Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jUdHJaBphoKwOsZ0hhtPmeqMbko.roa
File: jUdHJaBphoKwOsZ0hhtPmeqMbko.roa (raw, json)
Hash identifier: YIw4RFCFp5JGUR9ZHd30ixCiiZK5EUZGtcwQ2WNr12A=
Subject key identifier: 8D:47:47:25:A0:69:86:82:B0:3A:C6:74:86:1B:4F:99:EA:8C:6E:4A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3488
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jUdHJaBphoKwOsZ0hhtPmeqMbko.roa
Signing time: Mon 10 Feb 2025 13:52:28 +0000
ROA not before: Mon 10 Feb 2025 13:52:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.8.0/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13448 (0x3488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8D474725A0698682B03AC674861B4F99EA8C6E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bb:73:47:e8:bf:a2:87:88:41:8e:44:c9:81:
21:74:b1:a8:88:b0:f9:3e:4f:23:dc:27:ba:d5:18:
db:fd:31:c1:10:3f:2f:71:47:05:b7:4a:76:5a:4b:
83:f6:7d:fc:5c:b9:d2:4a:95:65:ee:f6:07:fc:5a:
41:2e:c0:c8:80:77:66:25:48:82:c1:b2:fa:f1:48:
81:25:e7:1c:2c:47:e4:9e:dc:d0:ef:ea:6a:fb:74:
f9:14:3a:0c:41:46:ab:23:0d:0f:33:cb:a4:5b:5d:
43:10:8b:2f:61:e2:e5:80:26:0b:24:47:5f:bf:5c:
37:b5:6f:17:ac:83:70:ce:49:0e:7d:76:54:1b:60:
f6:bb:8c:c3:80:56:f3:06:84:62:f2:24:00:07:00:
4b:b2:1a:70:8b:d5:f2:30:45:6c:bd:3b:f4:ed:dd:
61:56:68:a5:2b:38:31:f6:1a:2a:b5:4f:6a:7d:70:
94:26:a3:dc:47:d3:bb:22:99:c0:3b:fa:9d:63:b6:
90:98:89:65:7a:07:ba:e7:b5:fa:ec:f1:49:e5:a6:
da:8f:32:1a:c5:42:33:59:5e:0d:f1:69:f4:3d:28:
16:ad:04:38:26:92:cd:e5:17:c2:0b:50:2c:46:d7:
d5:71:4c:2d:65:00:04:e8:8d:fb:4c:32:0d:85:8d:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:47:47:25:A0:69:86:82:B0:3A:C6:74:86:1B:4F:99:EA:8C:6E:4A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jUdHJaBphoKwOsZ0hhtPmeqMbko.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.0/26
Signature Algorithm: sha256WithRSAEncryption
78:00:6a:4a:36:19:39:2b:71:a8:93:ce:dd:b6:39:9a:ab:84:
0a:24:3d:46:37:b0:dd:65:14:c9:a7:f2:e2:34:a8:ad:f2:84:
d2:84:ef:47:92:39:e5:52:ff:f8:dd:09:4b:3e:3f:8e:49:44:
35:53:8c:21:fa:f9:f8:87:44:81:25:9c:72:d1:29:2a:43:dc:
73:04:50:5e:0d:37:b2:65:a7:b7:8f:90:b9:e2:a4:11:01:25:
e0:81:cd:a7:7c:7c:20:77:a0:c3:8f:fd:46:18:39:3b:f0:87:
93:dc:08:8a:b7:24:ef:ea:ae:a6:bc:31:b2:84:bc:59:66:29:
5a:cd:40:46:cd:b4:c9:10:43:c3:3c:15:db:15:d9:1e:0e:ff:
84:d0:c6:39:cb:1f:c1:d1:27:b7:ca:74:b6:7e:3e:d2:44:c3:
ef:c7:c3:b9:c0:28:28:78:5f:c7:2b:75:70:ee:6f:6c:93:df:
80:0a:fc:e8:b2:8a:4f:1b:e0:80:31:06:b4:48:79:43:82:dd:
a4:de:59:fc:a3:89:fa:26:a6:aa:fd:47:47:a1:db:83:35:7f:
ae:6d:c9:8e:64:fb:0e:d3:b5:51:c6:47:9b:26:76:e5:22:d0:
85:ec:6c:7c:01:0e:0c:19:d6:e0:94:06:81:93:d4:a4:98:fd:
14:3d:06:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:49:49 2025 by rpki-client