Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xZzAo9G026IUFSPG8OUt-derZ9Q.roa
File: xZzAo9G026IUFSPG8OUt-derZ9Q.roa (raw, json)
Hash identifier: lRyf/MkB7iQjRqE1CFrnGw07zGW16rec9Q5bQnpAcS0=
Subject key identifier: C5:9C:C0:A3:D1:B4:DB:A2:14:15:23:C6:F0:E5:2D:F9:D7:AB:67:D4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3265
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xZzAo9G026IUFSPG8OUt-derZ9Q.roa
Signing time: Mon 26 Aug 2024 05:31:37 +0000
ROA not before: Mon 26 Aug 2024 05:31:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12901 (0x3265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:37 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C59CC0A3D1B4DBA2141523C6F0E52DF9D7AB67D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:67:ac:a1:00:56:4c:80:e4:3a:b7:36:aa:fd:
e8:c7:15:d3:bc:b8:e8:08:db:7c:ae:b1:c4:38:c2:
5b:ae:4c:d4:57:ed:5c:9d:17:b7:32:74:05:d1:84:
26:8c:ce:20:25:06:4a:a6:18:43:ab:21:1b:97:e9:
b6:4f:c8:a8:3a:cf:96:fd:4b:f9:38:93:5a:f1:99:
fc:f5:6e:6d:59:c2:9a:39:e8:5a:8a:d3:bf:db:8e:
f5:c3:4c:db:bf:da:f9:19:d1:32:69:44:22:b8:fe:
bf:d1:54:0e:94:c7:e8:9d:91:3a:ed:a2:b4:92:56:
5c:2a:7f:cc:fd:3a:51:9f:08:24:c8:1c:49:49:cf:
97:ea:bf:8d:1b:dc:75:f6:a3:c9:e5:d5:2a:79:3c:
60:b6:7c:fc:69:2b:b2:6d:1c:26:a0:21:30:e2:0d:
57:32:f8:37:a9:57:e6:bf:1b:01:ff:16:f5:30:2e:
77:47:bf:87:7e:0c:70:bd:f2:63:8b:b7:63:e0:2a:
11:48:f9:64:58:83:fa:fd:e1:1e:c1:a0:ed:6f:e8:
4c:73:43:fa:bf:70:d0:26:e3:2e:4f:76:9d:5a:35:
2b:82:3e:6c:05:73:5b:32:02:f8:e6:4f:b7:58:ba:
43:8b:9c:9e:88:01:2d:a3:e4:c9:e6:79:e4:ca:56:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9C:C0:A3:D1:B4:DB:A2:14:15:23:C6:F0:E5:2D:F9:D7:AB:67:D4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xZzAo9G026IUFSPG8OUt-derZ9Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.48.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:2d:df:3d:d0:bf:cf:be:1c:d6:72:e7:c4:7b:64:a9:43:14:
d1:92:0c:23:91:18:2e:9d:07:27:0f:32:39:74:df:21:6e:59:
73:7f:f1:a2:f3:c9:67:7e:60:22:88:f1:a1:c5:b3:53:c6:56:
c3:e4:3c:e3:a3:2d:76:17:bc:e4:54:de:9e:3f:15:1f:8d:76:
57:50:25:6d:3d:e7:26:78:ae:05:91:c1:c2:32:de:3f:c9:0d:
ad:99:3c:4b:8f:79:ff:a8:ca:bb:53:ab:c0:bb:33:76:65:cc:
05:7b:5e:ed:2f:d0:01:a2:5b:29:d2:29:84:63:5c:01:04:94:
2b:8f:32:96:03:fb:ea:62:4e:2e:a8:eb:d0:a4:97:95:bd:df:
30:ce:c9:a4:f1:80:50:3f:b6:1c:56:36:b6:d5:fa:1d:a2:87:
63:53:f6:7f:77:5b:78:7c:cd:30:8d:3a:18:b8:57:a0:ac:e7:
c3:48:48:df:60:c6:1a:e2:d3:d8:21:fe:c3:95:61:2b:c5:3d:
dd:21:86:17:4e:0f:f3:6c:f5:de:d8:b3:2b:a3:1d:0c:49:ea:
5d:34:c6:b4:41:13:6a:59:72:f8:bf:55:96:c4:9e:1a:86:fd:
7e:8a:f7:8b:21:5b:79:7e:85:77:ac:62:d5:21:02:59:ab:c2:
18:0b:84:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:59:11 2025 by rpki-client