Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-mGmd_lr1MsQsMuxdgNR5pcdevw.roa
File: -mGmd_lr1MsQsMuxdgNR5pcdevw.roa (raw, json)
Hash identifier: BZBQy9r0MJNtjET3hBcFrithMC+pY8XZWnJvDtbK17Y=
Subject key identifier: FA:61:A6:77:F9:6B:D4:CB:10:B0:CB:B1:76:03:51:E6:97:1D:7A:FC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 352D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-mGmd_lr1MsQsMuxdgNR5pcdevw.roa
Signing time: Mon 10 Feb 2025 13:53:06 +0000
ROA not before: Mon 10 Feb 2025 13:53:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13613 (0x352d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FA61A677F96BD4CB10B0CBB1760351E6971D7AFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:fc:ad:69:ac:11:0a:e6:ef:ee:36:2d:44:
42:57:0d:95:fe:89:f9:d5:41:19:cc:23:58:8e:fa:
ad:73:04:e7:6b:ee:5b:d2:8e:48:0e:5d:01:a9:c4:
a5:5a:c2:a3:7e:9f:57:8a:12:be:63:f6:7a:28:78:
f0:63:be:98:ff:38:96:f0:a2:47:29:3a:68:1c:d0:
36:0f:47:76:aa:a6:e4:19:0a:2b:f6:08:36:64:64:
60:9d:73:31:4c:da:fb:b8:33:33:84:d6:af:92:53:
98:8e:7a:34:3e:66:ca:07:4c:91:26:e3:64:68:6b:
af:ad:66:b1:35:a3:8a:f8:b8:58:d2:8f:37:35:66:
ea:8d:a1:cd:20:7e:9f:b8:37:70:0e:2f:5d:13:90:
66:92:7e:7d:2d:fb:56:ca:d1:b0:d1:e0:3f:f3:09:
0f:2c:f7:a2:e0:25:db:71:d6:d8:c9:70:6c:1b:c7:
07:9e:3e:eb:70:a3:85:3f:07:6f:37:51:f5:3b:61:
39:2b:11:45:b1:0a:1d:91:22:be:05:f2:ea:86:97:
06:73:fa:c1:a9:70:66:36:04:e8:c8:d4:3d:09:8d:
07:36:c7:20:81:ee:f6:42:4e:31:45:a7:75:bd:83:
34:2e:e2:ae:91:a5:f5:c2:64:ee:58:5e:00:4e:df:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:61:A6:77:F9:6B:D4:CB:10:B0:CB:B1:76:03:51:E6:97:1D:7A:FC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-mGmd_lr1MsQsMuxdgNR5pcdevw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.168.0/22
Signature Algorithm: sha256WithRSAEncryption
46:f4:8b:1d:94:85:9a:02:ad:5b:01:0c:d1:5d:95:7e:8d:ce:
23:9e:ae:76:9e:f8:e5:90:bc:ed:28:91:79:9f:37:ab:69:56:
81:a5:5f:de:fb:f6:a7:7b:68:7c:36:86:a7:ae:9e:9b:1d:33:
44:0e:10:34:db:7e:c5:6d:09:45:c0:de:dc:25:0f:3a:f3:65:
3b:e6:09:68:b9:8c:79:1b:8b:e2:94:cf:3e:07:1e:44:39:95:
3a:36:1d:cb:2e:41:a3:a3:d3:62:21:11:90:1b:b7:8d:a1:df:
e3:79:db:a2:60:1a:52:94:70:dd:42:4e:c6:a9:eb:5c:04:b9:
2a:7e:3c:5f:61:ab:8d:20:e3:fc:08:55:56:19:95:36:10:f0:
09:1e:15:fb:ad:0b:64:b0:21:84:a7:53:28:b8:81:cd:f5:67:
8d:fc:0e:de:77:67:e7:2e:f5:eb:28:69:93:1d:c4:9b:35:0b:
6f:be:46:a9:97:27:1c:63:bc:41:9b:09:19:f9:d0:c4:cb:d9:
9d:b1:d9:72:c0:10:e9:7e:13:1d:36:86:3c:4b:92:ef:01:6c:
a8:14:cc:fb:4f:c4:ed:b3:cd:8e:79:cd:34:af:c7:9e:cd:57:
91:e5:d7:17:f9:d3:19:d4:6a:f5:78:ec:47:19:5b:d7:48:ce:
89:6e:6e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:51 2025 by rpki-client