Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OFPr5f4hhzajRsxpKmSy5jGitwo.roa
File: OFPr5f4hhzajRsxpKmSy5jGitwo.roa (raw, json)
Hash identifier: vpVZ+uEVAgbVjxmgvzklDON6zCEQ0G9TuGfhoY1IPT0=
Subject key identifier: 38:53:EB:E5:FE:21:87:36:A3:46:CC:69:2A:64:B2:E6:31:A2:B7:0A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3451
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OFPr5f4hhzajRsxpKmSy5jGitwo.roa
Signing time: Mon 10 Feb 2025 13:52:16 +0000
ROA not before: Mon 10 Feb 2025 13:52:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13393 (0x3451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:16 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3853EBE5FE218736A346CC692A64B2E631A2B70A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:19:5a:8e:cf:b7:b0:d8:fd:48:2f:c8:1e:
69:0d:87:cc:54:99:9f:9b:3d:99:b5:8a:0e:ea:5f:
2e:39:33:f1:74:18:eb:9b:2a:cf:3b:70:16:cb:57:
40:ec:17:77:eb:24:c2:5f:e6:e0:65:a3:14:af:08:
bf:c9:bc:ff:e6:c5:4d:d9:71:5e:d6:c8:f4:b8:f7:
63:7e:4a:85:c9:11:3f:c6:98:a1:08:93:af:bf:fc:
b8:85:1b:4f:06:ad:39:a0:e0:d9:1d:c6:a1:6a:af:
a3:e1:82:fd:87:5d:83:f4:8b:15:d3:fc:50:b9:c6:
2d:f5:6f:29:97:07:d2:fc:11:bc:35:c8:cb:80:a8:
6a:7c:0b:5b:21:d6:4f:4b:f0:2d:10:8c:cc:e5:16:
cd:07:25:16:16:cd:e0:5d:76:47:31:79:da:7e:52:
eb:7d:fe:e5:2f:79:c9:e9:ec:14:d3:ee:ed:ed:db:
bf:39:fc:76:14:d5:af:57:22:f2:e7:f6:a8:32:3e:
30:70:b3:42:cc:98:a6:e3:59:c5:e3:bd:47:94:a2:
53:58:df:0f:7c:7f:70:e7:f2:84:87:05:27:89:f4:
f5:2a:9a:e4:77:63:63:5f:9f:2e:89:1d:10:14:a1:
1c:89:1e:de:55:b6:81:fc:01:bb:35:cc:0b:98:38:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:53:EB:E5:FE:21:87:36:A3:46:CC:69:2A:64:B2:E6:31:A2:B7:0A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OFPr5f4hhzajRsxpKmSy5jGitwo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.248.0/22
Signature Algorithm: sha256WithRSAEncryption
05:25:a1:78:83:46:78:a0:b5:34:75:b2:e5:ba:e0:c1:1e:4c:
6e:cb:85:1d:dc:9c:0d:d2:96:4e:03:e5:6d:6c:c2:74:a4:90:
9d:c2:f4:1f:04:be:08:e7:00:06:83:26:07:16:27:57:ff:b8:
ce:1a:d5:00:a1:4d:3f:e0:64:f5:de:8b:7a:6e:b6:cf:ce:3d:
8c:51:8c:a1:60:52:d6:7d:ef:18:9b:b4:37:16:a7:a0:01:1a:
bd:a9:66:56:00:03:d2:3a:68:d1:78:6f:02:eb:57:d4:f8:78:
e5:c5:ab:79:eb:56:80:92:51:ae:16:b7:ba:4d:78:ff:63:3d:
16:6d:6b:78:0b:d8:aa:bb:0e:c2:85:64:ee:d3:79:7a:4e:36:
2c:28:45:42:80:0d:5d:a7:4a:c0:f9:a1:98:00:5c:4a:ed:dc:
fb:02:27:fe:9f:fa:aa:af:1d:d3:3a:c9:5a:6e:dd:59:0b:e6:
b6:4b:d1:07:2b:35:02:11:08:b2:8d:eb:e0:ac:ea:2c:e7:92:
a6:50:1b:10:db:93:3b:41:a8:32:9b:4d:0c:7e:71:0a:27:05:
ca:d9:55:4b:c2:b3:c8:b7:33:7e:57:89:1e:9d:82:2f:31:17:
2e:19:b1:57:a4:cb:25:b5:eb:c1:e2:b4:5e:25:7d:b3:6c:b8:
b9:eb:9f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 01:51:45 2025 by rpki-client