Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g50yrRI8c2Huvk_B7rwBtzqUhJg.roa
File: g50yrRI8c2Huvk_B7rwBtzqUhJg.roa (raw, json)
Hash identifier: TEBlWkq6tEwgBKqgi+lC1rklLXSma1wDQP48At1Kz/s=
Subject key identifier: 83:9D:32:AD:12:3C:73:61:EE:BE:4F:C1:EE:BC:01:B7:3A:94:84:98
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3537
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g50yrRI8c2Huvk_B7rwBtzqUhJg.roa
Signing time: Mon 10 Feb 2025 13:53:08 +0000
ROA not before: Mon 10 Feb 2025 13:53:08 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13623 (0x3537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:08 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=839D32AD123C7361EEBE4FC1EEBC01B73A948498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:e0:be:77:bc:74:6f:43:e5:d0:dd:64:93:
0a:76:91:00:98:16:2a:4a:bc:6e:5d:5c:64:90:fe:
12:23:f2:5c:35:95:a0:13:21:20:a8:6c:da:33:87:
b8:0b:7d:07:84:d6:2c:0e:86:9c:f5:a4:7a:02:b5:
c6:91:85:ab:45:83:8f:b9:d8:47:2f:92:03:68:3d:
9e:65:eb:c5:eb:90:b1:90:8e:58:8d:94:a5:a5:b6:
c2:13:07:62:3a:94:08:a5:65:3d:3c:e9:a7:ce:3c:
26:c4:cb:9b:e1:47:e6:b1:a4:8f:14:84:9a:ca:33:
fe:6c:85:3c:82:38:dc:4d:09:4a:61:11:95:bb:2d:
64:95:b1:ad:b1:1b:ee:e5:e1:c7:a3:19:1b:22:53:
e2:a8:cb:04:71:84:4e:1b:6c:28:48:84:19:a6:94:
c0:f9:d8:95:c7:53:31:a4:ad:7d:e6:23:7d:3d:f3:
64:d9:02:f4:d5:06:2d:bb:2f:ba:07:84:ea:5c:f6:
ab:d4:c4:b6:ac:ff:bf:69:d3:ed:bb:e3:f2:d7:da:
c1:e7:3a:ed:9f:94:0e:75:3a:10:31:7c:02:ba:a1:
f0:95:e8:53:41:60:b0:a9:a2:63:51:65:05:af:d2:
18:5f:85:04:18:03:7b:06:53:b5:e5:ed:d8:a2:44:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9D:32:AD:12:3C:73:61:EE:BE:4F:C1:EE:BC:01:B7:3A:94:84:98
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g50yrRI8c2Huvk_B7rwBtzqUhJg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.228.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:78:63:c3:59:f9:b0:99:ac:b8:11:3e:f7:e6:b1:a7:ea:ab:
ce:fd:8f:d5:b8:98:c0:fa:de:53:bc:c8:7f:09:87:19:d2:14:
47:10:d7:02:94:d3:3f:df:5a:f4:ab:bf:71:6c:7a:21:3c:2f:
9c:b4:b7:5e:1e:60:30:3e:c1:e8:64:9a:3a:b2:47:d1:f0:89:
9c:13:e7:70:a6:e9:f4:7d:25:2b:1b:63:15:71:32:7c:91:42:
ea:ae:45:ac:a1:15:ec:4f:12:2f:e3:13:17:bc:87:ec:75:5f:
5c:fe:0b:72:77:3d:a4:8a:75:a7:16:b7:1a:53:1e:1f:ac:61:
42:13:5e:4a:18:51:c1:f1:ca:38:ff:74:48:0c:dc:ea:da:d6:
71:2b:ee:bb:2d:29:53:11:b5:37:26:0d:a0:2d:99:8f:7b:dc:
fc:6d:94:58:aa:43:72:82:01:9f:fc:23:bb:3e:5a:5a:4a:b8:
1d:e1:cb:fe:41:aa:b7:d0:ca:42:4d:6b:ff:40:42:a8:63:ad:
ee:3c:25:aa:44:dd:60:10:dc:f2:50:bc:5d:72:52:98:c3:c3:
43:72:c3:ba:68:0e:5e:c7:0b:59:00:37:07:51:4b:03:c2:90:
62:98:1f:ad:ec:36:4f:4f:16:11:27:28:49:a3:aa:35:62:b2:
b1:4f:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:57 2025 by rpki-client