Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jXKNqiovPc1grYX2ErlhNp5UIe4.roa
File: jXKNqiovPc1grYX2ErlhNp5UIe4.roa (raw, json)
Hash identifier: jo6dsv50LXlC6IqghOsSEx2D0FBq5W+BK3AtMMN3pgU=
Subject key identifier: 8D:72:8D:AA:2A:2F:3D:CD:60:AD:85:F6:12:B9:61:36:9E:54:21:EE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3562
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jXKNqiovPc1grYX2ErlhNp5UIe4.roa
Signing time: Mon 10 Feb 2025 13:53:17 +0000
ROA not before: Mon 10 Feb 2025 13:53:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13666 (0x3562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8D728DAA2A2F3DCD60AD85F612B961369E5421EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:b5:a2:b7:68:cc:e5:18:c0:3d:0b:12:b5:
05:52:7f:37:a5:96:a2:60:a3:ed:3f:4d:59:2b:28:
db:f1:34:5f:6b:64:e9:9b:77:6f:92:a2:e1:87:0f:
7e:64:2e:38:b3:67:ce:96:ed:bb:76:1a:f1:fb:8d:
88:c1:d2:40:53:b8:11:f2:f1:b8:9b:15:e8:bf:ee:
29:c6:dd:ce:f2:52:31:5f:37:e3:f9:04:41:3f:d6:
53:ef:34:3e:50:67:c8:79:b7:58:21:80:b1:da:3a:
23:64:20:5f:d3:b9:0a:d9:99:fa:b6:b8:20:55:9f:
47:67:9d:5d:50:bd:48:55:f6:4e:b2:8c:88:17:93:
6e:22:d4:72:05:71:34:2f:78:ff:9e:22:62:ce:bb:
50:a9:2e:d4:0e:dd:f3:3a:43:20:49:68:24:18:38:
24:7c:ac:5b:9c:24:c2:a4:94:fb:30:b2:02:34:20:
da:42:e5:54:06:51:40:ed:58:76:82:24:0d:91:fa:
4e:97:89:03:d8:68:1a:f4:a5:33:a4:7a:30:6b:78:
7e:05:84:3a:9a:16:73:16:cb:93:ad:cd:af:dc:3b:
9f:7e:b7:33:c9:94:54:62:92:87:5c:2e:f9:07:17:
ed:a9:96:71:de:88:e4:5b:4e:86:f3:d9:c2:c9:8e:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:72:8D:AA:2A:2F:3D:CD:60:AD:85:F6:12:B9:61:36:9E:54:21:EE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jXKNqiovPc1grYX2ErlhNp5UIe4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.232.0/21
Signature Algorithm: sha256WithRSAEncryption
90:8f:ae:ed:2e:ae:fd:d0:ea:d8:d8:10:87:7e:41:c6:15:80:
0c:56:c2:56:61:24:0b:50:42:06:aa:8f:62:db:71:af:4c:61:
62:3c:ce:8a:ec:e2:bd:3c:35:20:84:04:1b:78:a8:1d:8e:7e:
32:e1:7b:76:22:df:98:1f:02:cd:64:32:d9:0d:dd:38:ed:a6:
c8:b6:76:97:0b:d3:ec:bd:4e:45:0c:39:b4:9c:b1:ae:0c:91:
71:98:e2:af:ec:86:55:e5:d6:69:40:c2:5d:a2:d2:9d:b7:73:
c7:88:11:66:0d:55:7c:85:c9:ea:f5:fb:12:3e:45:40:61:1d:
46:51:6a:fe:49:41:aa:f0:1f:f9:65:8a:01:6d:6b:bb:43:2c:
eb:09:05:e1:57:20:b4:f5:2b:41:fa:99:a0:45:65:54:8d:58:
28:2d:1f:43:32:fe:5d:af:5d:87:b3:a7:2d:82:88:1d:05:da:
f3:7a:5a:7e:a0:8b:3c:28:2c:2d:d6:dd:50:56:c0:72:b2:29:
02:6c:14:e1:86:c7:2d:e9:42:a0:f0:68:3a:eb:ca:9b:ac:63:
90:87:98:5b:b4:6d:c7:b3:e1:5b:0e:12:62:e7:8a:66:7d:eb:
5e:eb:f1:01:66:40:f2:20:06:b2:cd:a3:c6:0f:29:ba:c3:1d:
51:08:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:29 2025 by rpki-client