Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/EvuCTEKYYH7BPrGDqvME-eQoLlA.roa
File: EvuCTEKYYH7BPrGDqvME-eQoLlA.roa (raw, json)
Hash identifier: xoQaTKSmw2oP2pi+xh38oCL7X/3E/vYaLZp9eJ/qieM=
Subject key identifier: 12:FB:82:4C:42:98:60:7E:C1:3E:B1:83:AA:F3:04:F9:E4:28:2E:50
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0DAF
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/EvuCTEKYYH7BPrGDqvME-eQoLlA.roa
Signing time: Mon 10 Feb 2025 14:06:11 +0000
ROA not before: Mon 10 Feb 2025 14:06:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18042
IP address blocks: 123.252.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3503 (0xdaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 10 14:06:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=12FB824C4298607EC13EB183AAF304F9E4282E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:00:84:75:09:14:27:4d:04:3f:3d:d1:0f:
ee:26:1a:fc:07:fa:b6:f4:af:74:24:f3:ba:31:0c:
b9:15:63:75:b8:0b:69:c5:02:4d:57:38:76:ee:1c:
f7:49:06:2f:0f:60:15:8b:2d:51:21:c3:ec:ca:be:
4c:d8:88:69:0f:dc:ce:19:14:b5:e1:69:17:5a:f0:
d2:59:3f:07:be:8c:58:e6:99:2f:fc:32:39:e3:70:
c3:70:28:c7:95:40:72:e0:68:a8:b0:45:14:e4:4b:
c6:6f:31:21:b3:31:79:fe:29:0e:e7:17:2d:b8:e6:
20:a4:4d:43:57:f2:49:ed:14:90:88:2d:13:de:b0:
75:79:81:b2:ec:29:04:31:76:ff:23:04:76:7a:7a:
1c:39:09:76:f8:80:cb:39:ea:40:d8:1e:36:71:6a:
9f:46:11:fe:f8:a9:8e:d9:8f:dc:25:3b:1d:8f:77:
42:72:89:b2:48:eb:7f:ea:e5:49:ee:da:3e:d2:c1:
ae:7f:30:a7:b3:41:86:13:b6:3c:14:95:a6:36:72:
e0:f1:e5:73:6f:c3:7c:e5:d2:27:b6:69:10:9f:7a:
bc:90:26:69:c2:cf:49:78:18:e5:c8:71:8a:51:c5:
7a:61:42:b4:e9:61:07:ba:6a:29:f7:72:f6:8a:dc:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FB:82:4C:42:98:60:7E:C1:3E:B1:83:AA:F3:04:F9:E4:28:2E:50
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/EvuCTEKYYH7BPrGDqvME-eQoLlA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.252.0.0/17
Signature Algorithm: sha256WithRSAEncryption
83:f5:de:a2:80:80:7b:d1:ac:f0:10:3a:30:df:2a:13:37:9e:
4f:5c:d2:ee:04:22:ef:85:51:84:c8:2f:27:6c:6b:85:d9:cd:
1b:fb:db:d6:33:ff:62:a5:38:e3:44:fc:1f:f3:0d:b4:3b:2f:
e4:bb:da:0d:b0:cf:a5:e9:0c:9e:3e:64:db:bc:ff:b8:33:25:
ce:d6:08:80:02:16:a8:3e:76:d2:91:db:f4:9c:ee:f4:21:1e:
35:6b:63:6b:84:b4:ba:15:82:ce:ce:6e:75:71:94:00:0e:e2:
41:ca:47:5c:56:68:5f:ef:ff:aa:57:9b:13:6f:31:62:06:5b:
d9:55:06:99:43:b4:8d:be:15:bb:86:5c:af:ac:c4:88:50:41:
cd:6e:65:d6:ad:4f:ab:68:2f:a1:98:4e:14:ee:a0:25:a5:ed:
8c:92:5a:ee:30:43:f0:e8:dd:e8:98:27:eb:a6:42:8c:67:ce:
b0:bd:8f:08:78:97:b4:07:a5:4c:6c:d2:f5:b1:ff:ae:6c:5e:
4d:e4:7b:35:ab:89:28:a5:bc:04:78:07:94:aa:42:34:50:e1:
aa:12:ea:77:1d:9d:cd:f5:1c:17:a8:b2:e5:ac:31:5d:2a:6b:
98:b1:6a:cc:c1:62:0f:c2:a9:16:ac:26:7b:36:fe:51:47:b4:
42:2e:03:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:41 2025 by rpki-client