Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3N_XJqTbYaAfBylRMd7mv6X-RrQ.roa
File: 3N_XJqTbYaAfBylRMd7mv6X-RrQ.roa (raw, json)
Hash identifier: cKbwO1TjF4A1zbDjbTvY3vhaadb030KrvaIMJzcO1X8=
Subject key identifier: DC:DF:D7:26:A4:DB:61:A0:1F:07:29:51:31:DE:E6:BF:A5:FE:46:B4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3293
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3N_XJqTbYaAfBylRMd7mv6X-RrQ.roa
Signing time: Mon 26 Aug 2024 05:31:47 +0000
ROA not before: Mon 26 Aug 2024 05:31:47 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12947 (0x3293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:47 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DCDFD726A4DB61A01F07295131DEE6BFA5FE46B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:a5:b0:6c:1f:26:ab:aa:95:b1:58:9e:fa:
73:e7:38:0f:d3:54:c4:2f:0e:87:84:3a:98:26:9f:
85:54:57:a3:c0:a2:34:47:b8:c8:a9:1a:41:f2:87:
ad:f8:68:0d:3a:8e:e0:bc:37:94:27:10:90:5c:a7:
fb:cc:e2:56:fc:37:86:1a:f6:47:c5:76:6c:2d:46:
bd:a0:33:36:4e:cb:30:c5:fd:98:1c:a7:fa:af:d4:
53:b3:bb:9b:ee:fe:2a:d5:58:a6:31:8f:d2:c2:01:
c6:32:12:29:d4:c1:9d:24:cf:95:5b:e6:71:5f:22:
ff:5d:f9:33:d3:ed:2a:72:e7:6a:aa:d6:88:ed:86:
a7:8d:5d:2b:44:0c:cb:c5:e3:c0:c4:f0:b3:03:94:
05:af:19:12:29:3e:9f:17:74:50:ea:7f:9e:fd:72:
18:ab:f9:d3:4c:b3:5f:64:db:38:15:cd:b2:9a:8f:
07:17:5a:53:41:c3:43:e3:7b:a6:17:a5:70:a9:d3:
4f:c0:f1:10:9d:f2:4a:e3:ba:c9:18:f6:6c:b2:d3:
d9:31:42:10:58:bd:e0:2f:db:99:6d:96:99:f0:f8:
d7:7a:27:27:66:05:99:9e:4b:7f:79:80:0b:10:50:
b7:b1:6a:aa:21:6a:49:e7:8e:ed:09:2a:ab:1d:f0:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DF:D7:26:A4:DB:61:A0:1F:07:29:51:31:DE:E6:BF:A5:FE:46:B4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3N_XJqTbYaAfBylRMd7mv6X-RrQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.144.0/22
Signature Algorithm: sha256WithRSAEncryption
88:47:7e:05:ab:5c:2f:e9:bb:74:4c:e4:fc:aa:dc:66:85:ae:
99:ff:c3:ed:80:f6:b5:bd:dd:c3:eb:e9:c9:42:15:c3:bd:41:
d2:c2:d7:8c:7b:4e:4d:46:fa:a5:c5:81:9b:96:e7:34:f5:15:
65:bc:6f:80:c0:23:eb:a6:20:b2:bd:47:98:18:12:8d:fe:62:
a8:49:9a:44:68:b0:a0:ca:52:09:98:69:58:3e:b4:7b:f0:c7:
b8:ce:cc:80:4f:e6:f7:19:dc:5a:a9:53:9f:06:b2:05:ef:62:
87:db:0c:4b:a0:35:a4:94:f7:65:a8:b4:9f:21:2c:84:cb:dd:
ce:bf:25:9d:0c:5f:33:ff:70:ca:37:1f:17:36:df:dc:b7:5e:
72:c9:89:88:eb:0d:e5:a9:9a:83:33:d4:86:8e:ca:9d:0a:83:
4b:ef:02:43:2d:52:12:f1:e2:83:70:cf:02:90:b3:81:57:88:
80:38:c6:42:ba:69:6c:b1:5b:34:52:69:1a:f0:39:7d:8c:87:
9d:80:03:12:f1:b4:1f:e0:9e:84:cf:ff:93:14:75:d1:86:b7:
4c:bc:f4:34:a7:70:ef:a2:a5:2f:d1:b0:d7:19:93:92:fe:07:
d1:33:24:0c:f9:b8:07:0c:8a:46:4d:c8:f0:91:d6:66:96:a2:
c3:76:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:26 2025 by rpki-client