Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lJgj97cP6SwRGp0Ax876rCQSCxw.roa
File: lJgj97cP6SwRGp0Ax876rCQSCxw.roa (raw, json)
Hash identifier: aj+JKsJkmU8Ymjc5L3PO5lkr3Q6fHvV1rlUQof2lrck=
Subject key identifier: 94:98:23:F7:B7:0F:E9:2C:11:1A:9D:00:C7:CE:FA:AC:24:12:0B:1C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3391
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lJgj97cP6SwRGp0Ax876rCQSCxw.roa
Signing time: Mon 10 Feb 2025 13:51:33 +0000
ROA not before: Mon 10 Feb 2025 13:51:33 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13201 (0x3391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:33 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=949823F7B70FE92C111A9D00C7CEFAAC24120B1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c9:e7:85:23:7d:ea:16:0d:5f:b0:8a:69:7c:
50:43:ec:e1:ac:fd:fe:07:5d:2f:7f:44:71:8c:8f:
dc:34:fd:62:20:f2:7e:9a:31:71:b1:4d:01:38:15:
e3:f2:ba:42:ab:0d:61:83:72:ad:d9:6e:76:c2:33:
30:1b:65:1c:88:f4:d5:c8:02:5d:29:96:e5:b5:c1:
86:17:3d:78:40:6f:4a:bc:68:fc:81:9e:48:37:70:
03:fa:43:d5:f7:a9:e8:d3:e7:fa:c2:74:ae:e9:c3:
b2:82:f6:d3:36:68:a2:de:3b:a8:1c:a1:b9:11:5c:
e3:bc:ae:57:33:92:73:8d:99:41:b7:98:1b:5f:b1:
0f:40:e6:ac:72:47:e8:15:8d:d7:23:78:48:b7:eb:
02:27:06:87:d6:67:48:86:71:35:55:cb:e1:e7:4d:
ff:b4:83:0a:6a:1e:ff:d5:8a:71:36:d9:d7:4d:80:
01:85:55:ab:95:7b:8d:d6:db:fd:6a:95:36:51:9c:
1a:38:8f:28:c0:9a:a2:11:9b:ef:6f:ea:d1:dc:2c:
c3:41:83:d2:cd:3b:b9:9e:72:9d:78:7c:38:bd:db:
66:97:86:c2:05:3d:6c:47:d4:4b:43:af:14:6e:89:
a6:f6:73:e1:a0:b7:7f:88:27:c4:e3:3b:c5:5c:a1:
76:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:98:23:F7:B7:0F:E9:2C:11:1A:9D:00:C7:CE:FA:AC:24:12:0B:1C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lJgj97cP6SwRGp0Ax876rCQSCxw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.136.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:03:7f:88:67:7d:73:1c:09:33:34:72:85:8e:81:a3:53:5e:
c5:91:1f:a1:2e:a1:80:cb:0d:85:b9:df:21:a0:1d:fe:19:82:
ee:d7:7d:c8:ff:ff:7d:5e:29:8e:69:04:3c:61:48:3f:69:5f:
60:00:c4:08:ab:64:60:b0:cc:b3:49:f5:2e:c4:63:d9:1b:59:
fb:ee:ab:5d:e8:45:77:1a:43:0b:c9:62:98:29:79:48:88:8a:
1d:dc:46:47:72:f2:46:0a:aa:7c:57:aa:37:2e:03:f0:4b:f9:
58:7d:c1:87:e7:fe:8d:44:bc:71:72:4c:f8:0d:48:8e:50:54:
c6:33:bc:d1:83:52:4c:be:78:21:90:77:ea:b3:b6:81:68:c6:
5b:9f:5d:06:59:00:ce:e6:6b:89:95:c4:0c:dd:68:16:5d:50:
f2:58:2a:86:41:66:9f:5c:be:0a:5b:f6:b7:f5:7f:14:65:2b:
50:77:1d:58:db:95:7d:d3:d2:29:ec:17:f8:0b:aa:f1:b7:d5:
26:00:b5:09:1a:45:01:e3:21:db:ac:22:05:a9:c4:16:13:c3:
0c:de:2f:41:94:e3:86:44:36:46:3d:ac:f6:40:93:05:84:33:
d7:14:1e:82:36:ad:91:d1:ab:de:6f:71:33:8a:5d:ee:36:4a:
7c:dd:ba:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:49 2025 by rpki-client