Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lYbjDiLW4Cqn1m8VH9YA4pIoNqs.roa
File: lYbjDiLW4Cqn1m8VH9YA4pIoNqs.roa (raw, json)
Hash identifier: zYFEtCoFWApKNP+mFhAVJrCoM9URt34sFTbWtwNJKM8=
Subject key identifier: 95:86:E3:0E:22:D6:E0:2A:A7:D6:6F:15:1F:D6:00:E2:92:28:36:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 368A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lYbjDiLW4Cqn1m8VH9YA4pIoNqs.roa
Signing time: Mon 10 Feb 2025 13:54:25 +0000
ROA not before: Mon 10 Feb 2025 13:54:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13962 (0x368a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:25 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9586E30E22D6E02AA7D66F151FD600E2922836AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:2b:8a:61:6f:9b:df:06:c3:25:40:42:a0:
bf:5e:d3:67:fc:b3:99:e1:e4:88:08:b6:57:6e:7f:
95:d3:ba:47:7e:d6:45:65:c6:61:81:2b:69:24:f2:
7d:8c:09:3d:a3:2e:ee:41:d0:b2:de:57:23:e4:6f:
13:5f:4a:cf:61:3c:eb:74:d3:f4:49:57:9e:2a:83:
60:ce:e7:2c:31:16:56:5a:0d:f1:e1:b2:e0:0a:74:
5e:bd:5c:e6:82:b8:5d:b8:15:95:36:15:b1:98:7d:
e1:6e:87:03:93:72:70:78:28:67:ab:ac:a3:f6:30:
a3:da:5a:ee:01:29:2d:e1:d8:c0:0a:9a:bc:7b:46:
22:cd:e8:0b:65:65:07:f0:64:6c:2b:77:6a:53:62:
13:4f:80:44:f1:6b:a2:38:10:c0:bd:04:63:b0:c3:
6b:ea:62:f3:30:66:5e:02:58:39:3f:78:49:1b:f8:
79:3c:0e:da:bc:23:2d:b5:57:6f:92:68:40:f8:58:
72:a4:47:64:76:ed:bd:57:8d:dd:67:31:55:44:7c:
8a:e3:9a:2b:c8:63:96:d6:f1:62:6f:63:74:d9:86:
54:62:e0:55:b8:ed:6f:a3:d6:21:ec:27:27:a7:43:
45:ff:5d:46:49:93:d2:29:49:d2:4a:d7:89:97:bd:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:86:E3:0E:22:D6:E0:2A:A7:D6:6F:15:1F:D6:00:E2:92:28:36:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lYbjDiLW4Cqn1m8VH9YA4pIoNqs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.108.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:d2:84:fa:ef:9c:6f:75:be:1d:f9:57:46:fc:55:31:30:a4:
9e:ab:b6:a7:3e:b1:1c:b1:83:30:2e:87:2b:5f:5a:fd:47:d1:
c6:5b:98:c6:02:fa:04:88:c4:c7:ea:9e:a9:e9:44:08:45:60:
3e:f5:50:ea:05:87:3d:11:df:ab:b1:a0:e8:01:12:3f:91:85:
b6:5d:aa:6d:a6:78:19:96:84:f2:b2:91:e6:73:6f:a7:b1:96:
34:01:6c:1f:7f:d8:f3:00:1f:ee:ac:f1:ab:91:f0:e9:ae:1f:
f1:9c:6a:27:f2:70:aa:bd:c0:e7:75:fc:05:54:b7:21:6d:ae:
9b:b1:c3:05:43:08:1f:dc:68:a2:b9:08:2a:cd:1f:cb:f5:d7:
3c:2a:eb:2a:c1:30:c9:99:e1:d5:9a:03:c0:cc:42:c2:41:79:
52:7b:8a:7c:e8:84:0d:42:7b:9a:ae:f1:28:3d:3a:d9:69:75:
e3:29:47:29:2a:59:d3:44:87:20:1b:5b:9e:52:3e:f3:0f:ac:
6d:69:af:49:57:ce:de:9c:98:a5:49:bf:34:ce:8e:89:90:f1:
08:e0:31:c3:80:7d:81:8e:fb:21:d3:b8:f5:03:b2:80:8f:17:
ad:bb:8c:6c:c0:c6:d3:be:86:a3:3d:66:eb:ab:f0:90:53:b8:
01:8b:9d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:28 2025 by rpki-client