Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tyN9-ORrdUyUbG7JOedq1yzMMnk.roa
File: tyN9-ORrdUyUbG7JOedq1yzMMnk.roa (raw, json)
Hash identifier: zmz9J/qAZlrMTqIeTXvTkqA84lwqhrbmFi4kgQbldxM=
Subject key identifier: B7:23:7D:F8:E4:6B:75:4C:94:6C:6E:C9:39:E7:6A:D7:2C:CC:32:79
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3381
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tyN9-ORrdUyUbG7JOedq1yzMMnk.roa
Signing time: Mon 10 Feb 2025 13:51:29 +0000
ROA not before: Mon 10 Feb 2025 13:51:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13185 (0x3381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B7237DF8E46B754C946C6EC939E76AD72CCC3279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:98:d4:8a:0e:99:e0:7f:2c:53:0f:23:3a:4f:
4e:3b:6b:79:d6:8e:dd:50:88:79:bb:ba:84:df:78:
17:9e:3c:c3:ad:3e:ec:48:55:8d:05:e6:20:ec:d6:
15:17:0e:84:de:e8:e0:14:f6:db:b7:99:a8:1e:5b:
ab:00:22:51:52:0f:6a:c3:23:f9:fa:9d:92:67:4b:
e4:35:70:e0:0e:5d:b7:36:01:15:ae:65:7d:21:94:
bf:cf:f3:ef:9e:21:34:ad:d4:be:de:f7:50:f3:dc:
06:cf:6e:d9:18:00:23:ed:f9:2d:f4:44:6a:91:95:
c1:b9:75:75:3b:50:e3:87:a5:73:57:24:8f:67:5a:
43:64:07:94:3b:82:9d:74:ec:fc:43:61:fd:f4:ed:
3f:16:b9:5a:ef:86:01:25:6d:68:79:4d:f8:c5:eb:
86:92:63:a8:65:d9:14:9e:6a:51:92:78:83:92:c2:
3f:e7:bf:12:eb:36:45:29:70:6b:1b:80:49:b7:f3:
0a:b7:2c:5f:ab:fe:1e:38:e1:ac:8c:9b:28:e0:a6:
a3:94:75:5b:12:4e:97:10:98:0e:70:89:04:53:8c:
45:53:97:ec:a6:98:7a:e2:c4:aa:a9:5c:42:14:7f:
98:18:44:ad:5a:98:16:dd:3b:52:bc:8b:b2:98:e6:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:23:7D:F8:E4:6B:75:4C:94:6C:6E:C9:39:E7:6A:D7:2C:CC:32:79
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tyN9-ORrdUyUbG7JOedq1yzMMnk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.152.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:2b:6d:85:3e:d9:46:a8:97:ae:be:8f:ec:3f:09:bb:3f:0f:
41:53:07:2f:39:80:3c:4c:13:52:5f:50:9f:e2:c8:36:5b:d1:
9e:4f:2c:ca:63:13:2a:e8:f6:c5:74:30:aa:97:f5:09:c6:49:
29:da:16:c8:e2:6e:b3:ed:ac:77:0e:61:16:33:0e:5b:0c:29:
58:68:94:19:04:65:1b:e1:be:44:49:94:aa:f4:d7:18:1b:c4:
0f:1f:e9:4a:2c:37:5c:e3:a5:84:69:1a:b1:3e:a0:ab:5d:fd:
d4:8c:76:b2:c1:c9:2a:0a:9e:9d:64:ff:7d:56:fb:29:23:89:
db:64:65:48:43:a4:d6:de:ed:c1:1b:17:e1:97:a6:48:0f:ac:
14:60:4b:07:45:6f:1a:de:49:0c:d6:d7:ed:fc:71:56:df:dd:
8c:fd:bc:ce:45:cf:17:20:b8:0c:ca:35:29:2d:60:cc:bd:de:
95:9e:6b:4e:56:c4:4d:53:f6:06:06:0a:bd:7e:61:40:c8:d5:
ce:bd:bf:a5:6d:18:76:7d:f6:ba:22:6e:ae:f7:5e:b2:93:4e:
39:e9:1d:5a:e1:79:09:2b:ec:d0:36:f8:5e:de:6d:36:d7:22:
e9:e7:f4:b0:07:23:07:05:ca:6f:1e:12:04:fb:cf:f9:7e:13:
ba:7e:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:58 2025 by rpki-client