Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eMT35hLFPd3s1hFkXiuXzXfDxRA.roa
File: eMT35hLFPd3s1hFkXiuXzXfDxRA.roa (raw, json)
Hash identifier: duOjduddxxtqhjoH0lz64dLYjRw1pK7zJOVuj3NmAm4=
Subject key identifier: 78:C4:F7:E6:12:C5:3D:DD:EC:D6:11:64:5E:2B:97:CD:77:C3:C5:10
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36CF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eMT35hLFPd3s1hFkXiuXzXfDxRA.roa
Signing time: Mon 10 Feb 2025 13:54:42 +0000
ROA not before: Mon 10 Feb 2025 13:54:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.80.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14031 (0x36cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:42 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=78C4F7E612C53DDDECD611645E2B97CD77C3C510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:b0:20:08:23:c3:42:d1:cf:d4:7e:ac:61:
ed:e2:67:99:ca:6f:b6:ac:b3:2f:d2:d5:21:13:0b:
b8:db:fa:14:4b:26:ba:f6:d9:dd:8b:40:97:31:aa:
fa:b9:f6:35:0e:4c:e7:69:3f:86:15:33:01:fc:18:
9c:21:f9:33:b0:2c:a2:12:7e:25:6a:f5:8c:89:c5:
23:a3:b3:29:04:3e:67:58:85:e3:4f:74:59:5a:c2:
99:36:cb:b8:75:78:6b:9b:d4:a3:09:48:66:97:68:
ae:8f:51:f3:ff:94:0f:c4:bb:bc:7d:23:b6:94:96:
82:f1:79:1a:70:b3:16:4b:14:21:1e:09:d0:76:e9:
3d:86:e6:49:5d:32:cd:68:30:e6:7a:90:94:08:90:
a7:ac:ac:9e:ad:fd:0b:c6:90:06:8b:69:6d:df:9b:
e2:ed:86:fb:08:d1:b7:0d:72:df:ae:b8:2f:26:1e:
40:3c:55:66:a5:c1:43:fd:57:d9:23:b5:38:ea:7a:
0b:f7:13:51:35:22:b4:7b:7a:16:5f:4f:12:22:da:
6e:3e:a7:99:f2:fd:e0:4a:0a:6d:11:6c:72:14:84:
34:34:3b:e8:c1:b6:90:cc:ed:86:39:76:65:e0:1d:
53:03:fc:20:14:25:a2:9f:c8:29:3a:5b:8f:fb:68:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C4:F7:E6:12:C5:3D:DD:EC:D6:11:64:5E:2B:97:CD:77:C3:C5:10
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eMT35hLFPd3s1hFkXiuXzXfDxRA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.80.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:cc:4c:9a:3b:7c:e1:65:95:88:48:d4:70:54:53:4b:2c:b0:
94:08:3b:f9:a4:fe:bd:7a:6d:ab:68:10:f6:57:d5:39:51:a7:
61:c5:69:8d:45:6b:d6:62:ea:04:24:78:96:c0:71:47:12:b4:
f8:29:4d:8b:6a:50:d4:9d:25:70:3c:ea:28:48:b0:9d:96:cc:
75:a1:17:bc:fa:93:58:82:68:98:59:1a:0d:3b:5c:d7:a3:f6:
d2:de:95:1c:6f:1e:b3:50:ee:2a:ee:ec:f2:64:e7:cd:0b:98:
7f:81:1d:89:ab:9c:fe:fe:ae:23:ec:5a:93:8a:00:80:cf:92:
ec:46:7e:18:4a:b8:1e:8d:90:29:a0:77:29:1e:50:f7:21:40:
70:38:c4:50:1b:7b:16:e0:d4:5e:48:56:f1:78:f3:b3:52:c8:
65:63:2d:c3:63:7d:d2:87:ab:94:21:49:2d:ad:fa:40:71:1d:
a3:74:c5:5f:43:3c:e1:e5:0e:c4:5f:54:31:e5:4b:f7:8d:94:
05:1e:9d:8f:10:de:f3:fa:ef:6e:e7:3d:09:24:79:e3:a7:33:
fe:2d:21:30:5d:c0:69:46:c4:24:57:59:1d:e7:f2:03:43:0f:
68:1c:ec:cf:f5:49:ca:45:b5:a7:e0:10:9e:f1:21:37:49:c3:
42:73:1a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:49:50 2025 by rpki-client