Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cs4bxJGdqE5CPg6OhW-JS3lHfic.roa
File: cs4bxJGdqE5CPg6OhW-JS3lHfic.roa (raw, json)
Hash identifier: elaRILRwAztqWTPHC+Jtn9B2eUB9ni1VvdNkviADDiE=
Subject key identifier: 72:CE:1B:C4:91:9D:A8:4E:42:3E:0E:8E:85:6F:89:4B:79:47:7E:27
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3422
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cs4bxJGdqE5CPg6OhW-JS3lHfic.roa
Signing time: Mon 10 Feb 2025 13:52:06 +0000
ROA not before: Mon 10 Feb 2025 13:52:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 211.76.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13346 (0x3422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=72CE1BC4919DA84E423E0E8E856F894B79477E27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:16:78:a3:7e:83:83:43:d8:d5:5e:6e:bf:
68:12:f5:37:77:7d:40:51:19:b2:4c:ec:77:a4:f7:
e8:8d:ae:fa:46:37:23:72:76:24:29:1b:d0:2b:a4:
cc:3e:f4:41:4e:66:10:9e:00:27:d4:7c:39:62:96:
8a:d3:c0:7e:22:bf:e5:ce:1b:74:62:df:bb:7e:d8:
9f:c9:2d:d7:e1:d0:ab:02:b5:75:b1:c1:e0:10:83:
d7:05:df:4c:de:53:d4:a9:89:09:1b:5c:ec:cf:cc:
aa:a8:04:72:dd:5f:0c:6a:a1:b3:8a:f0:43:31:39:
55:a0:a7:ef:77:c9:9b:0a:07:72:72:4b:bb:d0:38:
ea:65:8e:76:e5:23:f3:14:7e:83:b7:7a:53:89:c1:
b6:93:ef:90:b6:d7:dc:78:07:22:9f:a0:5c:5c:9d:
59:33:57:ae:ec:a1:9f:2f:68:09:2a:e1:8f:af:3b:
6d:40:a8:bb:28:1e:9c:68:9a:65:a1:40:2f:d5:5a:
b2:c6:fb:92:ed:74:30:4d:e6:fa:6c:0d:df:f4:c2:
d2:d5:aa:a9:68:73:24:5e:37:f6:00:ae:03:22:7b:
d6:49:bd:71:da:87:1a:1e:e1:6d:dd:ce:d2:fe:79:
7b:1d:6e:7e:c5:73:98:88:77:ee:f2:f1:53:95:bd:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CE:1B:C4:91:9D:A8:4E:42:3E:0E:8E:85:6F:89:4B:79:47:7E:27
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cs4bxJGdqE5CPg6OhW-JS3lHfic.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:7e:b1:4e:89:d1:e6:f7:d5:a3:92:3c:b8:bc:8e:d2:e2:7c:
9f:dc:74:94:d2:3c:94:aa:ab:39:b9:26:bd:a1:64:a7:81:98:
75:51:71:f1:aa:9c:cb:48:f9:d6:7f:89:5c:a6:dd:04:11:1e:
cc:54:2a:cb:88:4e:46:72:31:19:67:f0:1d:01:02:86:a4:b9:
42:3b:4b:98:9f:73:e9:47:a7:16:ad:9f:6d:10:9b:e8:9d:20:
02:fb:ab:2e:ce:9b:e9:dd:6d:eb:34:ab:1c:c3:9b:cf:57:0c:
f4:5a:1b:44:66:a4:c9:cb:c0:7a:a9:cd:a3:94:2a:a2:ed:f4:
03:8e:88:8b:2c:12:dd:af:d8:48:b6:a7:16:23:2c:19:47:b8:
61:04:b4:7d:aa:bf:31:c3:46:2b:35:e2:60:14:c2:f2:ee:5e:
a6:7e:04:d2:4f:a9:59:bd:55:50:97:9b:23:aa:96:c4:e3:ad:
ed:19:8d:ae:95:ba:04:03:40:a6:fd:6e:f4:d1:a1:5d:85:2f:
5c:f3:0f:43:7d:98:99:d2:36:f2:db:0a:a8:30:f6:c0:08:7b:
b7:f6:77:a5:5a:70:c6:fb:b9:41:2f:37:53:3b:78:37:07:55:
b6:36:3d:ca:9e:af:b3:3a:33:a1:d5:22:fa:e0:dd:73:ae:96:
b5:3a:27:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:51 2025 by rpki-client