Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s8kXgYqnaD6IJyscgplWNuzj42M.roa
File: s8kXgYqnaD6IJyscgplWNuzj42M.roa (raw, json)
Hash identifier: fIkMwIxyWB8V/9QDx39enO6NwXeiVPG2pWNArFkMIso=
Subject key identifier: B3:C9:17:81:8A:A7:68:3E:88:27:2B:1C:82:99:56:36:EC:E3:E3:63
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3424
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s8kXgYqnaD6IJyscgplWNuzj42M.roa
Signing time: Mon 10 Feb 2025 13:52:06 +0000
ROA not before: Mon 10 Feb 2025 13:52:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13348 (0x3424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B3C917818AA7683E88272B1C82995636ECE3E363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:a9:2f:d6:2a:e8:65:de:06:75:3a:fa:69:
44:35:be:a5:08:68:06:be:a7:0f:9b:e3:71:78:b3:
b8:20:88:f9:b8:42:3d:3b:18:93:69:22:c4:7b:66:
08:53:c9:92:d5:75:76:62:bc:2e:e5:18:f6:ef:30:
12:b4:98:bb:80:00:50:64:9f:52:c8:e0:3b:07:5c:
e5:0a:9a:2d:bf:49:54:b2:ad:02:af:0a:6e:82:6c:
15:48:a5:e7:3b:88:3e:04:d2:e5:c6:e8:42:06:af:
b0:e2:d6:da:99:af:6b:ea:ae:83:06:66:e9:56:ec:
54:56:7b:a9:40:50:35:a0:fa:61:6b:7d:d3:05:6f:
e2:43:ca:fb:93:86:b5:d4:74:bd:0d:bc:72:9a:10:
ba:c0:da:ac:70:e9:49:b9:9f:50:e8:83:80:da:bf:
41:09:45:57:4e:12:83:6f:0e:38:07:1a:6d:51:61:
e2:6b:3b:00:e9:2b:51:e2:5b:a1:57:cb:30:50:e1:
f8:ba:c5:1e:86:6e:91:2c:33:13:59:59:9b:f4:8e:
46:c3:54:1a:31:77:a7:de:4d:33:e1:0d:19:be:3e:
3a:0a:ea:82:c5:f6:ea:61:95:6d:8d:05:49:81:4a:
7c:d9:96:00:b3:1f:41:9d:5e:e4:bd:36:f7:29:2d:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:17:81:8A:A7:68:3E:88:27:2B:1C:82:99:56:36:EC:E3:E3:63
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s8kXgYqnaD6IJyscgplWNuzj42M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.80.0/21
Signature Algorithm: sha256WithRSAEncryption
55:94:ff:0e:66:6e:82:79:39:8a:4f:9c:ee:96:cb:62:ee:9d:
a4:a1:76:bd:41:6c:50:54:ba:a6:ec:94:70:7c:1e:7a:ae:49:
28:22:10:22:e2:3b:82:21:20:d1:db:b1:62:99:a8:6f:42:51:
32:59:1b:4d:c4:28:af:58:99:01:30:0a:60:8e:75:ce:30:32:
fc:03:12:41:35:0b:29:be:1e:6b:18:16:ac:1d:9b:55:f4:3a:
5b:0a:d6:7e:a8:ab:e9:e6:8a:0a:c1:56:61:7c:aa:57:b4:15:
a4:25:9a:4e:62:5f:72:57:d7:b0:27:a3:7a:89:b9:b5:ee:6d:
11:12:76:e0:5c:5f:e9:24:12:e4:44:39:2e:43:b4:66:e6:95:
b8:92:b4:09:f4:0b:f4:1b:bc:fb:ea:a6:4b:dc:9e:4e:cb:a6:
ce:64:d0:31:98:6c:23:6b:c1:dc:5f:5e:7d:ed:8e:13:2f:81:
41:90:4b:3d:01:94:1b:71:60:2c:8e:92:d7:5d:89:c9:62:2f:
b5:bf:c8:9f:cd:a1:96:ad:83:2f:44:51:f9:c8:c3:da:74:96:
94:86:46:a6:13:84:32:5f:dd:d7:be:c0:0b:13:79:2e:7d:90:
ed:78:de:82:54:d6:02:b0:45:01:49:d1:a0:70:e6:60:4d:86:
e5:25:f5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:18 2025 by rpki-client