Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wTbY3EQ9kHVS7mlo6kHTs1K_AjI.roa
File: wTbY3EQ9kHVS7mlo6kHTs1K_AjI.roa (raw, json)
Hash identifier: xlx/IMpevi6Rx7CjDHqDh8F1TqH4/snJlqUc7mwr+4A=
Subject key identifier: C1:36:D8:DC:44:3D:90:75:52:EE:69:68:EA:41:D3:B3:52:BF:02:32
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3042
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wTbY3EQ9kHVS7mlo6kHTs1K_AjI.roa
Signing time: Mon 26 Aug 2024 05:29:17 +0000
ROA not before: Mon 26 Aug 2024 05:29:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.193.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12354 (0x3042)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:17 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C136D8DC443D907552EE6968EA41D3B352BF0232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5f:6c:2f:4f:57:70:a8:5c:26:07:c8:d3:9e:
e2:43:0d:76:9c:28:3a:12:09:40:12:67:3e:22:f8:
3c:22:0a:0f:3c:05:f8:cb:dd:7c:3b:16:22:be:b5:
cc:ef:b5:02:ad:a0:04:d5:d6:94:ac:a7:cc:6e:04:
a2:bf:d5:2a:fe:29:78:36:53:53:4d:c0:a3:59:40:
f6:81:9a:ad:85:bf:92:b4:05:94:e6:70:f7:7d:4b:
73:21:c0:c4:29:57:4a:b8:9e:3f:f8:d2:4a:df:46:
86:c2:89:11:db:10:c2:c0:9a:6d:30:7c:52:1c:5a:
0a:ac:df:c0:ed:e0:1b:b3:bf:46:bc:1e:99:73:29:
fb:b6:ba:56:6d:ac:ee:7b:8f:e5:3b:4b:0a:0f:4f:
9c:c7:79:8a:2f:32:21:d4:90:2b:f1:80:cd:8e:35:
1a:34:0f:20:0d:f7:e3:da:c9:98:6f:1b:20:02:15:
19:3e:0a:31:36:33:c3:e1:2f:30:e6:4a:37:2f:6c:
5b:bf:72:72:cf:65:b7:f9:f8:76:4c:c7:40:ae:95:
9f:bd:1a:10:75:1c:f9:8f:9f:0e:37:7c:0a:79:8f:
57:9e:93:dc:92:9c:33:10:9a:bd:27:cb:2e:46:35:
e5:49:24:1b:4f:b7:64:de:9f:62:e7:bb:2e:1b:0a:
11:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:D8:DC:44:3D:90:75:52:EE:69:68:EA:41:D3:B3:52:BF:02:32
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wTbY3EQ9kHVS7mlo6kHTs1K_AjI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:70:70:37:e9:11:4b:ee:c2:fd:8d:33:50:a8:5b:64:c5:f0:
2a:16:af:d7:37:89:0d:62:7a:04:11:ad:95:d7:ef:74:04:1a:
2f:af:00:46:d9:e7:2a:83:15:2a:98:02:7d:76:6f:6e:69:55:
50:50:1a:09:3f:01:45:b0:a3:1a:7f:7c:5f:17:9d:00:a7:01:
d7:11:b5:1c:06:ec:19:73:15:a6:b1:18:9d:7d:89:d2:cf:19:
3b:59:df:b4:32:2f:7a:b0:7f:3e:fd:4e:bc:06:11:d3:4e:72:
f1:1e:cf:17:a7:8c:3a:b9:43:18:09:7b:df:ab:19:65:b2:a5:
53:a4:01:9b:6f:5c:da:bc:75:1a:ca:f3:6b:48:cd:f5:9e:74:
58:b4:5a:05:01:59:71:cd:9a:bd:d4:38:38:98:fe:df:13:0b:
49:e3:6d:2e:6a:7a:51:8c:31:37:de:8d:40:90:d8:06:ae:27:
81:d7:98:ef:2d:a4:fd:fe:ed:c4:2c:ae:e6:a1:ef:57:ed:bf:
90:ab:2d:17:6b:0d:ea:11:8f:17:65:fa:9a:b9:83:83:2a:34:
27:4b:2b:b1:d4:0f:b9:ed:c6:ec:b3:67:eb:13:3f:7d:42:57:
f9:5e:60:e5:84:6f:10:34:5d:b3:f4:26:33:60:13:2e:30:b2:
62:d1:d8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:48 2025 by rpki-client