Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-WxrHm1QZ8wgBuhM9giEE3RwCzY.roa
File: -WxrHm1QZ8wgBuhM9giEE3RwCzY.roa (raw, json)
Hash identifier: /6dZoScHQ8jwm+nyD4l+ybiSPo7GuX3SqdxBbZNK1a4=
Subject key identifier: F9:6C:6B:1E:6D:50:67:CC:20:06:E8:4C:F6:08:84:13:74:70:0B:36
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36A5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-WxrHm1QZ8wgBuhM9giEE3RwCzY.roa
Signing time: Mon 10 Feb 2025 13:54:32 +0000
ROA not before: Mon 10 Feb 2025 13:54:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.238.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13989 (0x36a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:32 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F96C6B1E6D5067CC2006E84CF608841374700B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9f:ea:48:5b:95:14:8b:ff:20:72:ea:e6:33:
8e:2c:d7:03:e1:28:9b:39:1d:0b:60:07:3f:24:bd:
84:01:44:fc:06:b3:84:07:96:fc:57:a2:19:21:c6:
ef:88:a4:74:3f:a4:83:42:36:a2:52:9b:e0:ea:af:
f5:ac:ff:e5:f4:d5:ab:77:68:9a:df:24:ce:0e:a9:
4f:9a:ab:4f:5d:e6:66:da:3c:1f:12:5b:10:4a:00:
f6:25:b4:92:35:3e:1f:15:9f:56:bc:c6:49:4e:a6:
7d:a1:b0:be:b1:a8:3a:c0:3a:62:52:0e:f0:85:0b:
b4:04:66:b7:3f:2d:ae:a8:ad:b4:52:78:a0:73:79:
6d:01:b0:66:8b:a9:76:f8:b3:c4:e5:b5:47:f6:1d:
6a:cc:2f:22:5c:9f:9d:4e:04:60:17:68:c9:51:9d:
a3:b4:e2:01:60:42:58:df:18:2a:48:89:22:44:58:
34:7c:9d:c4:3a:61:1d:18:2d:f3:ec:4e:d2:95:87:
ed:52:e2:a8:a6:49:ef:35:ef:e2:df:ed:ea:9c:0e:
71:8d:09:e9:74:e9:58:ef:37:bb:a8:29:14:25:b5:
78:12:e1:b9:83:24:b5:15:1e:10:12:98:84:4c:98:
fc:3b:04:20:c9:b1:86:3a:c1:8b:52:12:83:79:51:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6C:6B:1E:6D:50:67:CC:20:06:E8:4C:F6:08:84:13:74:70:0B:36
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-WxrHm1QZ8wgBuhM9giEE3RwCzY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.238.128/25
Signature Algorithm: sha256WithRSAEncryption
1a:39:5e:42:e1:db:6c:2e:f6:d1:ee:38:c0:5a:40:0d:41:44:
d6:13:68:b0:95:61:1a:0c:b0:49:7a:8a:50:f7:ae:fc:51:85:
11:c1:3d:56:31:2f:39:6e:09:aa:a6:66:07:77:50:49:fe:6d:
ee:3a:59:9e:66:41:5a:73:c0:f3:c9:23:30:29:05:a9:9e:1e:
b6:d1:11:40:e8:14:73:4c:2c:dd:c5:ff:7c:0b:81:9b:89:16:
e9:89:8e:cf:fa:34:a5:c0:75:93:14:05:77:8a:a0:0a:da:e1:
1e:c7:54:01:96:d2:ee:8a:4c:fa:6f:70:e5:fe:c9:50:26:5f:
0a:98:89:e3:33:d4:0a:8c:4a:1a:c3:92:c1:d9:1b:68:d1:18:
74:65:fa:63:ec:90:3e:fc:1a:f2:5f:e2:e4:52:20:25:7a:d0:
80:61:05:db:6a:da:a5:48:19:71:c0:62:76:3a:b2:d6:33:ec:
e6:0b:7c:6e:c4:c8:a3:10:3b:4e:a4:f9:55:33:a8:cc:47:86:
17:5c:65:a0:7c:11:62:f4:02:ce:37:b7:4f:74:c1:87:e2:af:
1f:d1:8a:f0:0d:95:be:dc:2b:19:04:d5:52:c1:2e:e9:b2:81:
e6:66:64:15:d2:b1:78:5e:ac:6f:87:b4:5b:3b:57:42:23:8b:
ce:d8:a3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:30 2025 by rpki-client