Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h8h9GCiPsewgHSPGwGVLtO20CIo.roa
File: h8h9GCiPsewgHSPGwGVLtO20CIo.roa (raw, json)
Hash identifier: q79THApQgc9V2nqCDAmOkfFzlBbWAIK+HCDOMR8r2nM=
Subject key identifier: 87:C8:7D:18:28:8F:B1:EC:20:1D:23:C6:C0:65:4B:B4:ED:B4:08:8A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36C9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h8h9GCiPsewgHSPGwGVLtO20CIo.roa
Signing time: Mon 10 Feb 2025 13:54:41 +0000
ROA not before: Mon 10 Feb 2025 13:54:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 211.76.124.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14025 (0x36c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:41 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=87C87D18288FB1EC201D23C6C0654BB4EDB4088A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:ba:d2:60:2f:20:1f:57:d2:ac:86:d9:5b:
83:d9:8a:e3:65:b6:0f:d8:1c:9a:87:27:10:cb:d7:
aa:d8:35:db:bd:ee:43:cc:86:f6:f5:10:d1:79:87:
cc:23:8b:c0:d6:91:ca:e6:f7:75:52:06:35:4c:c5:
d4:fb:55:91:9d:71:38:aa:62:f5:36:89:45:a7:b7:
1b:ca:50:c4:fb:9c:65:c5:ab:d8:6e:25:0a:a0:df:
b8:a6:cf:7b:8f:80:46:46:4e:2b:9b:a2:a4:7b:ee:
a4:e0:8a:eb:30:03:e6:d4:f6:03:12:80:69:54:53:
54:eb:16:b4:68:46:f3:cb:11:25:1f:8b:28:c5:df:
7c:41:29:f8:bb:5d:4a:20:f4:b4:c9:b0:f1:78:62:
20:39:68:e1:31:99:56:d0:d0:e8:44:78:56:5f:91:
73:28:71:c3:3f:6f:e8:f2:c3:98:21:e4:f0:fa:f6:
06:90:37:aa:ec:b5:47:e8:96:57:85:6e:2b:4e:20:
c8:88:3d:64:6a:4c:93:17:a3:55:96:16:2c:8c:2e:
da:e3:b1:c7:b5:d3:a3:32:15:29:11:bf:50:4d:2d:
26:a5:63:7b:6e:cf:8c:46:c7:2d:26:4d:81:96:dd:
dc:3c:79:8d:04:20:e9:fb:f2:0a:0d:38:3d:5b:6b:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C8:7D:18:28:8F:B1:EC:20:1D:23:C6:C0:65:4B:B4:ED:B4:08:8A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h8h9GCiPsewgHSPGwGVLtO20CIo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.124.128/25
Signature Algorithm: sha256WithRSAEncryption
6b:c0:e9:34:a2:30:01:69:14:cf:7a:45:a4:d6:e5:cf:52:d5:
b7:13:fc:69:39:28:51:76:e9:f1:1e:be:96:28:3c:c1:07:ed:
af:cb:28:0e:53:a6:42:57:f5:b9:02:91:2e:0a:ad:7a:ab:d0:
6c:1b:0a:79:c4:df:29:4e:ee:58:4f:ed:62:78:bc:53:cf:24:
5e:5e:3b:12:ed:2a:31:52:83:78:9e:ff:bc:85:5e:a0:55:5e:
b5:d8:ef:59:bc:ee:9c:83:1b:66:74:f7:c5:59:5e:78:91:31:
c0:8c:0d:4a:a8:e2:b5:6f:e9:7c:92:96:6f:37:74:eb:eb:e2:
74:bf:75:6c:b7:84:31:e5:34:19:fd:8f:40:6b:a0:65:d4:9e:
d7:e2:d1:90:9f:0f:5a:95:fb:08:42:f4:9e:9b:4a:bd:01:20:
52:da:3d:a4:0b:98:24:ff:c3:a0:f2:6e:d4:36:62:5a:4a:45:
b4:03:84:07:a0:20:4c:7d:84:75:78:10:c7:42:cb:e3:b4:72:
8c:7e:f2:1c:27:92:e6:81:09:3a:fa:9f:4a:3c:c0:6d:89:72:
d4:1f:d9:ce:ff:64:00:69:f6:2f:08:9b:4c:e0:12:63:52:d2:
25:ff:6d:bb:b6:46:f0:9c:1c:c7:6c:52:1d:a9:4e:5f:2d:80:
9c:df:57:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:37 2025 by rpki-client