Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dO5XQq_LVoJk4k9Cn942kWxPNkI.roa
File: dO5XQq_LVoJk4k9Cn942kWxPNkI.roa (raw, json)
Hash identifier: dnOtXmlvys5fUjATXc3cMi/L0aeS4YVMJ4vn/5+GrUU=
Subject key identifier: 74:EE:57:42:AF:CB:56:82:64:E2:4F:42:9F:DE:36:91:6C:4F:36:42
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34BC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dO5XQq_LVoJk4k9Cn942kWxPNkI.roa
Signing time: Mon 10 Feb 2025 13:52:39 +0000
ROA not before: Mon 10 Feb 2025 13:52:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.201.64/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13500 (0x34bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:39 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=74EE5742AFCB568264E24F429FDE36916C4F3642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:0d:c1:eb:14:87:04:37:85:18:43:b2:ca:
64:45:4a:fc:81:54:c5:02:36:62:21:03:2d:d5:66:
52:42:e1:3f:66:74:c5:7f:68:70:df:22:87:96:12:
56:bd:49:78:14:cc:60:0e:70:61:61:38:f2:e6:0c:
e8:4e:33:df:cb:37:75:a2:d5:d0:7b:73:c6:9c:5c:
ed:bb:24:f0:8b:43:68:01:fd:91:b4:d7:6b:a7:d9:
e4:b7:c5:9d:2e:92:9c:72:f4:a0:cd:9c:1f:82:52:
04:4e:bd:c7:36:bd:80:ca:42:dc:f6:01:66:f9:0d:
e4:00:4d:e3:df:86:75:e8:02:35:c1:5f:86:f9:71:
de:bd:70:45:19:3d:f6:26:2e:85:7a:19:3d:14:50:
8c:d1:32:d7:ba:1c:24:8d:18:3f:b2:b9:16:f0:1e:
87:f1:35:01:37:87:53:01:bf:bc:ce:fd:fd:b9:52:
c7:19:cb:2c:28:54:77:95:33:32:09:76:81:32:af:
d2:57:f5:0d:ea:fd:07:ab:bb:2b:aa:86:21:b0:f4:
69:17:c4:82:70:b1:e6:1b:f5:bb:71:49:2f:eb:e2:
d2:1f:07:f2:a6:6c:a9:51:b4:38:ef:76:dd:90:ec:
e0:ee:d0:36:aa:89:6d:c1:ba:b3:86:ed:6d:1a:da:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EE:57:42:AF:CB:56:82:64:E2:4F:42:9F:DE:36:91:6C:4F:36:42
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dO5XQq_LVoJk4k9Cn942kWxPNkI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.201.64/26
Signature Algorithm: sha256WithRSAEncryption
94:fe:7b:90:f1:67:9a:5c:ac:73:00:e4:de:06:d0:01:df:97:
bf:80:c4:e0:7d:70:34:a0:32:9d:ac:ec:3f:f1:21:cd:be:78:
a2:8e:f3:b4:94:1a:b5:b2:bc:39:18:49:e4:b5:12:dd:f8:ab:
62:c2:f5:da:77:c6:96:bc:83:4a:5f:a8:f3:a2:35:df:2e:d9:
fb:50:fa:80:c3:de:b8:91:ba:75:34:8a:1d:2d:7f:86:2c:8d:
83:30:c6:99:a7:1a:f3:e3:50:c5:98:65:2e:1b:47:20:25:7f:
8a:85:3c:ac:ae:a9:6a:75:17:04:de:17:83:12:58:f3:3b:0c:
90:e2:b3:73:dc:4a:c6:e5:c7:2f:d2:44:68:b3:1e:65:c3:f9:
e0:46:39:5f:a5:34:cb:4a:a4:97:6c:12:dc:ae:72:d1:cf:14:
4e:f7:9a:1b:85:78:e7:f6:26:3e:d9:da:44:6e:e5:69:1b:35:
82:10:b1:f2:03:de:95:13:ec:69:fe:4b:f0:c7:68:a3:24:c9:
5e:bd:4a:47:a3:ca:7b:f0:e4:7d:7a:40:52:9e:5d:71:8d:68:
9d:dc:bc:5d:13:b0:d9:da:ee:de:d4:7c:70:d1:0f:92:59:44:
5f:06:af:7c:7c:f3:e7:f1:33:da:84:5c:78:76:a9:44:61:b1:
be:91:28:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:11 2025 by rpki-client