Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qe4l3LcbuLQ1mDz3gMslpLOBV5M.roa
File: qe4l3LcbuLQ1mDz3gMslpLOBV5M.roa (raw, json)
Hash identifier: BqVNgR59ZTkF8mzWQ7qgp97QdMUSsyrq46IkBOTumHM=
Subject key identifier: A9:EE:25:DC:B7:1B:B8:B4:35:98:3C:F7:80:CB:25:A4:B3:81:57:93
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 32B7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qe4l3LcbuLQ1mDz3gMslpLOBV5M.roa
Signing time: Mon 26 Aug 2024 05:31:56 +0000
ROA not before: Mon 26 Aug 2024 05:31:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12983 (0x32b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:56 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A9EE25DCB71BB8B435983CF780CB25A4B3815793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:32:4c:ba:5b:51:4e:9a:86:d3:e6:ce:74:
66:24:f7:92:4d:d7:43:61:ac:fc:92:ec:8b:e3:f0:
63:98:18:d4:54:c1:61:e1:93:e0:68:76:b0:da:62:
27:56:b5:2b:83:49:ce:75:43:ae:91:6d:4d:5b:b4:
f2:ad:aa:51:c5:e7:c7:54:f6:e5:10:a2:aa:92:7e:
d9:37:19:8d:4d:66:1b:a0:5a:e2:ee:1c:f5:f5:dd:
e6:a1:53:bb:c9:11:d3:fb:82:ee:6b:f9:43:8e:ce:
b5:9e:8e:eb:c8:3e:1b:a7:bf:3c:e8:c1:73:84:e4:
b7:95:f7:a2:9c:20:a3:7c:30:d6:4d:55:2c:d7:af:
ef:94:e0:2b:e3:a0:79:2b:f7:d2:43:26:67:5c:cd:
b2:a6:8c:51:ec:9f:ba:14:28:66:59:79:0a:f3:96:
44:1e:66:e1:70:9c:fc:25:66:ed:27:95:b9:8e:0f:
aa:26:df:db:7b:da:f8:cd:eb:cf:9b:fb:56:84:10:
95:75:c9:c2:5c:1c:96:40:b0:9c:aa:3a:b0:55:79:
bc:ce:60:fb:4f:00:25:34:73:c2:f7:f9:15:03:33:
86:70:1a:77:8a:ba:04:8a:09:26:1e:ac:8b:e8:f4:
dc:85:46:3e:9d:e2:f9:2c:18:f7:c9:a3:90:d8:22:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EE:25:DC:B7:1B:B8:B4:35:98:3C:F7:80:CB:25:A4:B3:81:57:93
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qe4l3LcbuLQ1mDz3gMslpLOBV5M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.232.0/22
Signature Algorithm: sha256WithRSAEncryption
18:dd:08:23:18:89:4a:88:52:5e:e8:12:a1:f3:cf:31:4c:eb:
5f:6a:13:f9:a7:2d:56:42:34:94:ae:c3:36:98:f9:3d:4c:b4:
3d:61:c0:6a:37:44:08:89:19:0d:65:ee:37:86:aa:c6:90:c0:
6d:d3:24:68:da:48:9b:98:ce:97:d3:de:9a:69:ab:ce:7b:93:
d6:cd:cc:38:eb:71:77:c4:7c:b0:1f:44:81:10:4c:a7:dc:03:
36:fd:4c:36:d5:d1:99:30:cc:2d:e2:2a:79:68:0f:e8:bb:fa:
22:1a:72:b0:e0:d0:d1:4a:75:67:b7:2e:5f:70:70:fb:88:76:
9b:72:6e:f9:b5:f2:99:80:4e:3a:79:a2:72:a6:ec:fb:13:5c:
3b:8a:5d:56:aa:c4:9e:1a:81:4c:c2:63:20:42:6b:a2:88:a5:
04:17:04:eb:44:f3:85:28:7e:72:67:c3:d1:a9:22:47:a7:2a:
35:08:76:a1:83:42:30:f6:31:d0:3f:66:a0:f6:48:fb:97:6a:
0f:f3:9c:34:2e:2e:87:b7:50:83:a6:eb:a2:75:8d:e5:46:a0:
91:be:f8:15:b2:53:d9:25:88:69:a7:64:17:42:ff:8f:12:4c:
8d:b7:98:b2:a6:5a:33:e4:12:f1:00:e9:e4:3a:2e:c3:a9:57:
4a:b7:37:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:50:02 2025 by rpki-client