Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/au1U5scuqz-11KznC_jOBskpt-c.roa
File: au1U5scuqz-11KznC_jOBskpt-c.roa (raw, json)
Hash identifier: Hwq4VKFdnhE722Tes/uHAE1LzIJgJPSpdPFXq4VvQhc=
Subject key identifier: 6A:ED:54:E6:C7:2E:AB:3F:B5:D4:AC:E7:0B:F8:CE:06:C9:29:B7:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35A2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/au1U5scuqz-11KznC_jOBskpt-c.roa
Signing time: Mon 10 Feb 2025 13:53:32 +0000
ROA not before: Mon 10 Feb 2025 13:53:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13730 (0x35a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:32 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6AED54E6C72EAB3FB5D4ACE70BF8CE06C929B7E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:59:f8:86:7f:e1:ac:ee:84:00:43:63:d8:
5e:f4:b4:c9:d5:31:7d:5a:12:ed:db:25:8d:e4:a3:
5b:2a:e7:df:cf:ac:be:64:9c:73:a8:1c:11:17:2b:
6c:de:59:0f:09:e4:f8:56:7d:f3:f5:81:62:06:7e:
f5:16:b4:66:33:87:5a:05:ee:3e:63:6f:c8:40:83:
c0:d6:5e:cb:c0:00:ac:2a:e5:69:61:7c:a2:57:b1:
c1:47:4a:00:12:61:29:a5:e7:ab:f7:58:64:26:ec:
a7:fe:3a:8b:3d:a5:8c:85:28:d2:0b:4c:0d:3a:37:
cc:95:e4:ef:bb:1f:fe:b0:64:0a:31:b5:62:34:55:
41:a4:3f:c7:a9:05:9e:0f:4c:2b:dc:f0:ec:1f:cb:
89:55:59:19:87:f5:55:3f:af:97:7c:68:c5:f4:ea:
44:d2:26:b4:52:c2:9e:ef:58:ce:06:23:67:5a:21:
db:1d:5c:24:7f:79:56:42:b7:ae:64:2e:71:0b:69:
72:b3:96:d8:8e:68:68:a1:48:ca:55:d7:a5:e6:5e:
4c:1f:2c:6e:7c:b2:47:6d:d5:8e:b8:b3:fe:f8:28:
35:c3:14:9a:6a:f6:e2:d6:c9:eb:78:f4:0c:44:2e:
14:c5:bb:91:35:54:de:f8:03:39:5d:b7:7a:11:d3:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:ED:54:E6:C7:2E:AB:3F:B5:D4:AC:E7:0B:F8:CE:06:C9:29:B7:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/au1U5scuqz-11KznC_jOBskpt-c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.100.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:99:21:14:09:10:4c:9c:68:81:f8:fc:a6:13:fe:7b:f8:2c:
49:3c:eb:fa:bb:b7:d9:29:48:91:1f:40:6a:50:f0:c9:7b:de:
37:dd:33:38:56:94:ca:b3:48:0a:1f:c9:96:b9:a4:14:51:fa:
ba:fe:5b:12:5c:17:bc:63:f1:71:d8:a1:85:0b:83:05:b4:92:
7b:48:c3:5a:f6:ee:7b:1b:4d:cb:d4:ef:6d:ca:91:e1:bd:2c:
a5:cb:d0:e1:93:8c:e9:e3:26:91:48:10:68:b2:21:6d:36:6b:
42:50:76:29:ef:4c:80:97:8d:d2:be:6e:b5:b1:53:c5:79:74:
0a:45:2a:b2:24:ee:57:99:ad:59:6e:26:f7:ee:3b:d9:8c:72:
0b:35:84:b4:75:dc:94:9e:ed:fa:71:b6:b7:3d:8f:cc:c0:ff:
95:7c:c4:8f:f8:6e:b4:d0:33:c3:2e:c2:97:b2:dd:bf:c9:95:
a1:0c:ab:60:39:41:07:9e:7a:a4:e4:f0:96:bc:83:ff:a0:d6:
f6:e0:60:65:34:e3:f2:a8:ff:61:32:01:43:65:bd:53:43:b2:
93:dd:91:1e:5e:b9:23:5a:55:9a:40:b6:4a:4e:ee:b3:a9:a1:
5c:cc:5c:40:0a:43:2b:c2:6b:05:9c:42:ea:24:dc:72:be:3d:
63:d7:bb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:31 2025 by rpki-client