Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wszrqeU76EZPTEDB0YAGE5pmqk0.roa
File: wszrqeU76EZPTEDB0YAGE5pmqk0.roa (raw, json)
Hash identifier: cdcQ1AE/2pOPvffOAJjPqsSzLtdvrDyrg8hU8/NSXDk=
Subject key identifier: C2:CC:EB:A9:E5:3B:E8:46:4F:4C:40:C1:D1:80:06:13:9A:66:AA:4D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3657
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wszrqeU76EZPTEDB0YAGE5pmqk0.roa
Signing time: Mon 10 Feb 2025 13:54:14 +0000
ROA not before: Mon 10 Feb 2025 13:54:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13911 (0x3657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:14 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C2CCEBA9E53BE8464F4C40C1D18006139A66AA4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:fd:65:40:e7:fc:b3:e7:47:43:ea:77:69:
7f:30:a8:d4:6b:35:5f:71:81:c6:0a:f5:da:45:6c:
12:62:a7:53:c5:b8:09:2f:e5:66:50:39:73:21:72:
42:28:48:00:72:83:0d:de:a1:61:0a:e2:ac:a9:e9:
36:ea:6b:62:38:23:e0:d0:28:00:31:31:b3:83:83:
f8:62:e8:b1:0a:00:ef:ef:c6:2d:42:9f:f6:29:6e:
62:24:ee:4a:93:5a:f5:e4:1e:44:69:91:89:4e:38:
94:3c:17:57:6d:a3:9c:9e:5d:08:d5:16:bf:fd:1b:
08:ab:6f:99:e8:26:a2:0a:7a:62:a8:31:b2:de:f5:
45:7b:e5:92:73:e3:32:0a:24:99:d1:50:ab:9b:1e:
a7:21:6b:ba:7e:e3:f7:53:dd:68:ba:f1:39:ee:9d:
aa:5d:cf:0d:d2:86:9c:30:c2:72:fe:3b:7b:dc:33:
d3:85:80:e1:c3:a1:28:c0:d1:4e:f1:33:31:0d:59:
c8:28:09:32:28:1d:31:5d:0c:24:8b:b1:d4:55:6c:
9b:6d:19:a5:a8:96:d7:a2:a8:56:23:cd:b6:29:66:
1c:ac:cb:ec:b8:b3:0f:cf:61:43:c7:d1:2a:25:ba:
97:1c:c0:31:fa:88:63:fc:f4:4a:3a:fa:30:11:f9:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CC:EB:A9:E5:3B:E8:46:4F:4C:40:C1:D1:80:06:13:9A:66:AA:4D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wszrqeU76EZPTEDB0YAGE5pmqk0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:5a:2b:a4:d0:9c:4a:12:68:c4:09:47:48:da:0c:82:86:4c:
4b:30:fc:ce:5d:04:56:c0:01:7d:fc:58:dc:23:9b:21:bc:5e:
3f:bc:5d:74:4d:a3:5c:7f:08:19:c7:af:ba:b0:e0:77:ed:f4:
70:96:d4:ed:ad:bd:62:0c:e2:5b:f1:19:6d:2e:88:17:7b:1a:
38:89:b2:de:f3:fe:f5:fb:bb:cb:12:27:48:5e:c3:6b:fb:9a:
3d:95:22:78:3f:a1:55:20:cb:00:e6:99:83:f6:5b:45:6e:96:
c6:18:b4:e4:54:ce:66:c5:47:e0:25:48:16:90:8e:fb:5f:78:
1e:2c:22:c6:52:85:4e:80:aa:f6:52:1f:71:2d:98:61:ab:7d:
b4:8e:42:1f:80:f3:7e:ba:3f:33:b4:84:d9:bc:86:d1:fd:5c:
71:5b:7f:99:fb:ef:03:49:43:45:a3:7f:39:8f:e3:99:09:8d:
c6:e4:18:77:fe:3d:e3:49:2e:c8:1a:4d:46:c2:e6:22:04:bf:
75:67:25:a8:c3:45:3a:ee:c8:e4:5f:da:b6:e5:0e:82:bc:bf:
b8:fe:60:b8:77:b3:d8:de:ac:13:10:c1:ea:89:f7:b8:0d:9a:
a7:e2:07:56:45:69:04:e7:57:c3:fa:68:76:73:3f:d8:6c:04:
be:3c:16:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:56:48 2025 by rpki-client