Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xPlR4MybmwYauDkc8axbXGHszxE.roa
File: xPlR4MybmwYauDkc8axbXGHszxE.roa (raw, json)
Hash identifier: csyh39Y54muZMqCmHr8DP+AExzfTi8gJYJEcqpHZ9bs=
Subject key identifier: C4:F9:51:E0:CC:9B:9B:06:1A:B8:39:1C:F1:AC:5B:5C:61:EC:CF:11
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34C0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xPlR4MybmwYauDkc8axbXGHszxE.roa
Signing time: Mon 10 Feb 2025 13:52:40 +0000
ROA not before: Mon 10 Feb 2025 13:52:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18429
IP address blocks: 118.232.200.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13504 (0x34c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:40 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C4F951E0CC9B9B061AB8391CF1AC5B5C61ECCF11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:42:19:cd:b2:e2:3e:42:3a:52:cf:93:39:36:
6a:0c:79:e5:44:a3:04:60:e6:b8:6d:6b:13:1d:99:
37:e7:61:2b:8b:17:42:f6:70:87:d7:6c:a4:a6:45:
89:ac:6c:ac:4e:da:ed:c3:8a:30:a0:69:d2:32:b0:
43:3a:e0:5f:77:3f:fa:10:0c:f0:19:0f:30:77:17:
ef:fb:55:9e:cb:25:18:2a:f5:e1:a7:b3:00:05:0b:
72:55:87:5c:b2:d6:ac:c4:5e:04:43:00:05:04:b1:
c1:8d:50:a5:be:d7:22:2e:26:b0:f2:11:2a:b2:03:
d4:80:c2:47:85:42:64:20:3c:7a:9c:91:9b:d9:ac:
cf:f3:52:25:e9:c7:2e:f5:75:64:7b:c2:25:f0:8f:
bf:76:54:8a:ca:dc:b9:8e:16:f3:98:65:b6:8a:57:
29:2d:46:ca:4c:5b:eb:af:77:17:52:9e:1c:73:3e:
fb:64:f4:d1:cd:17:46:2e:ab:ea:a0:54:50:3e:f8:
32:35:86:0a:77:a4:46:fd:72:77:55:78:d6:89:60:
ce:9b:cd:89:8b:b7:1a:16:13:71:4c:47:7c:b5:62:
30:e9:c0:a4:f5:be:f0:b8:a5:27:b0:d1:ed:d9:41:
11:f7:c0:a7:ff:c7:e2:4d:70:51:96:8a:12:5f:21:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:51:E0:CC:9B:9B:06:1A:B8:39:1C:F1:AC:5B:5C:61:EC:CF:11
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xPlR4MybmwYauDkc8axbXGHszxE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.200.0/25
Signature Algorithm: sha256WithRSAEncryption
10:93:72:51:c8:e5:7e:17:fd:7c:ce:73:9f:2b:cc:eb:c4:a6:
72:4f:c5:d9:7f:d2:c6:85:76:b5:0e:f8:bb:39:a2:a8:f3:b9:
b5:78:1a:8e:8e:2d:29:fc:85:ba:07:ef:c5:77:16:e9:fc:1e:
6d:da:0a:ab:39:2c:20:9c:a6:05:c1:0d:a0:72:f2:d7:6a:43:
49:f1:eb:b9:4a:61:4b:ce:57:0b:2a:c9:ce:55:ae:d2:37:c0:
c7:7a:93:69:37:11:12:0a:73:be:48:99:cd:25:46:50:ec:46:
d4:96:66:04:54:a2:69:14:00:cb:19:a3:8a:14:22:84:ad:70:
4f:d8:f9:40:f5:41:e1:90:a5:c4:22:b3:24:ae:2f:8e:e8:2a:
55:3c:29:b6:b8:a1:d4:64:9d:cd:46:89:28:a1:54:32:ab:94:
a9:19:17:a0:11:a3:b8:3f:53:bb:f1:55:9a:aa:d8:47:e8:e2:
a5:cc:2d:6c:fc:ec:29:5c:be:ab:28:b4:a8:2d:4e:5c:d0:16:
f6:79:6f:7e:64:ec:f6:44:26:16:2a:1a:6b:00:4f:c7:b9:fe:
2c:06:0a:89:52:24:88:f0:08:13:65:0c:a4:4c:a2:b7:f3:2b:
e4:17:44:e4:ec:94:88:fc:88:3c:22:e7:d4:c6:d1:8c:09:ba:
af:79:08:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:42 2025 by rpki-client