Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Veo1y2CyGcYhbC8V7PDYIpbqGVk.roa
File: Veo1y2CyGcYhbC8V7PDYIpbqGVk.roa (raw, json)
Hash identifier: xtp5YR6w+NkiPz8T+Ra+Dmppx69HXe0TEN8M+y2zmnk=
Subject key identifier: 55:EA:35:CB:60:B2:19:C6:21:6C:2F:15:EC:F0:D8:22:96:EA:19:59
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3600
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Veo1y2CyGcYhbC8V7PDYIpbqGVk.roa
Signing time: Mon 10 Feb 2025 13:53:54 +0000
ROA not before: Mon 10 Feb 2025 13:53:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13824 (0x3600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:54 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=55EA35CB60B219C6216C2F15ECF0D82296EA1959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:d0:a0:0a:ef:c4:ca:da:a2:e4:58:6c:59:
3f:16:bd:06:11:39:fe:5d:0f:4b:2b:4e:d6:a4:84:
b8:30:79:dd:1c:89:19:0b:12:f3:ea:72:df:01:ee:
8f:72:dd:e9:1a:01:f1:78:01:0e:74:d2:a8:81:a3:
f6:50:81:2c:02:df:ef:c4:f7:5e:5f:b2:90:40:e9:
3f:06:cb:d3:d6:a8:37:14:03:81:16:42:a7:75:cb:
c8:7a:bf:d5:ee:8e:5e:c3:a3:2a:93:e5:53:38:e7:
6f:fb:07:08:b2:a3:0f:d0:2b:93:e8:ca:c1:ff:28:
41:98:0d:fc:49:32:be:e0:5c:6a:e6:e2:22:00:2b:
42:b3:52:24:67:1c:84:0b:a2:0c:d9:45:61:74:d6:
de:5a:a7:66:4a:c4:5f:c1:f9:59:2e:92:8f:22:d0:
36:77:b3:fb:1b:2f:1d:8e:92:87:e9:49:ca:83:32:
a5:61:47:42:5c:6d:97:46:fc:b6:c8:5b:d5:9e:ab:
bf:73:a4:c5:84:ee:90:f6:55:74:7b:d1:c7:07:3e:
0e:04:a0:f1:82:f3:01:c1:61:53:6a:01:c0:26:80:
67:88:bc:4c:0a:e8:6f:5e:35:69:85:a3:ba:6b:a4:
7e:5f:c1:0b:ed:9f:e4:a6:01:b2:32:47:37:62:0d:
ec:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EA:35:CB:60:B2:19:C6:21:6C:2F:15:EC:F0:D8:22:96:EA:19:59
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Veo1y2CyGcYhbC8V7PDYIpbqGVk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.246.0/23
Signature Algorithm: sha256WithRSAEncryption
19:67:38:54:a3:ce:81:67:6c:d2:ac:8e:54:d5:6c:12:66:30:
96:b7:40:67:c1:a1:0f:af:d2:cb:cf:b6:2d:bc:3e:49:f1:42:
6b:af:3f:6b:0a:1c:78:ec:29:ed:c5:d1:a7:90:bc:ec:49:5b:
56:45:3d:f1:db:de:c0:82:66:18:2e:a4:fd:d2:d1:b3:83:fd:
ba:8d:e1:ac:f9:66:69:f9:80:e2:23:8d:b9:d2:bf:df:75:f6:
db:3c:b9:e0:25:6d:b8:31:dc:fc:26:b4:0d:1f:ad:a2:ec:bf:
9b:93:62:c7:f3:1a:de:3e:44:83:a0:c2:98:2e:12:e7:df:f7:
2d:23:fa:50:63:99:4b:f4:34:11:14:ed:a8:79:32:d9:06:ef:
3e:92:70:8b:4c:1e:f5:b0:d6:27:8d:63:1b:3a:90:4f:4b:f0:
1d:4b:48:ef:35:4d:50:e1:80:6d:2a:88:a4:b1:4b:26:9f:66:
ad:ec:cf:4f:8a:aa:bb:17:a8:e0:9b:b1:e8:93:0f:bc:09:65:
d5:be:97:cb:70:9b:d2:7f:ea:2d:72:1d:99:47:2f:8c:6a:3d:
fe:22:b8:5d:94:e0:f3:0a:ef:ff:ea:0f:9d:98:f7:b0:42:7b:
74:ed:2d:3f:51:62:8f:e6:f2:0b:63:15:9f:19:d2:1c:ee:e6:
50:44:31:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:09 2025 by rpki-client