Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qKu2e6F9qUdHa1-1zQnqkKBqDME.roa
File: qKu2e6F9qUdHa1-1zQnqkKBqDME.roa (raw, json)
Hash identifier: bg4AOrjc4LB56dzk2mjA3CZ1+1F5VA9skcKxQf7jGeY=
Subject key identifier: A8:AB:B6:7B:A1:7D:A9:47:47:6B:5F:B5:CD:09:EA:90:A0:6A:0C:C1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3579
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qKu2e6F9qUdHa1-1zQnqkKBqDME.roa
Signing time: Mon 10 Feb 2025 13:53:22 +0000
ROA not before: Mon 10 Feb 2025 13:53:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13689 (0x3579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A8ABB67BA17DA947476B5FB5CD09EA90A06A0CC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a6:3a:53:2a:86:5f:e0:67:59:9d:d0:36:67:
de:20:0f:ac:98:b9:89:27:85:71:70:ab:5e:40:8a:
6c:de:1a:80:12:52:67:c2:88:a4:db:2a:9e:d6:5a:
d2:f9:77:e4:10:dc:9a:d4:6e:df:21:07:29:e3:1d:
4a:46:38:37:43:5b:8b:48:1d:b7:23:26:2b:8c:a1:
f9:a8:24:22:e3:e5:c0:cb:65:98:de:24:af:67:23:
6f:fd:76:70:2f:5b:ea:56:b5:73:41:68:06:5c:08:
b0:b8:88:04:45:b4:6c:d8:5d:3c:b6:fb:26:4f:93:
1d:ad:c5:c2:e2:91:d5:0f:aa:86:6f:e2:14:93:d2:
ef:44:a5:23:c0:b2:c4:9b:6c:c2:e5:87:cf:6d:df:
15:3b:21:bd:fb:9f:9b:01:f1:e3:e0:19:11:23:50:
d8:30:c1:40:1c:8c:55:18:2d:99:c6:4f:ad:ba:c7:
bb:e9:4f:90:31:62:9d:0c:d5:0c:e3:5e:aa:d5:ef:
ce:aa:c3:fa:87:08:5a:0f:c1:3c:3e:14:44:f6:6e:
b3:1e:87:10:04:cf:cb:8b:c0:38:40:54:3e:dc:79:
d2:55:34:8c:6e:a8:47:e2:4f:4a:22:c1:00:41:6e:
25:e0:4a:c3:82:1e:af:0f:6b:ee:d6:43:c2:d2:d8:
6a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AB:B6:7B:A1:7D:A9:47:47:6B:5F:B5:CD:09:EA:90:A0:6A:0C:C1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qKu2e6F9qUdHa1-1zQnqkKBqDME.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.144.0/22
Signature Algorithm: sha256WithRSAEncryption
40:ef:c6:85:5f:51:c2:5b:eb:b0:11:1e:da:57:4a:47:1e:95:
37:64:1e:c5:d8:fb:13:b5:9e:89:73:05:ff:fd:e0:d3:75:3c:
4c:e9:81:f3:ab:2c:4a:d9:4a:63:5d:95:08:43:40:e1:fe:e0:
3b:0e:2f:d5:a6:32:ea:0a:6a:30:65:03:24:c6:d4:23:d1:aa:
f8:3e:b2:ae:21:b0:9f:48:00:fd:cf:8a:12:41:12:2e:10:3a:
5b:63:cc:e7:b1:17:5e:82:ff:c5:82:64:2d:3e:ee:61:b2:1d:
ee:06:60:cf:68:91:18:c4:d5:61:d9:1d:51:17:90:64:6f:53:
a0:76:08:54:41:c3:55:0d:3d:0d:ff:c1:cb:20:ad:26:b4:d7:
f4:9b:0f:f8:e5:65:be:15:44:10:64:6f:3c:24:ba:be:6e:a0:
2b:90:f2:4d:ac:24:79:04:27:c3:a7:73:a2:29:36:7d:5e:3c:
3a:a9:64:ec:4e:34:9d:56:ff:0e:84:8e:a9:0e:a0:cc:37:c0:
a4:9c:85:03:b6:b4:51:02:93:5f:8a:66:62:75:b0:17:b6:e9:
56:89:88:14:f1:04:03:eb:7b:80:2e:10:6b:0c:77:39:15:10:
b4:d1:3d:20:27:ea:bb:8a:fe:e2:e0:d9:ab:c9:04:61:be:7d:
56:5f:a1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:34 2025 by rpki-client