Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vnA4z0r63iTFc0XkiIcrs98FHCE.roa
File: vnA4z0r63iTFc0XkiIcrs98FHCE.roa (raw, json)
Hash identifier: EsYG+iE3WCM8jGkW0XaM88LCX5IRwg26LW8uaQf/lzA=
Subject key identifier: BE:70:38:CF:4A:FA:DE:24:C5:73:45:E4:88:87:2B:B3:DF:05:1C:21
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 354C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vnA4z0r63iTFc0XkiIcrs98FHCE.roa
Signing time: Mon 10 Feb 2025 13:53:13 +0000
ROA not before: Mon 10 Feb 2025 13:53:13 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 211.76.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13644 (0x354c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:13 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BE7038CF4AFADE24C57345E488872BB3DF051C21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:df:4d:6c:ab:29:ac:33:45:31:8a:11:df:
e6:23:7c:d7:be:f6:f4:ae:4d:3c:b5:96:2b:e5:84:
5c:ce:37:f7:4e:01:15:9f:79:5c:27:8b:92:c3:11:
3f:70:b8:21:24:2c:ee:94:fc:20:86:65:d0:08:7d:
2a:02:d9:06:6d:1b:53:a4:3e:19:b6:e6:87:28:80:
7b:d3:e2:01:53:5a:10:f8:b8:e2:2a:26:61:50:bf:
59:02:f2:ea:97:11:7b:18:42:33:b1:59:67:2c:e4:
fe:8c:24:75:9e:e3:fa:ab:86:d1:cd:9b:d5:9b:3f:
c0:09:02:ea:f1:48:ec:57:ae:57:74:bf:b0:97:7a:
a7:f4:1a:6a:48:29:b8:b2:31:74:70:c2:68:ac:04:
74:1e:49:22:da:e2:89:91:21:2e:b8:92:cf:bb:c7:
1c:19:b4:17:7e:61:d4:98:19:65:27:54:6c:79:79:
0e:2b:20:cb:a0:f1:d6:a1:2e:6c:aa:ad:1d:42:5b:
7b:7e:c5:06:d2:0b:68:18:6c:24:5c:3b:c7:a3:0f:
2a:e1:a3:72:d3:8e:9c:ad:9d:80:e1:2c:61:4c:8a:
c5:6a:28:80:ff:ee:40:9a:cc:8b:4e:67:b1:28:60:
2e:f3:31:cf:86:31:d9:b4:e2:9f:a6:42:4b:a8:35:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:70:38:CF:4A:FA:DE:24:C5:73:45:E4:88:87:2B:B3:DF:05:1C:21
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vnA4z0r63iTFc0XkiIcrs98FHCE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.114.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:38:29:62:c7:d0:d9:f0:75:40:26:55:73:7f:a4:ee:5e:45:
2a:5b:3f:a2:0a:9c:cb:14:73:3f:95:c4:dd:e1:10:14:b8:20:
eb:49:da:e0:2a:c5:8d:69:14:df:83:7d:0f:3d:14:af:35:40:
5c:33:e5:a8:a9:74:32:a6:e5:05:e0:92:8b:f9:06:4d:58:a2:
99:16:24:1d:52:d5:9d:be:c2:86:db:2c:4d:69:b9:bb:c6:d1:
c1:39:ad:86:62:06:5a:89:68:1d:bb:f8:d0:75:57:5d:15:1d:
9b:7d:c1:27:7d:d5:8e:9c:53:b6:5a:ee:2a:31:57:ce:a8:d3:
d2:73:44:15:af:e3:ee:6e:6f:07:72:2b:22:42:eb:25:4f:99:
9c:30:8f:61:3e:32:e1:2b:7c:3f:d0:8e:c6:7c:b9:82:6f:7d:
b5:36:a8:8d:18:07:04:3a:04:5b:95:69:04:60:0e:70:cb:4e:
03:4b:38:f0:d7:a5:39:4c:fc:d6:59:b8:a3:85:5b:7e:20:cd:
ca:a1:49:08:f8:5c:bb:de:c5:76:e9:e4:e5:69:bd:42:c4:bb:
dc:4e:7b:f3:bb:05:7b:98:45:75:b0:8f:c1:48:9e:cf:6b:f0:
f0:e7:63:49:0f:ab:8f:5b:8f:d8:50:ab:4c:1e:15:e3:47:f7:
23:28:e2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:49 2025 by rpki-client