Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ugJ-TRaT2rDGcJVmRBDJQ5vwyK8.roa
File: ugJ-TRaT2rDGcJVmRBDJQ5vwyK8.roa (raw, json)
Hash identifier: LnfsNyDPzHeGFQDNDoCDFuYLLNUc+cO2IPTC1n+puf4=
Subject key identifier: BA:02:7E:4D:16:93:DA:B0:C6:70:95:66:44:10:C9:43:9B:F0:C8:AF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35D0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ugJ-TRaT2rDGcJVmRBDJQ5vwyK8.roa
Signing time: Mon 10 Feb 2025 13:53:43 +0000
ROA not before: Mon 10 Feb 2025 13:53:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13776 (0x35d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:43 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BA027E4D1693DAB0C67095664410C9439BF0C8AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:0c:4d:17:c4:64:d9:e9:65:9c:24:f6:87:
3f:51:43:a6:74:8d:a3:8f:c8:09:6d:68:22:ae:17:
6e:d9:b2:00:f4:89:50:0b:34:e4:1d:6a:c9:67:c4:
5d:20:35:3f:c5:8c:a4:dd:d7:9e:66:71:84:aa:28:
61:3c:2d:f2:1e:71:7e:ce:d3:5f:11:1e:19:7b:2e:
ac:e2:bc:ee:45:06:4c:7e:68:e5:1e:06:bf:f9:33:
a4:9f:00:f5:39:b5:06:8b:f1:8d:90:ed:e3:b8:05:
70:de:26:e0:2a:43:6f:cc:d2:89:7c:ab:8d:27:e6:
b7:33:70:48:bd:c9:1e:9e:16:b1:e2:be:5d:72:4e:
d9:b8:28:ff:b5:14:a2:3f:fa:41:5d:c7:03:03:be:
a3:de:11:16:1c:8c:44:d3:92:76:6a:f3:42:83:fc:
b0:4a:b6:57:cc:44:07:ff:b1:37:5b:23:be:87:5d:
2b:51:f9:0d:c2:6d:9c:ed:2e:1a:4c:29:46:c0:fd:
1c:97:d5:7e:fe:c8:fc:e0:9c:03:f0:bf:be:98:3e:
c4:a0:ad:46:fc:f7:80:f3:97:63:a2:0a:8c:de:d2:
06:84:15:bb:a9:1b:ba:f1:64:29:cf:f0:1c:e5:68:
2b:52:38:42:07:8a:ef:51:ca:61:0c:9d:dd:da:3e:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:02:7E:4D:16:93:DA:B0:C6:70:95:66:44:10:C9:43:9B:F0:C8:AF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ugJ-TRaT2rDGcJVmRBDJQ5vwyK8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.96.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:0f:1d:da:de:46:76:ea:31:b5:5e:61:37:4e:f1:9a:82:ca:
ee:47:93:aa:f5:3a:66:9f:9a:6d:25:7f:9b:e2:f6:af:46:a7:
35:1b:83:75:93:24:bd:8e:b1:73:36:3a:a3:9b:f7:b4:da:43:
fd:d1:25:fa:69:b5:08:83:ef:06:90:81:ff:b5:54:b6:5c:f6:
73:f3:78:99:17:1a:8c:fd:d5:1b:ea:11:59:e5:26:bc:7f:4f:
ad:f4:f7:39:4a:6e:60:02:cb:67:f4:89:2c:5e:f3:7f:40:c3:
f9:10:30:76:26:a4:a1:92:48:f7:81:17:42:ae:53:c6:12:5a:
f8:16:ce:4a:6c:75:eb:07:56:76:78:50:b7:e9:ff:3e:08:15:
b7:18:22:c0:e2:16:8b:75:56:21:a1:c7:8a:70:a5:b2:6d:80:
df:ad:b3:5f:e3:80:2e:0a:66:86:61:d9:4c:ab:ee:84:42:4d:
93:53:26:f5:93:03:39:77:42:37:23:b4:28:90:bc:9b:18:9a:
6f:f8:ee:ab:e2:3e:96:21:85:f6:68:70:43:ba:23:d7:8b:de:
6c:db:9d:77:de:0f:83:6b:98:b4:52:4e:67:f7:0b:b6:5a:36:
aa:fd:7e:b6:a9:84:1f:fc:86:6c:2a:61:03:d9:48:87:d3:24:
d2:89:91:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:13 2025 by rpki-client