:e2:06:1e:72:ea:90:fc:fa:
16:e3:03:5c:94:1d:58:3b:dc:cf:d2:2a:00:20:8a:
bd:32:a3:04:40:de:77:04:ad:1f:f6:32:d9:82:8d:
e1:60:b6:08:8d:2d:07:b6:98:6e:d8:84:7c:56:9d:
c7:8e:4f:46:84:50:b3:9b:ef:09:51:b4:b3:52:17:
c8:65:65:65:d7:95:3b:e9:8a:b6:a5:5f:86:f9:5c:
9c:29:65:81:17:b2:66:b5:58:80:dc:21:38:8d:eb:
3d:f1:99:ae:8e:24:b3:c9:13:86:8f:60:2a:4e:f0:
09:1d:64:c1:59:df:7b:be:e8:36:d0:f1:14:9c:53:
82:86:56:5b:db:0a:58:0f:11:d7:ee:ab:0f:d1:09:
f4:0d:c0:92:7d:3e:ed:6e:7f:50:3a:f8:c8:96:e1:
a3:3d:77:d2:d9:e2:d6:a9:b7:e5:36:bd:35:4e:94:
da:92:9d:81:a2:82:89:18:06:0b:41:f6:fc:64:a6:
b4:5c:5e:e0:ed:7f:5b:ae:8f:cb:85:dd:43:b9:63:
2e:51:bb:8e:bc:ae:8b:cc:c5:b1:a4:81:01:7d:a1:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D1:57:1D:8F:D2:59:C5:58:32:09:BB:D8:37:72:17:A8:49:B1:DF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T9FXHY_SWcVYMgm72DdyF6hJsd8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.216.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:52:e2:f7:24:3a:04:d2:49:cf:55:93:37:2c:5e:68:6c:dc:
7b:61:e3:0e:41:9b:3e:c7:11:05:d6:d7:5b:61:a6:75:54:34:
a8:44:1e:bf:82:d4:d6:3a:c5:4a:27:58:a6:fd:fa:6e:21:9d:
46:57:67:cd:c5:c6:27:65:52:99:74:a5:83:7b:34:72:7e:d8:
bd:41:7d:f8:3f:16:31:67:ea:c3:68:60:90:62:74:93:bc:6b:
66:8a:cb:7a:8d:f2:54:80:4a:4a:3a:72:c0:ee:dc:fb:0b:3c:
68:07:0a:ad:07:57:b9:c5:3d:72:cb:85:78:2d:a0:4b:d7:85:
b6:8b:17:08:58:30:62:05:be:f5:09:54:61:ea:8e:ce:0b:ed:
d4:f4:0e:13:49:8a:39:26:8d:c7:ad:a9:44:75:b3:2f:ff:20:
2d:44:8b:78:bc:09:b0:1c:10:63:e6:2b:e7:dc:6e:15:bf:ce:
7e:d1:ad:ee:ed:f5:d9:d8:92:be:d4:aa:58:f2:d0:a8:03:9b:
f9:04:f6:ee:34:55:4f:03:a7:a8:13:7b:e8:8e:5e:2a:41:60:
5b:30:59:8c:0b:7d:fe:10:fd:cf:ea:cc:73:a7:f1:35:e0:13:
fb:b1:76:d5:fc:3c:a5:32:6e:08:6c:aa:1c:dd:38:49:92:e8:
09:c7:c0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:32 2025 by rpki-client