Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CU_X5RfQxRypq1EZ6jeSE8FrJtU.roa
File: CU_X5RfQxRypq1EZ6jeSE8FrJtU.roa (raw, json)
Hash identifier: NUWLJNzbjmkzoq7vUYeruNCf5YFgkXPZGIcnbao82nE=
Subject key identifier: 09:4F:D7:E5:17:D0:C5:1C:A9:AB:51:19:EA:37:92:13:C1:6B:26:D5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 306C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CU_X5RfQxRypq1EZ6jeSE8FrJtU.roa
Signing time: Mon 26 Aug 2024 05:29:26 +0000
ROA not before: Mon 26 Aug 2024 05:29:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.237.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12396 (0x306c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:26 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=094FD7E517D0C51CA9AB5119EA379213C16B26D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:b1:d7:ca:6f:0c:d7:c0:80:70:6a:b0:63:
a8:5f:1f:fc:85:f6:f5:c8:19:b7:97:17:07:fd:c3:
73:5e:65:89:b0:d1:33:3a:cc:c9:81:36:59:9e:34:
3e:52:7f:7c:2e:91:43:9b:e1:bd:ec:56:c1:2f:5e:
95:72:b1:08:4a:4a:6d:bc:4c:c8:4f:8b:d5:fe:7a:
ea:be:80:bf:95:20:fb:31:92:76:5f:2f:6c:25:22:
fa:71:17:07:93:64:ae:13:51:11:55:a5:48:a1:03:
2a:c5:8a:4e:28:6e:b8:36:76:66:27:ac:37:b1:41:
35:be:13:8d:56:bd:bd:77:43:a0:dd:01:a2:6b:bf:
22:d4:59:a4:0a:aa:9a:70:79:57:e1:25:54:1a:ac:
72:c5:e7:0d:a6:12:c7:86:5c:d5:93:37:d7:91:a6:
17:f2:8c:a5:62:8b:86:cc:2f:07:02:d0:0c:d0:06:
f8:dd:87:54:13:98:15:57:c7:9b:24:47:73:af:df:
4a:a0:89:09:c8:1d:f4:dc:8f:2f:02:dd:69:86:ef:
29:11:af:05:aa:c3:b4:2c:83:ec:1e:37:3b:de:23:
be:75:24:ba:29:35:a0:20:22:0a:a7:40:cc:7a:6a:
5e:5d:0e:3f:1d:3b:00:26:f3:32:e7:8f:9c:b8:19:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4F:D7:E5:17:D0:C5:1C:A9:AB:51:19:EA:37:92:13:C1:6B:26:D5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CU_X5RfQxRypq1EZ6jeSE8FrJtU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.237.128/25
Signature Algorithm: sha256WithRSAEncryption
7e:c1:4e:0c:19:c4:53:c7:e4:25:49:d5:56:fc:19:d2:22:77:
e8:4e:21:39:05:c7:21:a3:0b:94:ed:3f:e4:31:dd:a9:74:14:
4c:80:c4:1a:cd:a1:c3:ab:f4:42:97:82:99:27:92:c5:e2:cc:
28:f3:59:a9:83:6d:68:20:88:d9:bf:f9:1f:88:61:9d:79:b3:
c3:88:b4:fc:29:63:f6:3e:41:02:8a:28:05:2f:ee:a5:74:ad:
03:e8:10:62:c3:a7:dd:e2:9f:51:c6:8b:19:53:bf:d9:d0:a9:
81:05:7c:b1:28:82:fa:be:83:04:62:fe:97:dd:3a:cb:46:03:
f4:38:b5:9a:b2:65:fc:7f:cd:ca:18:e1:46:63:50:09:75:93:
99:bf:e2:6d:33:07:a0:3b:34:38:58:bf:96:e6:c8:82:17:c5:
60:3d:0d:2c:05:f9:4b:5d:0d:de:8b:21:8b:2d:2e:ca:a4:81:
16:91:bc:9b:79:8c:6e:73:55:4f:df:e1:3e:50:74:9a:14:f7:
e2:49:7d:2c:64:16:76:c7:c6:1f:8e:fb:5e:fb:95:a8:4c:1f:
8e:01:55:ef:6e:0e:0e:c2:b7:ff:56:f2:b1:00:f4:f8:aa:d3:
e2:b7:79:8f:fa:16:3e:7c:d5:22:e3:e2:74:97:19:62:a7:e0:
a1:47:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:52:36 2025 by rpki-client