Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lqxttQXoEZvlipvBrdYYHJS7HF8.roa
File: lqxttQXoEZvlipvBrdYYHJS7HF8.roa (raw, json)
Hash identifier: 03SyU7dwB2CcW1nrkqruWaq6xdSiiSjfV+bJKFqwRc0=
Subject key identifier: 96:AC:6D:B5:05:E8:11:9B:E5:8A:9B:C1:AD:D6:18:1C:94:BB:1C:5F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3542
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lqxttQXoEZvlipvBrdYYHJS7HF8.roa
Signing time: Mon 10 Feb 2025 13:53:10 +0000
ROA not before: Mon 10 Feb 2025 13:53:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13634 (0x3542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:10 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=96AC6DB505E8119BE58A9BC1ADD6181C94BB1C5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:ab:90:63:11:67:8d:65:ad:bf:19:5c:0a:
14:25:99:5e:9f:50:58:70:64:46:5b:32:69:1e:95:
0f:6e:41:15:8a:cf:2f:b1:45:08:47:b8:f9:b3:be:
2f:b5:89:79:b0:fc:b3:6d:e3:5e:0d:f3:8b:6b:e6:
01:15:33:6b:1f:32:11:82:55:0c:ce:f1:0c:96:3d:
26:82:5c:e1:31:e1:b1:06:6f:3d:e7:cd:fc:45:a2:
0a:0e:fc:52:39:c6:bb:73:9f:63:d2:5e:b7:fb:ed:
42:6c:02:84:b9:b9:d8:b5:8d:c9:1a:b7:ce:8b:57:
26:ef:7d:bb:48:de:3b:b3:bb:73:18:bf:ba:e6:eb:
a8:22:82:04:dc:14:8c:6a:58:ea:25:d5:28:85:ac:
12:b5:15:a4:15:6d:29:ca:b8:fe:66:26:b7:26:64:
f3:7b:11:9c:c1:c6:bf:62:4e:eb:ec:60:21:72:a6:
d1:d7:ed:16:c5:92:da:61:89:90:9c:4a:bb:df:f5:
1f:78:42:d3:69:5e:41:4e:a3:9f:6d:be:55:40:e5:
ef:5d:7d:e8:02:0d:50:40:c3:ea:bc:48:37:70:d9:
60:11:87:b6:5d:25:6e:23:94:1b:9c:ed:1a:63:f7:
cf:8c:89:a4:82:3a:14:a3:36:8b:e5:39:a3:16:28:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AC:6D:B5:05:E8:11:9B:E5:8A:9B:C1:AD:D6:18:1C:94:BB:1C:5F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lqxttQXoEZvlipvBrdYYHJS7HF8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:34:48:55:75:86:c1:36:66:25:49:32:ea:8c:46:84:a6:ce:
16:a0:d1:5b:f2:93:6f:4e:39:fc:f1:23:f5:b8:e7:75:29:f3:
25:50:29:83:9e:0f:c4:d1:91:d7:b7:d8:32:56:0a:cb:be:47:
00:98:28:5b:36:07:1e:75:63:be:3c:30:b6:a1:f2:2d:77:5a:
27:66:c4:5e:7f:ba:f2:38:2a:f5:9a:b6:79:c1:28:7e:9d:29:
87:58:b3:fd:3a:90:91:5b:84:96:16:75:30:b2:b5:98:83:c6:
1a:7b:b8:f2:d1:78:ce:7a:7f:e9:43:8b:9b:9a:f0:29:2d:03:
82:cd:a6:0d:c3:4c:eb:ea:71:54:03:88:94:bd:01:90:7d:ee:
b6:c9:11:66:84:24:a8:32:77:a3:68:94:a4:5d:9c:7d:6b:7c:
22:27:3c:29:b0:32:13:2c:d6:fd:ac:8b:ae:a5:a5:8e:4b:bb:
d8:ca:76:5e:54:d9:21:44:ce:f6:2f:ac:e1:a0:a9:26:be:73:
aa:ab:b0:1a:45:c3:f9:71:84:be:b0:ec:31:ca:cd:d2:3e:b2:
7a:23:74:08:13:ac:ff:3f:86:a2:fa:49:9f:0d:51:f9:55:75:
91:8f:d9:67:90:f4:d5:e3:0c:cb:d2:11:2f:da:8b:f5:9d:97:
d4:32:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:18 2025 by rpki-client