Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rxZfPyT_AFhRuobswqp3vYB2SRM.roa
File: rxZfPyT_AFhRuobswqp3vYB2SRM.roa (raw, json)
Hash identifier: p2r/M56Zv9QfSTWsgbvWJ/Ja4W/HcHqTwRuqE7ozdaI=
Subject key identifier: AF:16:5F:3F:24:FF:00:58:51:BA:86:EC:C2:AA:77:BD:80:76:49:13
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35CA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rxZfPyT_AFhRuobswqp3vYB2SRM.roa
Signing time: Mon 10 Feb 2025 13:53:41 +0000
ROA not before: Mon 10 Feb 2025 13:53:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13770 (0x35ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:41 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AF165F3F24FF005851BA86ECC2AA77BD80764913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:f7:4c:51:0c:cc:cf:d2:a5:d7:28:35:6c:
2c:5f:67:a4:97:1c:78:cb:22:10:9a:58:eb:4d:31:
d7:c8:9f:4e:fe:5a:88:84:cb:5d:7d:cb:e8:80:8d:
78:98:cb:8a:54:c6:6f:c5:56:c1:1d:e8:3e:07:c7:
45:d0:2c:a0:b7:37:a5:a2:d3:ea:c2:5b:bf:c2:e3:
03:09:b3:8e:98:bc:f3:f0:c5:64:58:1b:ef:0c:12:
97:32:c2:44:c1:a7:6d:10:3b:b7:3c:1e:ce:d3:fd:
5d:f0:15:1b:60:8a:ae:00:e6:e8:9c:49:43:df:c9:
df:95:4d:69:65:f5:2d:b7:37:92:e7:c6:1e:32:5c:
64:7e:5d:0a:1a:7a:67:ad:3f:43:c8:ab:93:b2:31:
c4:b9:01:ae:a1:28:76:c0:d7:89:f8:4d:49:98:b2:
40:1a:33:69:7c:cc:38:75:4c:63:28:5a:ec:36:17:
5d:62:ae:40:4f:18:fb:a0:40:a0:e0:a8:69:a7:6a:
6d:03:e9:f3:b0:c5:de:0c:4d:40:50:5c:87:9e:f1:
83:86:b8:6a:5c:ee:29:48:3c:27:45:d1:ca:32:5c:
27:6e:ec:c3:fb:eb:d2:96:8d:23:10:cd:52:10:de:
87:16:dd:1c:ea:95:2f:29:58:5a:e0:81:9b:15:b4:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:16:5F:3F:24:FF:00:58:51:BA:86:EC:C2:AA:77:BD:80:76:49:13
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rxZfPyT_AFhRuobswqp3vYB2SRM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.224.0/22
Signature Algorithm: sha256WithRSAEncryption
08:bb:59:92:f4:66:6e:b6:7f:19:c4:ad:25:24:7f:77:e6:3a:
d2:04:14:02:fb:b2:f2:c4:e6:78:9d:ac:f4:82:a6:3c:8f:6a:
e4:21:22:3a:33:09:d9:a3:d9:20:27:33:3a:f7:41:fb:e4:9f:
c3:79:02:35:6f:93:f8:2e:49:db:a5:c6:64:b6:f7:e3:69:fa:
b4:65:14:31:40:91:00:50:2d:b0:4e:92:4e:59:28:8f:b2:10:
a4:36:dc:04:ef:f7:83:36:c0:8e:99:95:1e:19:72:a8:7b:9b:
dc:b1:80:6e:7f:65:34:2f:b9:0d:ba:11:78:f5:6a:51:8c:93:
d8:c0:00:9b:dc:10:26:44:6f:49:fd:2f:c7:2d:be:3a:d2:48:
23:79:f7:4b:5e:40:a0:ca:63:d7:f4:9f:23:b2:ca:83:38:43:
9f:18:6c:47:6b:71:cd:10:12:ce:a2:a0:2f:db:6d:e9:de:7a:
68:cf:8e:3a:0c:cc:8a:47:c8:c6:50:b4:b8:b5:3f:83:fa:4b:
b6:86:67:49:35:07:22:25:fb:71:31:1d:7e:b1:49:fd:62:dc:
72:4e:2d:fe:2d:fc:ba:6c:39:f2:63:bc:66:02:ca:ae:b5:21:
80:c1:a4:a3:bd:7a:6a:1e:48:a1:78:58:4e:f7:43:ec:60:a0:
ca:a5:42:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:08 2025 by rpki-client