Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4mCS_DK6IYTo06565HL9lur60Wk.roa
File: 4mCS_DK6IYTo06565HL9lur60Wk.roa (raw, json)
Hash identifier: JFXlHSqC+KpZhrQG0Ns5UqFIUmYA7ofrvMO8Hj1+Sg4=
Subject key identifier: E2:60:92:FC:32:BA:21:84:E8:D3:AE:7A:E4:72:FD:96:EA:FA:D1:69
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 31DE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4mCS_DK6IYTo06565HL9lur60Wk.roa
Signing time: Mon 26 Aug 2024 05:31:02 +0000
ROA not before: Mon 26 Aug 2024 05:31:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12766 (0x31de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:02 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E26092FC32BA2184E8D3AE7AE472FD96EAFAD169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:91:7c:87:c6:5c:0e:24:55:19:30:f5:86:d9:
66:e2:ce:30:45:30:77:db:f8:a4:f6:ed:b5:56:bd:
cc:1f:37:30:f6:12:0f:23:be:37:62:47:b6:31:f1:
34:8c:b1:8a:f1:e1:5f:c9:a8:b7:c9:5d:d7:9d:cd:
52:46:15:cd:08:a5:e6:2f:c4:4b:57:e9:44:37:c2:
a1:98:e7:34:ba:bc:77:b0:63:a3:52:e7:b7:d9:fe:
fd:07:50:ae:bd:2f:b1:dd:20:30:64:23:f2:22:e9:
24:3c:12:55:16:97:d9:32:c4:19:a3:80:53:20:8d:
11:e7:4d:26:2e:79:1a:07:b9:8a:26:f7:e7:ec:dd:
d2:d4:44:29:09:33:59:25:42:64:88:49:3c:87:55:
f0:f1:80:3a:41:bf:4d:81:9f:d6:a2:4b:6c:da:01:
1b:ee:82:a7:9e:e1:48:b6:27:92:4d:d3:27:4b:90:
b1:a0:b9:90:93:34:1c:69:90:c1:81:b7:ac:06:ae:
aa:77:a3:fb:c1:38:76:f7:68:4c:84:b2:aa:7c:5d:
97:e1:7f:8e:62:a6:8f:46:0e:5e:32:bc:86:75:6c:
be:80:0a:46:56:97:1a:ab:5e:2e:5d:87:e7:3b:2f:
74:3d:93:ef:6f:f9:ba:11:d2:55:21:4c:8c:53:ba:
7f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:60:92:FC:32:BA:21:84:E8:D3:AE:7A:E4:72:FD:96:EA:FA:D1:69
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4mCS_DK6IYTo06565HL9lur60Wk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.28.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:a9:b7:bb:af:cd:60:1b:ed:07:69:3b:1b:fd:27:9f:60:b6:
52:c7:a3:6a:79:2c:54:18:f1:46:94:4c:da:cd:3f:9a:f0:ec:
68:e2:63:94:88:7c:a0:e5:36:d8:0c:de:d9:0a:d3:75:12:52:
d2:08:1d:a3:d9:73:8a:5f:22:aa:b9:ba:03:fa:10:18:5c:72:
82:ff:62:d6:9d:1c:2d:64:28:e1:43:c3:fc:c3:8e:16:b4:77:
fd:ed:a1:fc:33:90:3f:03:2d:7e:91:81:4a:53:17:79:68:c7:
30:36:f1:66:da:30:13:79:3c:da:e4:42:d8:02:33:8a:aa:be:
01:a8:09:6c:00:65:93:eb:53:5e:3f:27:65:fc:02:36:6c:0a:
90:9f:87:97:e4:89:b4:7d:7c:86:39:8c:30:e2:b6:a7:cc:2d:
f2:a8:68:a7:4a:4c:9a:63:a6:ce:ae:66:b4:29:9b:17:62:ad:
bf:b2:49:19:ab:54:bd:5c:1e:ab:54:a4:8f:a2:35:24:f7:63:
e8:3d:07:26:e0:e1:2d:e2:ad:13:4b:3b:5b:d9:44:cf:96:51:
34:ff:43:26:d6:ba:00:7d:a4:34:30:1d:71:f7:97:5c:53:5c:
0a:de:ba:40:3a:ee:c5:87:cb:63:b8:79:ee:74:e9:4e:16:b5:
91:37:35:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:08 2025 by rpki-client