Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e7cERuiv9NLBzTlRxJmACYX--9o.roa
File: e7cERuiv9NLBzTlRxJmACYX--9o.roa (raw, json)
Hash identifier: D8boOzEYgoGTSdOjJlbil5NzFX6mLZlwPK6qHuekpnk=
Subject key identifier: 7B:B7:04:46:E8:AF:F4:D2:C1:CD:39:51:C4:99:80:09:85:FE:FB:DA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 340C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e7cERuiv9NLBzTlRxJmACYX--9o.roa
Signing time: Mon 10 Feb 2025 13:52:02 +0000
ROA not before: Mon 10 Feb 2025 13:52:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 118.233.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13324 (0x340c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:02 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7BB70446E8AFF4D2C1CD3951C499800985FEFBDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:5e:7a:cd:d8:48:b3:6b:b1:bb:97:e6:1e:
10:43:7d:92:65:d4:86:1c:97:2c:f8:c5:86:fc:65:
72:81:2c:a5:f5:23:12:82:18:f4:c0:b0:8c:d1:5c:
20:ea:7a:e1:db:15:a2:09:e1:51:4a:8f:02:79:b6:
86:ab:bb:54:21:01:3c:05:b2:f1:53:6b:a3:58:95:
7e:6e:55:ba:01:45:6a:e1:2d:95:d1:8c:14:ca:66:
e1:27:95:30:25:62:81:82:b9:37:26:47:78:6d:80:
1d:c2:73:a1:6c:09:46:32:24:98:4a:2b:1f:84:c7:
ff:73:01:fa:b7:bd:ae:c4:9c:99:e5:e1:d1:ce:4f:
b9:44:28:a9:e6:91:d3:b8:16:8d:81:08:6e:16:1d:
26:a5:9a:d6:35:24:3e:c0:cc:51:f3:67:69:98:7a:
5f:15:a9:96:dc:e5:3b:38:e3:d0:d8:76:17:f9:8c:
44:b5:f1:ed:a7:a7:07:40:92:2d:ff:51:60:eb:37:
b0:73:77:37:55:71:53:27:92:44:c5:2b:7f:d7:2f:
20:c1:c9:30:1d:ab:50:3c:e0:93:cd:13:53:03:23:
8a:8a:d7:5d:e0:3e:71:19:d9:42:1d:9b:51:91:92:
f4:04:50:f6:54:fd:aa:0c:a5:71:92:08:5b:0d:3e:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B7:04:46:E8:AF:F4:D2:C1:CD:39:51:C4:99:80:09:85:FE:FB:DA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e7cERuiv9NLBzTlRxJmACYX--9o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.128.0/17
Signature Algorithm: sha256WithRSAEncryption
2f:b7:43:e8:69:60:84:95:cf:01:8c:02:30:49:bf:38:ae:79:
ec:96:41:27:60:bf:22:50:5d:8c:9d:fb:11:96:70:8a:df:80:
6e:ae:64:56:bd:7b:aa:91:d1:41:e3:ca:a2:d1:08:4a:f3:0a:
cd:aa:d5:a6:6e:5a:71:39:fa:f2:86:af:dd:b6:89:b5:3e:4a:
f4:c3:a6:da:e2:9b:e9:c6:97:ca:de:af:ab:44:c0:db:41:d0:
9b:ca:3d:fe:49:a5:fb:e8:22:01:53:c4:52:38:fa:71:28:a9:
94:69:2f:2f:09:8f:9d:78:20:de:8b:50:87:00:b4:14:56:b5:
2e:c8:09:c0:76:eb:4c:2a:aa:cd:fc:40:27:56:b1:95:8a:fc:
37:cf:2e:5c:a0:a4:e9:38:17:8f:aa:58:ed:b3:68:5d:25:9e:
cc:9d:14:d0:c2:58:ce:03:bd:4d:f1:9d:fa:58:47:34:23:ba:
ad:2b:52:e2:70:e6:0b:3b:04:15:ad:69:5e:fe:4f:c3:42:63:
2b:17:70:79:e0:16:19:da:31:ce:e1:ed:6e:21:6d:7b:ea:a3:
77:9b:b0:fe:f8:0f:67:07:8e:ed:8e:48:c0:3f:d5:f6:db:ed:
31:fb:81:d7:2f:b4:9e:51:c2:34:31:a0:bf:ce:23:7e:ba:30:
86:60:00:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:29 2025 by rpki-client