Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0wAsLlgKuaMEQ8dsovSLv4YkrWo.roa
File: 0wAsLlgKuaMEQ8dsovSLv4YkrWo.roa (raw, json)
Hash identifier: ritBESRxjFS/+7XvDGC9RXAqus8cjSrRmuJKdOoDsxU=
Subject key identifier: D3:00:2C:2E:58:0A:B9:A3:04:43:C7:6C:A2:F4:8B:BF:86:24:AD:6A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3471
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0wAsLlgKuaMEQ8dsovSLv4YkrWo.roa
Signing time: Mon 10 Feb 2025 13:52:23 +0000
ROA not before: Mon 10 Feb 2025 13:52:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13425 (0x3471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:23 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D3002C2E580AB9A30443C76CA2F48BBF8624AD6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:8d:e3:44:b3:9a:a2:53:a0:5e:ed:cb:58:
16:69:76:68:c5:5a:b1:7b:26:20:17:5a:5b:01:89:
eb:8f:ba:4e:53:0a:ca:bd:54:cf:6f:d4:fb:fa:c5:
df:96:53:e6:8e:83:92:ec:0a:f3:19:8d:6d:e7:b9:
34:c5:26:d5:dc:58:6d:02:7e:a4:55:f0:7b:58:c9:
b8:9f:9d:83:91:58:f2:c2:06:d5:5a:1f:21:69:43:
f5:85:e8:3f:f6:64:9c:76:cb:72:50:1c:00:c9:fa:
30:d8:f4:88:11:48:ff:d5:c4:19:80:e5:25:83:9f:
61:83:6b:b1:f7:0b:cd:67:99:1d:df:3a:a0:85:9a:
c4:49:10:c2:ed:1e:ef:bf:8b:12:5b:a4:35:fd:35:
71:73:ec:e6:35:0a:22:e3:79:b8:fb:74:48:6d:7d:
47:74:f8:55:f4:7c:47:3b:ee:30:e7:63:17:59:a1:
18:f9:99:32:44:3e:f1:3c:7b:91:45:00:62:70:d2:
41:1c:9a:69:f3:44:ff:f3:90:fe:54:2f:96:82:a5:
4b:60:11:3d:ab:3d:40:ae:e1:23:02:b2:50:ec:fc:
72:39:12:6c:9f:64:9e:63:6f:f1:ce:61:22:46:05:
de:a2:b8:f1:08:52:0b:79:f2:af:0b:0c:e1:f9:a6:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:00:2C:2E:58:0A:B9:A3:04:43:C7:6C:A2:F4:8B:BF:86:24:AD:6A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0wAsLlgKuaMEQ8dsovSLv4YkrWo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.56.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:6f:92:f7:22:08:f4:9b:cb:a0:24:fd:d6:2d:68:be:b1:15:
42:29:86:e1:d4:85:f8:cc:a1:da:a7:a4:65:8e:9f:44:ae:44:
5b:f1:1d:af:08:70:2e:6a:f2:95:15:39:b3:46:4b:f6:b1:d1:
b8:b2:a5:b8:37:65:1c:ac:fb:ee:04:ed:c6:ac:06:1b:cb:34:
79:6d:2c:cb:07:2a:57:75:51:2e:70:dc:94:dd:61:9d:10:4c:
e6:29:22:d4:cb:a3:a2:de:1f:33:5f:ac:d4:72:e1:97:1e:d8:
1a:9b:fe:36:4e:b6:6f:1c:f0:de:f7:38:fb:fe:7c:86:b8:42:
68:90:66:5d:27:d8:18:f7:8e:4c:16:5c:ba:89:36:d4:75:49:
80:3f:9e:60:ae:e1:eb:fe:e7:4b:c4:6d:3b:33:f7:93:6f:35:
d2:9e:86:8a:8c:a3:f0:47:33:6d:61:5f:8c:08:59:38:3f:b8:
c0:7a:b1:1e:9a:d2:5a:13:e1:28:91:70:dc:4d:37:f2:1b:42:
0c:93:a4:6a:ed:46:f8:54:55:f9:c1:45:d2:bf:6a:a2:24:bb:
b3:16:1d:59:73:da:40:1f:fa:de:3b:7b:d4:4f:eb:d5:de:2b:
71:f0:44:c4:70:f8:61:66:1f:e4:9a:74:2d:4a:d0:72:e1:ec:
83:60:6b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:49 2025 by rpki-client