Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBzFe961u8I3IJoQepXn3HU1U_I.roa
File: cBzFe961u8I3IJoQepXn3HU1U_I.roa (raw, json)
Hash identifier: 4n23uzdP9dEGQDfq6JpRcUkglyq8nO5z5CO2QqTHGYw=
Subject key identifier: 70:1C:C5:7B:DE:B5:BB:C2:37:20:9A:10:7A:95:E7:DC:75:35:53:F2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36AC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBzFe961u8I3IJoQepXn3HU1U_I.roa
Signing time: Mon 10 Feb 2025 13:54:33 +0000
ROA not before: Mon 10 Feb 2025 13:54:33 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13996 (0x36ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:33 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=701CC57BDEB5BBC237209A107A95E7DC753553F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:71:80:d1:07:88:51:4d:07:a8:d5:78:77:
aa:d5:30:75:8d:8a:81:73:39:38:c1:c9:8c:de:16:
d2:d5:cf:f2:d2:07:dc:0d:8e:ad:45:0a:7c:f7:52:
27:61:c1:b4:eb:55:10:90:00:f6:21:84:32:53:82:
90:cb:9f:17:a9:d5:8f:a7:df:7a:70:e4:04:61:39:
28:0b:11:bd:cb:c4:7b:85:19:13:6c:33:12:2a:29:
fb:93:f5:61:f2:fc:e8:65:42:fd:97:39:2a:0b:68:
15:93:8e:8c:aa:ba:42:94:46:5b:81:0d:44:b4:5c:
71:6a:e0:ac:d0:e4:04:7b:9c:07:01:7c:28:4a:54:
18:00:4b:3d:57:43:fa:ef:91:a7:b1:cb:ab:6f:46:
87:b5:12:ad:7b:d9:61:4c:2d:71:65:2a:c8:30:db:
91:ed:2d:fa:17:7e:7c:35:61:37:7e:e2:e6:0f:08:
b0:87:61:de:89:86:2c:79:8e:1f:6d:0c:3b:97:25:
66:12:cf:dc:91:2f:7e:e1:01:56:38:f3:ab:fe:f4:
db:c8:d3:72:58:70:1e:b1:ed:e6:45:cb:01:4c:60:
94:81:60:35:4c:a9:8e:82:c8:83:e3:47:59:11:c5:
40:aa:eb:b6:ce:54:5b:8d:cd:ce:22:4a:59:29:9f:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1C:C5:7B:DE:B5:BB:C2:37:20:9A:10:7A:95:E7:DC:75:35:53:F2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBzFe961u8I3IJoQepXn3HU1U_I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.52.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:dc:fd:3a:89:bd:f0:83:e0:13:67:ec:a8:ff:45:7b:6f:b1:
52:5b:db:6c:93:8c:46:13:98:23:55:8a:b3:18:37:54:d9:d3:
c8:9d:c7:61:d2:fa:21:14:13:dd:1d:38:a9:bd:16:76:a8:f2:
d6:ad:a5:19:95:b0:28:8a:1a:0d:d5:d1:b9:fc:66:7d:7c:44:
18:24:68:c6:46:3d:9f:50:7d:4e:07:f7:f6:df:4d:25:b1:18:
32:b0:48:2a:40:92:0d:58:86:9c:46:e8:2c:82:96:17:36:ca:
a9:9e:33:fc:ce:83:b6:85:cd:11:56:65:4d:6a:79:8d:ed:aa:
6b:2d:7c:87:a4:d4:6b:76:64:7f:72:88:7d:cf:bb:ad:1a:0d:
64:a0:b2:2a:b7:a7:21:fb:26:8f:ce:56:c0:de:57:c5:72:fb:
77:26:4c:84:b1:f0:5f:1f:4d:05:3f:a6:43:f7:cd:3f:5f:19:
ad:81:d8:c3:8a:6d:e6:8a:42:35:1e:af:a8:82:26:42:ef:68:
8e:a3:09:45:7b:64:97:d9:48:1b:bd:08:69:d9:96:ed:95:03:
34:3c:23:25:e8:b3:d0:be:65:31:d6:8a:46:16:ba:46:3a:30:
a4:21:d7:ca:b4:4b:1b:9e:94:31:eb:d9:3d:03:3a:05:31:61:
d4:a6:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:27 2025 by rpki-client