Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qr6EBWNgoYq-ZtnIRxsHBzjFJpA.roa
File: qr6EBWNgoYq-ZtnIRxsHBzjFJpA.roa (raw, json)
Hash identifier: vwt8zcXlNvDhzdGX6DZWVQHoICQbzW/2OA7oK1JZjho=
Subject key identifier: AA:BE:84:05:63:60:A1:8A:BE:66:D9:C8:47:1B:07:07:38:C5:26:90
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36AB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qr6EBWNgoYq-ZtnIRxsHBzjFJpA.roa
Signing time: Mon 10 Feb 2025 13:54:33 +0000
ROA not before: Mon 10 Feb 2025 13:54:33 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13995 (0x36ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:33 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AABE84056360A18ABE66D9C8471B070738C52690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:e3:3d:5e:b1:f0:59:6f:19:8b:39:e1:a0:
fb:fc:66:b3:31:c6:9b:19:cf:d6:4e:8d:e8:3b:73:
b9:fa:96:83:b7:a3:50:59:93:c2:13:45:27:ac:3d:
f0:a3:bf:58:90:10:a1:16:40:30:e6:d2:32:e1:5f:
7c:c7:40:ee:b8:92:e0:65:64:89:9b:f5:28:0e:b1:
9b:f8:1c:36:a8:a4:20:87:cb:fd:a3:5a:43:f9:39:
f7:1a:4e:c0:54:d8:24:52:d1:f7:06:52:d5:a6:b8:
3e:81:a7:d4:27:2d:12:cd:d5:83:6d:eb:d4:62:ed:
75:4a:a1:91:5f:22:de:1c:d2:70:52:82:07:7c:8b:
e8:40:b6:b8:bd:22:90:05:10:23:da:f8:4d:ac:36:
18:38:28:00:5a:05:00:63:4d:ab:f9:fc:cb:26:bb:
f6:6a:34:61:bb:98:b1:05:67:3e:2e:18:9e:3c:59:
a1:14:d3:f9:d0:eb:f8:fe:4d:24:d2:fb:6d:9e:15:
d1:56:2c:64:d7:67:81:6f:1e:d3:d9:a6:82:80:1f:
40:0e:5d:cf:93:44:e1:36:44:1e:20:6d:fa:f3:fd:
29:5b:75:39:b6:bf:ac:38:04:8e:b7:21:44:f3:a2:
2c:e7:21:38:7e:ac:1e:fc:3c:46:ca:43:22:a9:09:
72:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BE:84:05:63:60:A1:8A:BE:66:D9:C8:47:1B:07:07:38:C5:26:90
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qr6EBWNgoYq-ZtnIRxsHBzjFJpA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.100.0/22
Signature Algorithm: sha256WithRSAEncryption
70:92:c9:67:4f:92:ea:a0:47:ee:b0:cb:9b:e0:4d:d2:0f:6f:
e8:cb:d2:8d:b0:44:ce:db:51:fc:9a:73:0d:70:dd:c3:25:1e:
0c:8a:11:61:53:ac:df:2e:4e:91:13:fe:49:34:aa:31:e7:ea:
e9:b5:81:0e:78:0e:ef:fa:91:06:20:51:6a:c6:8e:71:0a:dc:
d1:df:99:9d:21:37:5f:9b:df:2e:0d:ab:c0:7c:ef:a9:7d:c6:
d5:47:ff:46:6f:7f:28:df:31:bf:a4:4d:06:29:c6:a3:32:3d:
ee:a9:d9:d2:04:e4:7a:ec:e4:d2:2d:89:52:e9:51:4a:7f:28:
bc:3d:11:58:3c:1f:79:e5:55:31:cb:87:4a:a6:d8:58:b4:4b:
88:b4:f1:a2:b5:69:75:23:a4:57:96:46:e5:2c:23:f6:f9:60:
05:8a:50:f2:3e:67:fe:0b:01:8d:68:ed:d4:9d:d3:55:fc:4d:
e1:e6:76:89:0c:f0:76:0e:12:c3:6f:f6:61:71:91:80:d9:6c:
48:50:05:68:8f:7f:21:8f:dc:4f:d6:52:f1:ef:c8:38:74:b1:
dc:b8:ca:44:40:26:a7:e5:55:39:66:d8:a8:b2:2b:7e:5a:33:
8b:25:57:8e:0f:59:9e:95:82:5c:99:b3:45:eb:da:ea:b2:74:
6a:c2:5c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:11 2025 by rpki-client