Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jFDljGakncnEHOYHv_3EFuYLYs4.roa
File: jFDljGakncnEHOYHv_3EFuYLYs4.roa (raw, json)
Hash identifier: Fk9vRrMIoX5UmdfQrbmeZcaAsv04hPZ7PfkOa0gy1IQ=
Subject key identifier: 8C:50:E5:8C:66:A4:9D:C9:C4:1C:E6:07:BF:FD:C4:16:E6:0B:62:CE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35A7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jFDljGakncnEHOYHv_3EFuYLYs4.roa
Signing time: Mon 10 Feb 2025 13:53:33 +0000
ROA not before: Mon 10 Feb 2025 13:53:33 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13735 (0x35a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:33 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8C50E58C66A49DC9C41CE607BFFDC416E60B62CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:56:0c:81:52:c3:60:56:03:06:84:bb:49:eb:
e0:50:e0:b1:fe:a1:22:d2:70:53:a3:ae:d9:16:cb:
08:7e:cd:f0:e7:24:06:4e:c9:02:4b:59:41:95:9c:
ea:bd:23:ca:54:ea:a6:cc:80:8d:44:18:c4:c8:50:
5c:be:1b:d9:be:72:91:55:d4:c2:b6:af:8d:82:ea:
dc:9f:0f:3c:df:97:09:b1:7e:ad:62:47:f4:e1:65:
e0:da:6d:d1:80:7f:b1:7a:1a:c3:02:94:b0:3d:77:
37:3d:cc:60:01:e4:9e:d1:b5:f3:ab:8f:9e:64:c3:
86:4b:de:89:a9:98:2e:cc:17:36:0f:34:72:5b:1d:
b5:90:ee:70:32:e5:6a:9a:b3:0f:1a:00:9d:09:97:
21:07:b9:d4:79:56:7a:65:a8:62:f1:a6:e7:e0:df:
ed:0a:4a:7c:e1:62:29:e0:b8:2e:b5:ce:05:49:e2:
90:55:14:d2:0f:17:97:fe:0c:e7:5f:1f:f7:d2:68:
34:1c:1a:ef:d1:30:b5:97:a3:29:5a:55:27:53:c7:
44:cb:18:11:52:9c:e8:40:36:06:f4:bf:cf:bc:7a:
e9:dd:39:9f:39:1b:8b:06:bd:f7:af:21:3b:4c:0b:
2a:50:e6:22:e1:84:00:94:0a:46:be:57:5f:2c:7f:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:50:E5:8C:66:A4:9D:C9:C4:1C:E6:07:BF:FD:C4:16:E6:0B:62:CE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jFDljGakncnEHOYHv_3EFuYLYs4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:8c:9d:7c:fd:18:9f:62:2c:1e:be:88:bc:f7:ab:20:2d:c9:
ba:65:1e:0c:43:0e:8a:3c:e6:09:00:f7:85:73:b4:13:a2:e2:
af:3d:0e:80:57:a0:22:cd:27:87:ae:35:e8:35:80:80:d1:34:
53:dc:99:cd:d0:ff:47:73:7a:3f:88:43:51:cb:91:5f:ea:ec:
90:25:b6:1a:53:65:7b:54:19:36:29:6e:f3:20:9a:e6:ac:0c:
5c:ad:64:17:72:d3:c2:98:27:ee:27:f0:b8:e0:37:dc:89:b1:
9c:ff:69:ec:7b:c5:93:65:61:47:6d:21:7d:0f:73:0d:85:0c:
b6:81:c7:31:27:9e:e5:99:a5:59:89:99:17:d5:36:2c:7f:6e:
fc:b5:7c:f4:32:0b:9d:27:65:a6:90:0a:80:c4:c2:2c:bb:d4:
84:3f:fb:ac:e7:fa:23:cd:15:0c:d8:23:fc:17:22:14:a5:1c:
b8:aa:72:0c:04:64:2e:79:d8:14:68:1c:f0:4d:d4:e4:77:b1:
19:0a:0f:14:93:83:b7:8c:6a:7c:0e:a4:01:35:20:e0:c4:f5:
81:18:da:b0:4f:0e:74:72:29:ac:af:67:bf:19:e5:de:33:a2:
02:45:73:ee:2a:18:cb:7d:6c:30:1a:ed:6d:65:e9:2b:0a:9a:
00:d9:f0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:29 2025 by rpki-client