Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ifIEPK19GjPEsM0S8t0UgOnYDAk.roa
File: ifIEPK19GjPEsM0S8t0UgOnYDAk.roa (raw, json)
Hash identifier: w+lPU/cxku1b+9xcuVprvGW7iv+Fk+PJ2lbw4pRJo+U=
Subject key identifier: 89:F2:04:3C:AD:7D:1A:33:C4:B0:CD:12:F2:DD:14:80:E9:D8:0C:09
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 345E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ifIEPK19GjPEsM0S8t0UgOnYDAk.roa
Signing time: Mon 10 Feb 2025 13:52:18 +0000
ROA not before: Mon 10 Feb 2025 13:52:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13406 (0x345e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:18 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=89F2043CAD7D1A33C4B0CD12F2DD1480E9D80C09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:c9:6e:39:29:df:7f:72:68:98:d2:78:7c:
a9:c1:c1:c9:d2:0e:96:1f:4e:0a:21:bf:79:19:53:
fb:62:5f:a0:4c:36:b3:c4:13:52:80:41:89:16:1a:
22:db:0e:1e:17:1a:f0:9e:62:1c:47:12:2b:2e:09:
25:9b:9e:b2:d7:15:b2:5e:cb:9d:82:97:fa:98:e9:
db:ec:fc:b5:2e:a0:a6:ff:cf:ce:14:68:7b:61:26:
39:cd:ea:2d:a3:27:e0:7c:cc:20:6f:c3:68:64:f7:
83:6b:8b:75:8e:c4:c0:1e:67:38:a7:33:b6:a4:62:
c1:78:4b:e3:f2:95:dd:c8:d7:16:a4:1d:8e:e1:64:
2c:c6:92:1b:0f:67:3c:75:2a:13:e6:8c:37:7f:03:
73:1a:fe:50:6f:7a:24:76:90:9b:6d:ee:15:00:55:
13:99:37:58:05:10:e4:1b:87:a5:c9:0c:22:fe:6c:
35:c0:f2:5a:4f:14:d2:14:4d:83:14:60:72:b5:ce:
a7:3a:3b:d3:35:95:38:cd:a9:ff:1d:b8:e8:8b:9e:
f2:90:93:75:d9:e2:7e:65:db:aa:cb:c0:cd:87:32:
58:37:f9:51:64:5a:61:14:08:06:ca:87:3b:09:df:
5c:f3:a0:e0:80:49:50:2d:bb:36:a1:01:36:dc:2d:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F2:04:3C:AD:7D:1A:33:C4:B0:CD:12:F2:DD:14:80:E9:D8:0C:09
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ifIEPK19GjPEsM0S8t0UgOnYDAk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.120.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:40:fd:96:e6:73:b3:c4:a3:c6:38:c9:30:ec:81:10:4c:df:
46:d3:f2:70:c3:7f:53:a7:b3:16:9e:04:8e:ad:c3:4a:af:b5:
c9:6e:3d:49:80:6e:f3:88:01:b8:06:84:65:dc:d7:2b:54:46:
97:c8:a9:92:8b:02:d3:5d:be:44:2f:95:55:18:fe:a5:1b:5e:
60:ce:05:e7:cc:f6:e3:cc:d6:e0:4b:e4:ad:96:63:05:fa:78:
0b:7e:88:20:28:12:fb:01:81:46:ec:66:6e:83:00:ad:ab:8e:
72:d5:e6:62:7f:fe:bf:a0:41:d8:97:a6:f4:7f:62:cd:89:5f:
ec:df:87:9b:2a:6c:e6:ff:41:6a:c3:35:a6:67:d3:50:86:5f:
1a:83:45:35:06:0e:77:9e:e2:e6:4d:56:bf:e6:5a:b4:83:f0:
f3:9e:32:24:db:a7:30:d6:5f:8e:69:d0:d9:92:3c:3e:30:46:
b9:39:bc:be:df:ff:58:b0:b1:aa:c9:6a:55:60:de:44:f9:33:
08:9b:4d:67:48:69:46:97:2d:d2:97:44:9b:e2:20:3e:01:39:
f4:79:82:f9:0c:73:a6:9e:4e:2a:06:24:94:71:e3:87:65:df:
2d:b6:9a:e4:98:0d:2d:68:df:98:06:8c:33:75:e1:4a:f4:9b:
1f:ce:af:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:44 2025 by rpki-client