Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-WrwLF9sSduXFShSQu44tYngsdQ.roa
File: -WrwLF9sSduXFShSQu44tYngsdQ.roa (raw, json)
Hash identifier: An8aaJnkF/QDVUo395gdIdso3+zhcbWceesFrGmaaic=
Subject key identifier: F9:6A:F0:2C:5F:6C:49:DB:97:15:28:52:42:EE:38:B5:89:E0:B1:D4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33EC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-WrwLF9sSduXFShSQu44tYngsdQ.roa
Signing time: Mon 10 Feb 2025 13:51:54 +0000
ROA not before: Mon 10 Feb 2025 13:51:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13292 (0x33ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:54 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F96AF02C5F6C49DB9715285242EE38B589E0B1D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:9f:9e:53:79:8b:be:58:5b:9c:ac:ed:e7:
f4:71:26:60:bb:be:fa:34:8d:8d:b2:a2:e1:47:48:
c4:8b:94:96:cf:21:56:f1:44:f4:1b:97:29:54:74:
84:48:67:c0:ff:c8:2c:2d:06:24:39:dd:cf:33:c2:
9d:06:44:02:60:74:5a:31:1f:63:ca:19:1b:7a:6e:
0a:42:59:b9:64:6e:e9:60:94:eb:e8:54:07:92:de:
b9:25:5f:5a:43:ac:43:fe:71:70:16:6c:18:2d:8d:
47:e1:41:0d:04:79:8c:a5:07:80:19:79:e1:93:56:
6c:1d:dd:3f:8f:e3:97:9b:27:2a:eb:7e:b2:31:0d:
2a:70:18:db:83:4a:e8:27:8c:d9:36:12:a6:59:b0:
11:ff:40:ef:41:2a:d7:a4:99:38:4d:d2:1d:fd:70:
59:3f:44:1f:22:65:85:c8:b6:b7:13:2e:36:1f:8e:
15:f7:95:85:f9:5a:a9:a2:ea:8c:6d:65:5a:d4:66:
de:cf:22:21:6b:be:4d:02:87:14:bc:9b:42:45:b3:
5b:04:1d:96:dc:fb:d2:29:6c:85:ba:4a:9b:05:32:
c4:9d:52:e3:6b:7f:c9:fc:9c:2c:b6:ba:46:56:73:
fc:f2:0f:23:d0:7a:ce:21:30:b1:76:40:02:3d:80:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6A:F0:2C:5F:6C:49:DB:97:15:28:52:42:EE:38:B5:89:E0:B1:D4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-WrwLF9sSduXFShSQu44tYngsdQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:c2:27:a5:2b:29:4f:0b:03:87:2e:5d:a0:b9:90:9d:47:de:
4f:1e:71:70:88:51:0e:d8:c5:98:3e:79:41:ef:00:a7:f0:6c:
9e:7b:e8:40:ee:ac:df:97:e3:ea:ed:f2:e7:57:fd:5b:e4:1c:
70:e3:68:e8:69:b2:8d:87:14:1f:7f:b1:71:ce:87:b7:5e:e7:
b0:f3:a9:9e:2b:6d:5c:7c:8b:4a:ee:5f:ad:d2:3f:ef:ec:59:
e9:1a:b7:01:1a:87:a5:1c:52:7e:02:0a:aa:2d:a3:c8:ad:0a:
aa:bb:04:ad:1a:c5:3c:d8:7d:f9:d9:62:52:b1:32:bd:21:67:
6a:c2:bb:55:25:f0:92:81:c6:50:59:79:a0:df:e1:e9:92:0b:
b0:5c:f4:ef:e1:b3:95:cc:51:cb:18:4f:2d:be:8c:f7:66:4d:
78:a2:7f:a1:37:78:ed:02:bd:de:41:bc:72:b5:ee:b9:d5:d3:
e2:be:91:12:06:61:f0:56:27:97:40:d4:cd:8b:0d:b0:ab:44:
bb:75:59:2f:f4:f6:ff:cd:69:20:5b:c0:42:f3:85:2f:3e:9a:
a3:cd:f6:aa:08:58:23:75:ac:61:ce:77:44:d6:d5:cc:e2:47:
16:50:00:2d:17:74:ab:17:f9:22:ec:2b:f4:b3:cb:9d:4e:4d:
9a:38:79:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:36 2025 by rpki-client