Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H0y2t5iWYhlLgqJK7TWeNVGMWW0.roa
File: H0y2t5iWYhlLgqJK7TWeNVGMWW0.roa (raw, json)
Hash identifier: nerlcM9H8BB30D4/CIxwVjp/zJoofko2I6WGokSzdac=
Subject key identifier: 1F:4C:B6:B7:98:96:62:19:4B:82:A2:4A:ED:35:9E:35:51:8C:59:6D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35AE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H0y2t5iWYhlLgqJK7TWeNVGMWW0.roa
Signing time: Mon 10 Feb 2025 13:53:35 +0000
ROA not before: Mon 10 Feb 2025 13:53:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.223.0/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13742 (0x35ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1F4CB6B7989662194B82A24AED359E35518C596D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:f7:11:7d:7c:b8:7a:d4:b7:76:d1:df:01:
73:cc:21:e4:d2:4d:f3:ad:e0:28:72:80:b8:c9:1a:
27:d5:07:5e:02:c7:c1:c8:a8:25:b0:10:49:e7:93:
fc:fd:81:ec:b1:0d:1a:d2:97:16:88:ea:66:20:7c:
f3:fc:9d:ee:30:f4:39:94:c3:9a:65:fe:2e:1e:ea:
5e:18:16:51:69:98:f9:e3:30:ed:e9:1e:2c:14:d9:
fb:b8:be:4f:54:1c:dd:c9:00:3a:f1:7a:27:04:80:
95:5c:1f:fc:1c:fb:a1:b2:c8:9f:ec:1e:d1:e1:a8:
ed:36:b9:3d:cf:14:f5:0a:a0:ef:35:04:ea:50:ef:
16:b7:f0:60:dd:65:63:94:e8:42:51:7c:d4:4d:9d:
30:79:ea:9b:13:9d:7d:c1:db:e0:42:96:08:8b:8f:
c9:b9:32:d7:c1:6d:6f:23:29:c0:62:37:17:b9:78:
1a:2a:84:72:e8:7f:c7:72:80:b7:f2:19:8e:a0:26:
97:47:5c:79:80:d4:82:cc:ca:e7:9a:97:7c:8a:63:
f5:1f:6a:60:8e:31:61:32:1f:ca:d7:0a:ff:e2:3c:
42:f8:fd:b3:f1:6b:ee:40:06:46:32:85:23:a4:3d:
c4:e3:3a:bf:66:2d:8c:a7:b9:00:e2:b8:5b:c7:9b:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4C:B6:B7:98:96:62:19:4B:82:A2:4A:ED:35:9E:35:51:8C:59:6D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H0y2t5iWYhlLgqJK7TWeNVGMWW0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.223.0/26
Signature Algorithm: sha256WithRSAEncryption
20:6b:7c:c2:7d:94:80:74:b7:6b:95:6a:ae:24:b0:23:98:7f:
b7:90:50:cc:ad:cb:7e:d4:be:1f:a6:4e:e9:1e:72:62:22:bd:
17:23:07:e3:0f:f5:08:a1:84:fa:98:06:39:82:23:cb:02:aa:
6f:60:8a:c6:92:7e:8e:68:6f:40:1f:29:26:af:6b:92:3f:56:
49:8d:a2:ef:f0:9a:1e:98:46:74:ba:99:15:3c:4a:28:e4:ac:
a4:09:33:df:59:a2:c5:91:30:0d:db:7a:17:ff:52:ca:eb:3a:
b7:4e:d3:23:15:a0:34:7f:b6:2d:61:6a:cf:4b:1a:86:ed:91:
5f:22:db:fd:74:49:38:22:ff:6d:c6:48:eb:f2:76:33:c7:1b:
58:5c:9a:38:50:34:4d:db:4b:7d:2b:f4:de:ef:31:a6:e5:3e:
6a:45:50:64:15:66:87:c3:20:c9:bf:c0:8f:80:14:ba:e7:bd:
e4:17:97:f3:cb:c9:5c:63:ad:69:0b:1f:a2:2b:d7:ed:6c:7e:
50:04:75:25:89:cb:ce:8c:45:9b:7f:23:ca:57:6a:5f:3f:96:
b4:99:b3:2a:1d:2b:90:2d:98:77:e7:76:f3:e8:f3:4e:e9:93:
0e:ad:1f:e9:b8:36:60:dd:df:b7:c0:04:da:97:29:44:69:84:
cc:f8:7c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:50:15 2025 by rpki-client