Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QAePKsw-8tOedziy07nnW9Ax4Tw.roa
File: QAePKsw-8tOedziy07nnW9Ax4Tw.roa (raw, json)
Hash identifier: A5/aQ0ZF0zWkjlsYrWJMFVqVsDtQ9yrKxvbfY/WMQ7M=
Subject key identifier: 40:07:8F:2A:CC:3E:F2:D3:9E:77:38:B2:D3:B9:E7:5B:D0:31:E1:3C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34C4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QAePKsw-8tOedziy07nnW9Ax4Tw.roa
Signing time: Mon 10 Feb 2025 13:52:40 +0000
ROA not before: Mon 10 Feb 2025 13:52:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13508 (0x34c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:40 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=40078F2ACC3EF2D39E7738B2D3B9E75BD031E13C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:3e:f4:72:c1:c5:ce:02:65:b3:06:c8:26:
84:18:f8:12:66:b4:9b:3d:2a:e7:53:60:7c:62:bd:
0f:2f:3a:09:19:12:b9:fd:9e:9d:80:7c:e0:94:d6:
27:fe:f7:5f:70:2e:e5:d8:97:b9:ae:e0:30:db:35:
ab:75:62:07:2f:61:80:18:5d:6a:86:cd:58:a7:d7:
87:78:ed:12:2a:f2:20:79:81:0b:1d:1a:50:ea:b9:
07:a1:25:71:46:5a:c5:e3:0f:b0:cd:10:a8:45:d7:
ef:95:7e:1f:87:7f:f7:21:2b:80:1f:23:4f:82:bd:
1a:7a:36:01:73:71:06:bf:10:35:9e:cf:89:1f:31:
dd:45:43:ed:cd:80:f8:2e:b1:a2:36:b7:db:c3:bf:
a8:1a:2b:ed:90:e4:cc:41:f4:07:43:83:06:e5:2e:
ff:57:b7:b2:3b:d0:ee:ae:e1:dd:2f:49:ea:6c:d8:
06:56:f6:ca:f1:7e:5d:08:96:3e:cc:fa:c2:8a:49:
94:3b:7d:1c:1c:f1:2d:26:c2:67:db:7d:98:54:15:
fe:07:b4:a7:1d:50:6b:64:e1:af:69:d9:6e:5d:87:
b3:da:be:41:dc:ad:d0:6a:2b:42:80:df:51:2c:b4:
07:06:a9:5b:b1:e4:3a:2e:c9:46:56:28:34:bc:3f:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:07:8F:2A:CC:3E:F2:D3:9E:77:38:B2:D3:B9:E7:5B:D0:31:E1:3C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QAePKsw-8tOedziy07nnW9Ax4Tw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.136.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:da:ab:5f:67:a7:c7:48:06:2c:0f:60:de:ad:fb:8c:2c:f4:
aa:f3:44:0b:8b:50:2b:a9:26:25:1c:f7:b2:2c:3d:a6:ea:7a:
29:2b:92:fb:63:19:94:1a:a8:19:19:19:50:dc:94:37:3e:71:
74:25:c2:37:5c:0f:7a:6c:78:f6:09:c9:da:30:b0:a7:55:a4:
b1:f4:37:f7:f8:7b:cd:d7:b7:d1:89:28:22:bb:09:f5:95:88:
6d:7f:ce:ad:d9:4e:f9:1d:34:be:a0:b0:a7:ee:d8:88:08:04:
3a:1a:ea:35:00:bf:fd:de:c9:23:6b:ba:15:b3:26:44:c8:b1:
c8:ea:f5:ea:25:af:35:29:72:ad:36:1f:da:51:e8:c9:e0:c7:
6e:ec:a8:8b:7e:9c:36:79:a4:fe:7e:2d:f7:97:90:b1:ce:37:
23:30:5a:f4:a8:59:58:ec:fd:ef:03:c6:75:53:e5:b2:38:45:
d9:89:a2:29:ab:5d:fd:5b:4e:de:eb:af:79:3b:fe:08:e6:e6:
ba:42:eb:22:84:c7:33:71:ad:3b:b3:ef:4d:c7:23:0b:62:c4:
6d:f2:1d:3a:10:b2:f8:9a:c0:97:d6:67:58:b0:c3:25:b9:a7:
04:da:b8:d2:8a:c7:10:a1:14:86:e8:df:ab:44:d4:75:07:1c:
22:e7:e5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:52:30 2025 by rpki-client