Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cDa9qIARkP41szs5uiITw3r5Tdo.roa
File: cDa9qIARkP41szs5uiITw3r5Tdo.roa (raw, json)
Hash identifier: 9aaOwqbR+3Za7EStHdW0u2QHzrJ37GVfWFVuXNzozJA=
Subject key identifier: 70:36:BD:A8:80:11:90:FE:35:B3:3B:39:BA:22:13:C3:7A:F9:4D:DA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3645
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cDa9qIARkP41szs5uiITw3r5Tdo.roa
Signing time: Mon 10 Feb 2025 13:54:09 +0000
ROA not before: Mon 10 Feb 2025 13:54:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 45.64.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13893 (0x3645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:09 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7036BDA8801190FE35B33B39BA2213C37AF94DDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:d6:44:b5:68:2c:da:a2:d2:d1:3c:da:ed:
ba:ba:f5:2c:68:50:77:24:1c:9b:23:d8:17:d1:49:
0d:45:35:7f:ba:c5:29:59:46:d5:89:9d:01:37:54:
43:46:06:19:79:7f:55:2b:54:4c:b5:f7:1f:b1:0e:
ac:ad:92:ef:4d:e2:68:ef:67:5c:2e:78:b7:c1:5d:
3d:7c:34:e2:2f:b3:1b:84:ba:c3:1d:8c:6c:fe:ce:
fe:63:e8:7c:89:77:74:00:ef:bd:10:30:dd:0d:d7:
e2:10:f0:77:66:08:e2:67:e3:f3:68:99:67:a1:c4:
e1:1d:e5:3c:5b:35:ee:96:e9:f8:d7:13:ba:73:3a:
76:5e:39:ac:e4:7a:d5:98:ed:c3:b1:37:7a:2b:93:
b8:70:13:56:2b:1b:a8:1f:d1:b9:b4:10:ee:c0:4c:
b6:53:28:5d:bf:21:0e:8e:1b:12:aa:3e:ae:4e:eb:
c0:d4:87:de:a6:c2:d7:db:c6:19:5f:40:34:21:91:
69:9d:14:99:8d:9a:20:01:e1:9f:dd:ba:3a:a0:6d:
d0:d6:1d:21:01:25:26:8c:a3:dd:3f:af:59:74:e4:
44:a2:d4:2a:0a:04:77:c1:2d:0f:ba:74:c0:da:03:
0b:e0:cc:43:27:c1:32:20:3d:fa:71:af:a8:3c:66:
fa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:36:BD:A8:80:11:90:FE:35:B3:3B:39:BA:22:13:C3:7A:F9:4D:DA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cDa9qIARkP41szs5uiITw3r5Tdo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.30.0/24
Signature Algorithm: sha256WithRSAEncryption
06:98:45:09:24:7c:b3:2a:a2:7c:df:cc:02:bb:ac:26:9e:4c:
ea:ac:8d:7e:6f:4b:1a:8a:86:ec:f7:c2:e4:27:32:76:51:01:
d8:f6:9c:aa:3a:00:ba:a4:5d:b0:36:03:3e:58:72:74:f3:1d:
10:21:c8:54:d1:d5:f1:5b:7f:15:53:44:5e:bb:34:7e:4e:8c:
99:3a:1f:d4:d5:b5:61:8e:51:54:7e:6a:2c:7d:81:36:1d:2e:
4d:fd:cc:2d:93:07:b6:f9:32:26:03:2f:12:b1:41:bc:73:c1:
7f:68:06:31:55:60:5e:d1:e8:dc:2e:3e:36:08:ef:e4:03:f9:
cb:b9:15:c1:ef:f0:c6:af:c5:35:d7:7b:8f:b7:7c:d4:4b:2a:
5d:3a:ba:a5:d5:83:69:d6:3d:3e:e5:ca:6f:ca:86:7f:21:8d:
06:04:e2:e0:ee:00:7c:dc:3c:af:01:08:da:8f:98:3b:5a:e8:
af:12:93:53:77:7c:a9:45:98:d7:1c:9b:45:9f:1d:7a:82:c1:
c6:61:51:aa:a1:f9:7b:1a:23:13:c9:6c:fd:63:a4:21:1f:cf:
6f:af:62:bd:06:77:0e:de:9e:96:77:ab:88:f4:7f:79:f9:9b:
69:4f:ba:ed:74:a1:62:76:1b:c5:81:b2:3f:36:1e:67:42:f7:
5d:58:3d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:11 2025 by rpki-client