Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b-KEXfv6Xve0Db75Vy4iVsCJZEI.roa
File: b-KEXfv6Xve0Db75Vy4iVsCJZEI.roa (raw, json)
Hash identifier: 2ojfrd/viTIly0DQeAzZTwc29OvUl6cCFJv6Zp24jOc=
Subject key identifier: 6F:E2:84:5D:FB:FA:5E:F7:B4:0D:BE:F9:57:2E:22:56:C0:89:64:42
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 367C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b-KEXfv6Xve0Db75Vy4iVsCJZEI.roa
Signing time: Mon 10 Feb 2025 13:54:22 +0000
ROA not before: Mon 10 Feb 2025 13:54:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 211.76.115.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13948 (0x367c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6FE2845DFBFA5EF7B40DBEF9572E2256C0896442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:d4:17:33:c8:ba:6c:dc:a8:71:f8:ef:b5:
e9:6f:42:f3:cd:4d:a5:84:66:d7:42:a5:de:64:33:
a9:10:30:d9:02:01:7f:2c:c2:43:c1:c0:89:7e:74:
1f:06:be:d5:e1:8d:6a:d3:b8:21:73:6b:10:12:69:
06:12:32:5a:01:4b:81:51:8d:53:01:e1:1a:37:1b:
6c:07:89:11:44:14:c2:14:a5:38:58:16:b7:68:6d:
e5:49:b3:cc:2e:fc:d7:22:02:ae:0a:a5:17:0a:55:
41:e4:69:1e:6b:77:ec:3a:72:df:1f:13:24:d6:a7:
89:29:e3:d8:5c:64:e4:21:40:1b:c0:1e:4f:6b:1a:
fc:f2:31:da:48:d3:ba:ac:7e:ca:17:3e:99:01:e9:
f7:a3:c1:a4:2b:55:1c:45:92:ba:b3:f8:a8:a4:00:
4b:0b:36:a8:f5:a5:d9:bf:03:73:fd:d2:9b:47:d7:
e7:77:b6:d9:7f:63:6c:bc:14:36:c2:59:a3:31:b8:
8c:39:4f:96:d5:b8:5c:09:be:18:13:0b:75:aa:15:
94:1c:2a:59:f0:8d:0a:4c:2c:06:6a:13:04:4a:62:
78:ed:1e:e7:52:07:5e:27:8b:b9:4a:cc:d1:13:8b:
15:5a:58:42:39:cb:60:43:f9:52:69:1a:49:2e:8f:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E2:84:5D:FB:FA:5E:F7:B4:0D:BE:F9:57:2E:22:56:C0:89:64:42
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b-KEXfv6Xve0Db75Vy4iVsCJZEI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.115.128/25
Signature Algorithm: sha256WithRSAEncryption
40:20:97:a3:49:58:dd:0d:1d:ab:99:d1:e5:93:48:f9:4b:14:
63:b3:c7:51:8c:8e:aa:c8:1c:45:20:fb:de:df:38:10:c5:5e:
83:50:a2:6e:c2:2f:d5:8a:f0:0d:a6:99:35:b1:a9:eb:d4:e8:
06:4e:b9:67:80:9a:57:8c:ef:d3:85:3f:06:69:cb:d6:8d:47:
03:79:86:98:6a:f2:ef:33:21:ff:75:f9:3f:de:84:ab:eb:e2:
65:17:83:62:fd:15:77:58:dd:94:45:b2:11:8a:1c:2d:aa:08:
22:6c:e4:b1:b6:9e:cf:a0:a0:c4:2b:3c:41:52:f6:c2:a8:6c:
30:38:4f:35:20:25:10:cc:ad:d4:ea:aa:8c:8c:86:88:fa:eb:
5d:d9:0e:15:87:97:9d:91:59:e4:2e:a1:2e:fb:54:6e:90:2e:
e1:22:63:57:9f:7f:fe:9e:0c:08:2b:4d:00:fd:f9:6d:44:30:
8f:57:6f:7b:f6:24:7e:62:ef:af:bc:6a:3c:72:93:33:ac:5f:
a1:7d:4e:85:17:6f:70:6f:99:3f:d5:6d:70:cf:f0:eb:77:97:
38:22:41:88:0d:b9:08:60:64:5a:27:9f:df:de:f5:d9:4e:b5:
78:cc:69:d6:6f:b5:22:ac:6c:3d:15:f4:e6:21:2d:ac:4d:be:
fc:5f:44:7a
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICNnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzU0MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZGRTI4NDVERkJGQTVF
RjdCNDBEQkVGOTU3MkUyMjU2QzA4OTY0NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAD9QXM8i6bNyocfjvtelvQvPNTaWEZtdCpd5kM6kQMNkCAX8s
wkPBwIl+dB8GvtXhjWrTuCFzaxASaQYSMloBS4FRjVMB4Ro3G2wHiRFEFMIUpThY
FrdobeVJs8wu/NciAq4KpRcKVUHkaR5rd+w6ct8fEyTWp4kp49hcZOQhQBvAHk9r
GvzyMdpI07qsfsoXPpkB6fejwaQrVRxFkrqz+KikAEsLNqj1pdm/A3P90ptH1+d3
ttl/Y2y8FDbCWaMxuIw5T5bVuFwJvhgTC3WqFZQcKlnwjQpMLAZqEwRKYnjtHudS
B14ni7lKzNETixVaWEI5y2BD+VJpGkkuj/LfAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUb+KEXfv6Xve0Db75Vy4iVsCJZEIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ItS0VYZnY2WHZlMERiNzVW
eTRpVnNDSlpFSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT
THOAMA0GCSqGSIb3DQEBCwUAA4IBAQBAIJejSVjdDR2rmdHlk0j5SxRjs8dRjI6q
yBxFIPve3zgQxV6DUKJuwi/VivANppk1sanr1OgGTrlngJpXjO/ThT8GacvWjUcD
eYaYavLvMyH/dfk/3oSr6+JlF4Ni/RV3WN2URbIRihwtqggibOSxtp7PoKDEKzxB
UvbCqGwwOE81ICUQzK3U6qqMjIaI+utd2Q4Vh5edkVnkLqEu+1RukC7hImNXn3/+
ngwIK00A/fltRDCPV2979iR+Yu+vvGo8cpMzrF+hfU6FF29wb5k/1W1wz/Drd5c4
IkGIDbkIYGRaJ5/f3vXZTrV4zGnWb7UirGw9FfTmIS2sTb78X0R6
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:32 2025 by rpki-client