Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gbae9YV1ETRfuBvZe9y10YrSrVE.roa
File: gbae9YV1ETRfuBvZe9y10YrSrVE.roa (raw, json)
Hash identifier: +ZgAJIvF+eJEDNvHkuoGexcIYFexPwZzu0ya2uPnAWY=
Subject key identifier: 81:B6:9E:F5:85:75:11:34:5F:B8:1B:D9:7B:DC:B5:D1:8A:D2:AD:51
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 341C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gbae9YV1ETRfuBvZe9y10YrSrVE.roa
Signing time: Mon 10 Feb 2025 13:52:05 +0000
ROA not before: Mon 10 Feb 2025 13:52:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 211.76.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13340 (0x341c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:05 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=81B69EF5857511345FB81BD97BDCB5D18AD2AD51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:d9:c5:8b:3b:36:22:3d:59:1b:a7:e4:02:
76:8d:3b:96:a1:66:60:a0:c7:42:ab:bc:a7:e3:1e:
7b:15:cf:0a:cf:c4:43:df:b1:9e:e1:65:a1:87:5a:
a1:88:89:11:9e:6d:e1:2a:2d:bf:3e:03:61:4e:98:
32:08:02:1f:4a:2b:25:3a:87:2b:be:ae:98:b5:a6:
f9:69:7c:66:12:33:23:db:63:03:e9:df:5f:0e:8e:
ee:0f:b9:79:1b:8d:95:5b:5e:f6:e4:bd:e7:9b:f7:
8d:ae:25:f8:63:47:a3:fc:a2:c2:8d:4b:80:df:20:
97:bb:c0:53:50:3c:8a:a6:c7:ed:37:78:a3:35:f4:
ee:5f:7e:ec:dc:eb:c2:a1:a1:77:9f:f3:7a:a1:00:
d0:06:6c:70:9e:49:81:94:b1:78:ad:8c:1c:86:20:
8f:01:c9:6a:b3:ff:a9:c2:18:da:f3:03:e1:b2:3d:
ff:98:e2:ae:af:f8:72:7d:a7:76:10:ef:09:9a:7a:
9e:2f:64:57:a3:41:0c:f2:72:67:7d:1e:cf:4b:78:
00:50:93:28:80:8a:78:e4:7d:27:10:ca:7d:8f:dd:
c2:17:43:15:4d:c6:e0:d0:b8:e2:c3:20:e7:37:92:
05:cb:26:1a:9d:29:0b:8c:db:61:e8:ee:3b:a1:06:
95:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B6:9E:F5:85:75:11:34:5F:B8:1B:D9:7B:DC:B5:D1:8A:D2:AD:51
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gbae9YV1ETRfuBvZe9y10YrSrVE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.118.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:27:b8:d0:e6:67:db:0b:2a:a0:b8:3a:a8:da:95:c6:48:29:
07:bb:dd:11:1f:61:4c:28:58:16:d3:d9:10:54:6c:4f:92:b9:
aa:d1:47:7a:cc:02:29:e1:fc:09:ab:ce:9a:15:b5:fb:53:b6:
91:94:a7:d6:8e:be:ee:75:d4:af:12:4f:5e:62:c4:7e:1a:17:
3d:b6:27:2d:91:86:04:d5:4f:65:91:3b:1b:a8:d7:ce:56:69:
10:32:e9:f4:8f:18:b7:c6:4a:af:0e:f2:42:70:8f:fe:2f:a4:
ec:d5:01:d6:2a:32:39:0a:47:c4:2b:0e:96:be:17:42:b0:5a:
b1:ed:e0:33:41:15:62:92:ec:dd:ca:31:ab:4e:9c:0f:f4:0f:
e9:76:3e:4c:c8:ac:41:59:1e:ad:f3:cf:09:ae:e0:ce:af:b2:
43:99:b5:63:96:5a:8c:3a:54:70:ae:b1:f0:5a:3e:51:1b:21:
08:c1:41:59:f0:d8:1c:6f:b2:84:a4:c6:4d:32:75:e1:14:8d:
ef:3b:9f:20:48:26:6c:95:c9:b0:3e:6a:a8:1f:e5:44:c0:ed:
d2:96:35:b6:fe:4a:a3:e3:4d:4e:4d:64:c0:80:c0:2f:43:a3:
95:8e:94:87:bd:28:55:ab:43:14:a5:cf:01:c4:38:03:18:02:
ed:fb:fc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:03 2025 by rpki-client