Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lGOPMeegxJoeQfud70k8nlEPEIY.roa
File: lGOPMeegxJoeQfud70k8nlEPEIY.roa (raw, json)
Hash identifier: 9kGXIOPKUB0kGAkC0BojmgvnptZG20pzuRLWSk3KHvo=
Subject key identifier: 94:63:8F:31:E7:A0:C4:9A:1E:41:FB:9D:EF:49:3C:9E:51:0F:10:86
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 363E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lGOPMeegxJoeQfud70k8nlEPEIY.roa
Signing time: Mon 10 Feb 2025 13:54:08 +0000
ROA not before: Mon 10 Feb 2025 13:54:08 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13886 (0x363e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:08 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=94638F31E7A0C49A1E41FB9DEF493C9E510F1086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:d8:be:36:24:b4:a5:5e:9e:fd:bc:6a:b6:
1d:4c:7f:f0:05:21:44:76:ad:c2:66:8a:56:8b:8c:
0d:89:0a:fe:67:1d:bb:8f:2b:ae:fc:4b:8f:10:e1:
67:f1:56:37:0b:14:c7:c9:87:92:61:2e:60:84:d2:
bb:42:2c:f3:19:d9:41:3b:45:17:ed:f9:64:f0:e4:
fc:84:c1:7c:1d:03:7c:ea:f3:59:66:39:82:62:04:
11:78:80:34:30:4c:77:35:c4:24:14:80:33:91:3a:
15:e7:00:b4:a5:2f:84:84:e5:46:c2:f3:b2:cc:3b:
91:82:41:1b:f2:b5:03:fe:72:07:9b:11:f8:46:6b:
7c:1e:83:a7:7c:17:95:94:9f:f0:da:83:41:0a:15:
ce:b9:52:0c:09:24:e3:e5:2c:8e:7f:d0:8e:74:0b:
54:c0:31:37:41:ad:05:c4:74:aa:7f:b4:2c:f7:58:
38:de:9d:60:ff:11:38:ca:ba:83:29:ac:69:90:d5:
90:a4:a7:e2:61:c5:0b:50:a7:83:26:e2:d4:f2:33:
fd:f2:b7:07:5c:21:77:25:8b:cb:b8:1e:4f:57:38:
bd:b4:3b:54:d3:ba:b6:d7:57:45:96:8c:e9:9d:08:
69:c8:d4:b5:6c:c5:9a:11:7b:f5:ea:28:a7:a6:5b:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:63:8F:31:E7:A0:C4:9A:1E:41:FB:9D:EF:49:3C:9E:51:0F:10:86
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lGOPMeegxJoeQfud70k8nlEPEIY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.48.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:25:3e:d4:19:54:5c:45:e4:21:fc:31:72:99:10:6b:5f:ed:
56:a6:7d:52:62:3c:22:d8:29:cc:f5:36:22:fa:9d:70:3e:77:
ad:32:e2:12:82:f2:3d:b9:1e:1c:54:f7:5d:f5:97:32:6b:dc:
ec:6c:38:f9:6f:eb:90:94:26:39:f5:b9:b7:b2:b4:79:ac:e7:
54:1f:be:e0:60:50:51:8a:77:24:d1:5a:fc:52:f8:3d:f1:cd:
d2:bf:b0:08:34:80:6b:40:37:ae:87:fe:a9:10:e6:4b:a4:61:
67:85:7c:b4:d3:9b:b0:9c:de:9d:00:70:70:46:66:7c:81:f3:
e8:d8:d5:cd:04:fe:8d:3d:ff:ab:7e:2b:4a:89:4e:39:cf:39:
44:dd:8e:55:5b:99:80:35:84:d5:99:98:69:9c:12:8a:97:4e:
97:6d:15:be:6e:8b:3d:9a:85:6e:47:96:33:84:82:2f:82:b3:
7f:08:ef:cf:1d:18:28:16:3b:13:61:11:76:f0:b2:7a:23:e2:
39:64:5c:30:16:e6:b2:c2:79:11:67:aa:03:8d:a4:a1:66:7d:
67:f0:7c:3e:22:d3:77:a2:ee:f9:47:7d:bf:56:26:e6:0d:c4:
13:51:90:fc:e5:eb:e7:92:9f:a9:f5:bb:55:9c:ed:c4:a0:2d:
85:02:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 02:00:30 2025 by rpki-client