Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k-Kwv6vBQw-TzdybuX-Q-fgVF-A.roa
File: k-Kwv6vBQw-TzdybuX-Q-fgVF-A.roa (raw, json)
Hash identifier: NBajgSI4vy8kDQVkN1M2M9lVvDA969hG/QGViGIiK9E=
Subject key identifier: 93:E2:B0:BF:AB:C1:43:0F:93:CD:DC:9B:B9:7F:90:F9:F8:15:17:E0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 366D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k-Kwv6vBQw-TzdybuX-Q-fgVF-A.roa
Signing time: Mon 10 Feb 2025 13:54:19 +0000
ROA not before: Mon 10 Feb 2025 13:54:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13933 (0x366d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=93E2B0BFABC1430F93CDDC9BB97F90F9F81517E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:b2:6f:3f:04:0c:bf:28:0a:b7:58:b7:97:
70:56:35:78:d8:90:f0:d7:8d:36:3c:79:04:1d:58:
ce:15:88:8c:46:94:53:b7:6d:c9:dd:e1:2b:54:e6:
44:8d:93:aa:48:94:48:41:f5:db:86:dd:46:47:d7:
13:f1:f4:c9:4e:7c:6f:4d:3a:23:e0:b6:dc:16:fb:
60:d7:42:a1:10:de:a5:ca:69:1d:7e:bf:71:16:18:
d7:02:95:f8:d9:ee:72:25:c1:71:2b:b8:49:78:f0:
91:15:e4:44:38:a4:5d:d9:d9:a3:d5:48:44:46:93:
80:c8:10:cd:07:28:96:c4:2c:20:d1:65:3a:ec:c6:
3d:4a:2f:81:b3:cc:20:66:2e:55:c6:9c:18:76:24:
9b:6c:37:0d:48:7c:98:1c:07:cb:62:81:3e:94:7d:
11:5b:3f:15:8a:da:ab:e4:bc:3c:e2:ea:f0:50:d4:
51:ae:80:4a:23:57:bd:a0:dc:39:07:a5:b8:f6:99:
4a:6a:fb:3e:02:46:b6:da:10:e5:a9:8b:62:ea:71:
f8:74:c9:58:5a:97:1d:4f:e9:c4:03:32:f6:b3:be:
98:99:ca:a4:08:1a:47:e7:64:d7:56:3d:a9:d5:cc:
49:c6:69:9d:f9:cf:2e:75:47:1b:de:aa:c8:1d:25:
bb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E2:B0:BF:AB:C1:43:0F:93:CD:DC:9B:B9:7F:90:F9:F8:15:17:E0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k-Kwv6vBQw-TzdybuX-Q-fgVF-A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.132.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:0a:16:35:fb:0e:21:3b:6f:c6:f9:c7:ec:e2:29:4f:35:0f:
26:b3:d3:dc:c9:7a:40:c8:b4:e1:55:93:e9:cd:b1:69:a8:ec:
8b:12:21:a2:81:db:f4:83:ac:7b:ab:a1:39:de:2b:de:c4:a9:
08:6b:63:75:ca:8f:0c:2d:46:37:66:9e:9e:39:35:be:17:d7:
53:aa:bf:22:14:a1:33:2a:b5:34:2c:35:e6:4d:74:18:2b:d1:
18:0d:99:9f:62:49:b3:a3:1d:b9:87:9e:63:a3:2c:80:2e:6b:
05:8c:ba:34:44:50:41:79:a8:d9:1a:ac:97:33:60:2b:28:50:
24:fa:f4:5b:27:04:97:db:c1:75:cd:cd:48:60:7b:75:6e:d5:
dc:12:17:21:d4:11:15:bd:59:d0:6e:2e:1e:02:7a:8b:83:e7:
ac:87:65:ac:33:de:11:5f:4b:c6:22:06:88:f4:d0:f6:9d:82:
12:fa:01:ab:ad:38:96:ab:43:82:6e:1e:a4:bc:73:81:ef:58:
40:2b:23:d6:ca:29:c0:ae:d7:8c:86:6d:21:4b:b1:cf:b0:1d:
1b:6c:63:8b:6f:63:a4:1c:af:fd:97:5c:64:7f:a7:21:b1:b3:
e0:47:5b:e2:94:e1:2e:a5:eb:6f:8d:41:aa:a1:56:75:4b:49:
08:f8:df:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:20 2025 by rpki-client