Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oTUGVr3ZiGoCxxxoeNQtpfsx7Fk.roa
File: oTUGVr3ZiGoCxxxoeNQtpfsx7Fk.roa (raw, json)
Hash identifier: 9VdXmac+qj+XZ5hrbr475BDwymSAAz5a+/NlbyJfYHg=
Subject key identifier: A1:35:06:56:BD:D9:88:6A:02:C7:1C:68:78:D4:2D:A5:FB:31:EC:59
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 32AA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oTUGVr3ZiGoCxxxoeNQtpfsx7Fk.roa
Signing time: Mon 26 Aug 2024 05:31:52 +0000
ROA not before: Mon 26 Aug 2024 05:31:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 118.232.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12970 (0x32aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:52 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A1350656BDD9886A02C71C6878D42DA5FB31EC59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:43:2a:bc:61:bc:db:72:42:9e:fa:1b:da:
5c:f1:2c:20:c8:18:f3:bb:69:4e:27:cd:1f:f0:a7:
fb:c9:61:cd:92:c2:c9:7e:89:db:1c:66:c4:98:82:
a9:ed:5f:70:9a:32:d8:c4:b3:dd:ae:a7:41:07:52:
fa:06:19:9d:74:79:1a:46:cd:06:15:4d:e1:10:ff:
f0:cf:48:fc:06:3a:43:cb:35:0b:e5:b5:ed:ff:47:
31:79:4b:e4:6a:35:ab:1c:57:3e:88:01:eb:a7:f6:
6c:9e:ad:25:fd:c4:32:41:e2:08:10:2a:0a:d9:02:
5e:18:ba:a2:60:b6:b5:cf:87:1d:27:c3:e8:f3:64:
83:7d:7e:53:ef:e9:2b:a5:7b:78:f4:d7:ac:6d:38:
3b:a7:7f:2f:bd:9f:89:35:a5:6a:03:db:c3:8d:3b:
4b:77:5f:dc:8e:a7:e3:24:e9:a4:f4:64:37:ed:66:
5d:37:a2:f6:13:bf:1b:9c:51:38:27:2c:50:99:80:
0f:30:de:10:7a:5a:3a:c1:ee:b9:b0:54:e0:ce:c5:
3a:e9:22:a3:bf:05:23:ad:e9:c2:a0:5f:ef:55:e7:
07:08:38:a8:42:1f:c6:2e:92:4b:26:24:12:16:a6:
e5:a1:c9:93:a2:23:9c:e5:83:29:6f:a6:18:fe:66:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:35:06:56:BD:D9:88:6A:02:C7:1C:68:78:D4:2D:A5:FB:31:EC:59
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oTUGVr3ZiGoCxxxoeNQtpfsx7Fk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.100.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:d9:f9:2d:04:fc:34:42:2d:18:2d:9b:42:71:a7:42:31:cd:
dc:f5:97:8c:84:aa:76:a5:3d:ee:25:2a:55:d4:20:70:6b:d6:
60:73:a7:82:0a:f2:9d:e5:bc:09:2f:27:8f:01:66:68:6c:37:
2a:ed:ed:dc:ac:f2:de:d4:92:2c:af:bc:fe:9a:56:44:db:f3:
34:15:3b:07:47:99:3e:eb:19:bb:71:0f:0e:87:c3:e6:11:17:
d9:b6:28:bb:87:49:d7:9d:84:7c:57:8e:13:be:08:5e:bb:8e:
af:db:55:d9:2f:0a:27:2d:31:f8:88:05:3e:a1:8e:8f:67:1d:
b6:f8:41:a6:0c:09:2e:b5:ac:01:85:a2:ba:05:6a:53:87:56:
23:16:48:5c:0d:8c:95:05:8d:fa:21:f3:6f:e4:f1:a1:35:16:
ac:40:e4:e7:2c:f1:9a:0b:6f:03:c4:1f:6d:77:63:ed:1e:61:
f4:5f:5b:ca:4f:49:dd:bc:5e:6a:e2:36:70:df:b4:56:fe:ef:
1e:f4:f2:3f:9e:e9:35:ef:e1:f6:c6:4a:6a:ac:0b:a0:5c:37:
4a:c9:da:0f:6e:27:6e:d6:bc:c3:0c:75:ec:5e:c6:26:9f:c9:
27:10:1b:2b:dc:bd:f7:fe:de:04:d2:81:40:af:af:9c:34:bb:
e0:d2:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:17:11 2025 by rpki-client