Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eK9jhEYuNm3Me0cIAm_Kr4S5Lt0.roa
File: eK9jhEYuNm3Me0cIAm_Kr4S5Lt0.roa (raw, json)
Hash identifier: tGH/5nwiPu/WP3GiJc8GGVodGei3Qj2e1cVGd0cPtp4=
Subject key identifier: 78:AF:63:84:46:2E:36:6D:CC:7B:47:08:02:6F:CA:AF:84:B9:2E:DD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3148
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eK9jhEYuNm3Me0cIAm_Kr4S5Lt0.roa
Signing time: Mon 26 Aug 2024 05:30:18 +0000
ROA not before: Mon 26 Aug 2024 05:30:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 118.232.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12616 (0x3148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:18 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=78AF6384462E366DCC7B4708026FCAAF84B92EDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d4:83:4b:e6:28:c0:af:df:90:e2:11:7e:7e:
6b:d0:27:f6:09:8b:a9:e7:00:3d:89:b5:83:51:99:
5a:21:b3:cd:b0:05:46:c3:ac:0f:e8:75:3b:93:18:
e3:5e:f4:a0:36:00:57:da:6d:6a:81:dd:6b:59:63:
ce:37:89:e5:59:68:ac:90:46:b0:25:54:26:14:13:
48:eb:92:ed:9b:3a:89:37:c8:6e:78:0d:c3:74:8d:
19:37:c4:9d:fa:5c:ed:d2:f9:4e:60:8a:01:80:42:
16:51:3a:7a:54:03:80:05:dd:0c:a4:25:26:ea:4a:
ec:dc:72:e0:9d:9e:df:8b:6a:b5:b2:3a:e7:78:5f:
ea:de:21:92:62:d1:f8:54:70:0a:40:65:85:41:25:
ea:dc:71:be:ec:7a:93:fa:4a:26:7f:00:61:f9:52:
66:96:bf:3c:b4:e8:a9:a7:87:c6:95:6e:59:00:d3:
e2:cd:e6:a5:bc:7e:47:44:9b:ad:97:70:8d:6d:d0:
22:52:5a:cf:0c:c3:b7:ae:4b:db:5f:eb:b7:37:6f:
5c:60:52:3c:68:50:e7:cf:06:c8:31:0c:84:43:be:
fa:ed:99:2e:df:47:20:08:ef:48:3d:22:67:a3:16:
78:36:c7:a5:d6:5d:e1:b1:70:37:62:cd:fe:37:b3:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AF:63:84:46:2E:36:6D:CC:7B:47:08:02:6F:CA:AF:84:B9:2E:DD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eK9jhEYuNm3Me0cIAm_Kr4S5Lt0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.160.0/19
Signature Algorithm: sha256WithRSAEncryption
68:6c:a3:b2:f3:39:47:0d:da:da:21:9f:c5:65:76:f5:ff:21:
4e:68:86:01:85:8b:8b:c3:d0:e6:3a:de:73:c4:65:51:07:dd:
a6:cb:21:7f:35:bc:63:d9:8b:42:3d:10:1e:e2:63:8c:89:7f:
b7:7f:54:2f:a6:a4:54:59:59:5a:87:d5:d7:8f:aa:f1:75:49:
96:29:a5:b9:e8:b6:db:1a:1c:70:0e:4f:26:94:06:2e:55:74:
62:cd:cf:a2:f1:35:38:54:31:f6:23:8b:68:5d:1d:e9:53:39:
e6:b0:1a:f7:55:55:69:a6:4a:fb:3e:d1:f0:8c:ee:d3:f4:f1:
9e:eb:8b:ce:e4:61:bb:58:83:21:c0:10:9c:5e:da:37:c5:72:
96:6e:0e:ea:26:89:fa:f4:85:39:ac:17:48:88:69:55:a9:ce:
c9:fd:9e:6e:c5:f4:04:ac:b0:21:bc:01:b7:68:24:b7:2a:e6:
f8:38:4e:1b:90:fb:df:7f:9b:41:6a:e1:66:54:63:32:30:2d:
f6:e2:1b:d0:65:3e:d1:72:bc:7b:38:98:43:f9:a0:53:e3:52:
45:c8:0e:f0:e9:8e:be:89:6b:fb:dd:43:60:49:04:2f:15:9d:
dd:63:a4:e0:59:6b:ec:67:c2:f6:bf:f5:52:4d:a2:4d:bb:b7:
e7:2c:98:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:40:51 2025 by rpki-client