Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/REfaTy0o2mh42KsDrIun-1EcJ2U.roa
File: REfaTy0o2mh42KsDrIun-1EcJ2U.roa (raw, json)
Hash identifier: 7ZZC70vvtbYSk6ElZpcnMh7IHWPyiY9xRCqoNtRQ+4E=
Subject key identifier: 44:47:DA:4F:2D:28:DA:68:78:D8:AB:03:AC:8B:A7:FB:51:1C:27:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3216
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/REfaTy0o2mh42KsDrIun-1EcJ2U.roa
Signing time: Mon 26 Aug 2024 05:31:15 +0000
ROA not before: Mon 26 Aug 2024 05:31:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 118.232.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12822 (0x3216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:15 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4447DA4F2D28DA6878D8AB03AC8BA7FB511C2765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:80:91:4d:3d:23:44:95:33:c7:cb:77:c8:
b2:1a:0e:b3:f8:f8:cc:75:25:58:bc:9c:40:5c:5d:
d2:7d:9f:f3:75:c8:05:c8:73:06:d8:86:d2:0d:d2:
e0:38:36:06:f9:52:3e:42:7b:78:87:40:64:3c:26:
b3:65:c1:2c:10:fb:f9:7e:28:d7:61:29:70:5d:61:
05:e0:fd:d0:a9:38:4a:0c:ec:2b:05:eb:5a:d5:ce:
98:4b:83:8c:29:3b:ba:b3:01:43:02:68:7b:76:ff:
a5:20:e6:ba:1a:b4:32:9b:64:8d:e2:c4:32:6f:f0:
b4:e1:fa:ed:e2:bf:53:24:f9:88:4f:d4:fd:c2:48:
9b:50:a6:59:e8:42:87:bf:a3:39:76:35:57:0f:d9:
43:e5:28:ae:34:28:d8:9d:db:d0:41:66:d3:5f:1e:
80:c8:f6:95:64:c2:f2:3a:8d:95:59:a4:94:ec:e8:
78:e6:85:f1:97:79:a2:48:a9:77:77:88:90:3b:91:
f4:8f:3a:85:a1:2e:bd:73:b5:88:b6:72:dd:ff:28:
aa:8f:81:dc:ab:3f:c8:a7:15:6a:29:93:8e:92:ca:
b9:87:8f:02:c1:c3:ff:c0:9b:29:8c:3e:b8:f4:54:
56:7d:e2:a5:a7:a3:a3:81:7d:3b:8f:e6:fa:aa:a0:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:47:DA:4F:2D:28:DA:68:78:D8:AB:03:AC:8B:A7:FB:51:1C:27:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/REfaTy0o2mh42KsDrIun-1EcJ2U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0a:95:5b:91:c9:10:85:3d:68:81:81:fe:11:14:c2:28:d5:38:
12:c3:f6:c5:4a:bd:f7:6f:27:c2:c6:1b:3f:85:dd:f5:f7:46:
8f:5c:96:46:36:32:37:ed:6d:15:fd:27:d8:dc:56:80:37:f4:
52:2e:db:60:62:8e:83:55:df:cb:4d:3a:ad:61:4f:ef:ad:7b:
65:e3:e4:12:bb:81:41:a4:3d:8e:0d:a9:6a:a0:ac:94:23:25:
4b:a2:49:d5:00:2e:06:45:40:8d:91:f0:ad:67:1e:b8:c0:52:
5a:0e:18:90:fc:98:aa:b8:c9:87:1e:93:5b:db:e6:7e:78:4a:
4a:32:db:49:5f:25:49:cf:b6:48:de:1b:4f:8b:3a:cf:2e:31:
82:54:38:72:f2:3b:16:9d:38:0d:67:df:67:86:10:3c:64:39:
f4:a7:5e:96:7b:bd:7a:4f:59:83:bd:ad:75:bd:53:58:bc:08:
e2:34:d1:1c:c8:80:04:2b:60:4d:15:af:99:c4:41:5f:b4:2d:
20:b3:56:23:a0:95:39:68:58:4c:75:11:d0:8b:0b:54:24:a3:
53:68:00:bc:ff:20:59:e7:02:c5:41:ea:31:9d:c2:3e:77:28:
23:89:87:5f:05:7c:e6:fc:06:a2:c1:4a:f6:30:3a:d9:27:94:
1f:87:1c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:55:35 2025 by rpki-client