Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-rlFUrv5OLsJFswCUcn6h0T-ec0.roa
File: -rlFUrv5OLsJFswCUcn6h0T-ec0.roa (raw, json)
Hash identifier: BAHRKdw7cPk0pLl8MvTJOHY0AE0GaNlDUpoiHUfoBs0=
Subject key identifier: FA:B9:45:52:BB:F9:38:BB:09:16:CC:02:51:C9:FA:87:44:FE:79:CD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3538
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-rlFUrv5OLsJFswCUcn6h0T-ec0.roa
Signing time: Mon 10 Feb 2025 13:53:08 +0000
ROA not before: Mon 10 Feb 2025 13:53:08 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.223.64/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13624 (0x3538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:08 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FAB94552BBF938BB0916CC0251C9FA8744FE79CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:a7:ff:01:af:ee:b7:e3:bb:3b:3a:10:cf:
8e:01:13:f6:3d:2a:a1:22:06:4f:4d:bd:92:cb:fa:
90:15:42:84:dc:79:ab:d3:5d:e0:84:15:e9:af:7c:
f0:00:b2:90:e8:2d:d8:9b:da:4f:c4:ed:cf:ad:c5:
52:0f:bf:60:a4:4f:7d:f8:37:0e:29:50:97:74:77:
9e:3d:ca:58:5b:8f:e8:f1:0c:c2:cd:2d:67:30:35:
42:bc:ef:f0:db:95:30:5a:1d:41:a2:2f:cc:35:77:
0f:0b:6b:3b:fb:d5:44:32:31:f6:1d:1a:84:f5:e8:
b3:36:22:41:64:fe:e7:02:a3:b2:65:23:6b:64:3d:
db:20:59:a6:f4:54:09:2b:bf:47:e6:24:69:8b:f6:
7e:cd:5e:1c:3f:fc:a7:f3:89:73:53:29:79:15:1b:
1c:9a:54:5d:a4:64:64:42:f7:1b:02:2a:78:db:43:
3f:e9:8e:09:47:47:03:ac:af:b5:84:66:88:35:48:
1c:36:ce:40:b7:aa:28:e9:c5:c0:95:b5:cf:24:0c:
5d:3e:77:45:a5:64:43:93:6b:c7:c8:65:31:ae:5f:
e5:97:f1:5f:34:0a:8f:e1:69:d4:a9:ee:16:9c:78:
b3:61:d6:32:2d:9c:d6:7e:38:1f:a6:67:d8:ad:5d:
8b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B9:45:52:BB:F9:38:BB:09:16:CC:02:51:C9:FA:87:44:FE:79:CD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-rlFUrv5OLsJFswCUcn6h0T-ec0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.223.64/26
Signature Algorithm: sha256WithRSAEncryption
65:a1:cd:21:ff:ba:e4:ee:3a:94:e5:04:c3:4a:fa:14:f0:fa:
41:4c:09:3a:2b:5d:cb:73:99:a3:8a:f1:fa:ef:42:1b:ab:e8:
89:cd:d3:8b:1e:18:eb:7a:fa:53:bb:64:34:0e:e7:86:f9:31:
c2:00:cf:d4:80:db:ae:d5:61:d3:94:6b:b2:a2:1c:cf:ad:05:
45:ab:69:cd:ee:21:ed:5e:f5:77:47:35:00:25:6e:28:57:5f:
6b:d9:3a:f0:e2:52:c7:3e:be:63:1f:09:1f:7c:13:07:e6:93:
8d:d5:0d:2d:67:c0:5d:26:10:36:5d:53:71:a1:ad:f0:f7:70:
8d:fe:50:d2:90:2c:8d:9b:a5:6f:cf:e9:47:16:74:b5:3f:6d:
49:5c:a9:b0:9a:e7:10:2e:49:be:fd:1f:45:4e:31:27:cb:30:
e0:2a:d7:c2:21:9e:1b:78:54:31:4d:9a:8e:e6:07:e0:ac:9f:
a5:b6:46:88:aa:9e:70:3b:9c:dd:75:79:5f:3b:d8:68:c0:9a:
3b:f4:f8:5d:ee:8b:af:55:fb:eb:ca:a7:71:d5:a0:5c:31:f0:
4f:af:f4:f6:a7:b7:17:98:13:16:34:0c:b9:df:4d:fc:61:1e:
b2:d9:0f:f2:80:5d:1a:13:4c:4b:ed:f4:58:14:cd:35:f3:ca:
e2:4f:f3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:34 2025 by rpki-client