Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oOLWR6lqEf3AiSk3WLoy9TriBfo.roa
File: oOLWR6lqEf3AiSk3WLoy9TriBfo.roa (raw, json)
Hash identifier: Vb/OgAiiYe3ONNUwglpoPVccykAiLeMEGXI9V8brGJ8=
Subject key identifier: A0:E2:D6:47:A9:6A:11:FD:C0:89:29:37:58:BA:32:F5:3A:E2:05:FA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3037
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oOLWR6lqEf3AiSk3WLoy9TriBfo.roa
Signing time: Mon 26 Aug 2024 05:29:15 +0000
ROA not before: Mon 26 Aug 2024 05:29:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12343 (0x3037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:15 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A0E2D647A96A11FDC089293758BA32F53AE205FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:8b:f2:d3:7e:13:cf:fb:89:af:e8:d5:08:
a9:d5:af:d4:a7:c9:0d:53:17:2b:37:40:4a:d0:39:
5c:eb:3d:e7:63:43:bb:e5:e3:8d:8a:41:41:b4:be:
d3:10:86:84:b7:ab:20:86:a6:d3:75:e2:58:2e:56:
ab:5d:05:bf:06:4c:24:33:fb:0e:1e:0a:6c:4f:53:
c8:52:b3:83:b6:0c:e9:dc:23:cf:eb:e4:6f:d8:0c:
cb:57:4e:07:96:1a:59:94:4e:ce:89:fa:f0:d4:8a:
e4:49:f5:c4:54:55:ef:b0:6b:a8:c9:13:64:23:92:
77:d7:cc:3a:77:99:9b:1b:87:9d:05:37:2a:82:80:
56:99:95:05:d4:c7:c3:b4:b4:6f:0c:3a:0e:f4:4c:
49:05:7f:7d:7b:10:cc:cd:12:84:b0:dd:78:b0:8e:
e6:88:01:24:d4:ad:4f:22:ad:94:5f:9c:18:ff:89:
22:69:70:f4:49:fc:07:c0:50:39:93:cd:d2:ae:58:
f3:9a:73:78:1e:eb:e2:06:3a:bc:5d:8e:19:64:88:
26:37:f8:14:36:37:90:d2:3f:d1:c8:32:c2:ad:83:
d7:84:9b:12:6f:5f:1a:b8:13:91:5f:4b:4c:20:7c:
0d:a9:77:d6:e5:96:49:33:ab:d2:a5:d5:99:f1:dc:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E2:D6:47:A9:6A:11:FD:C0:89:29:37:58:BA:32:F5:3A:E2:05:FA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oOLWR6lqEf3AiSk3WLoy9TriBfo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.220.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:f2:1f:a5:fe:c1:c4:fa:4e:63:f5:13:b6:cc:24:5f:fd:38:
62:76:0d:e6:79:11:64:f7:37:87:52:84:ab:69:2c:14:dc:6f:
db:80:b9:47:0b:fc:76:33:46:9a:9f:d1:63:b6:06:b8:7b:73:
92:36:11:d9:23:0d:63:4b:a9:0b:e6:69:0b:72:27:65:0a:3c:
02:cb:17:65:8b:4a:b7:8d:5b:f2:d3:a7:35:6c:17:72:53:f2:
26:f3:95:95:21:08:ae:b4:e1:7b:db:72:0e:d3:3a:ec:6e:5e:
56:90:53:2f:e9:13:f4:6f:9c:fb:e3:4e:7f:d4:6d:86:29:8f:
d4:43:25:ec:cd:78:1f:4e:60:80:cd:8e:9b:d2:a3:b6:86:1e:
be:de:a2:06:01:83:7d:63:f1:8f:df:40:52:76:ac:ee:f4:36:
18:41:42:52:8f:b1:46:7a:e1:79:6f:a9:71:ce:39:21:af:f7:
cf:56:33:01:6f:91:6f:c0:71:8c:a5:3b:a9:00:e8:24:6a:33:
cd:00:2e:7e:15:52:92:73:d3:f2:7a:8c:50:bb:41:19:5d:db:
2c:36:64:c5:c2:ca:fc:6d:c6:85:37:d2:43:59:fa:6b:ad:e3:
fa:8c:19:1e:2b:28:4c:b7:5a:85:90:21:dd:55:9f:0f:2e:03:
5e:e6:8b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:57:02 2025 by rpki-client