Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1-gQYNI8-lYWhd-rSqG33ZZhoUU.roa
File: 1-gQYNI8-lYWhd-rSqG33ZZhoUU.roa (raw, json)
Hash identifier: fLO/imCa2qwOAMXFF+i0ZfGmmq+O3CWFYQRWmt6ww+0=
Subject key identifier: D7:E8:10:60:D2:3C:FA:56:16:85:DF:AB:4A:A1:B7:DD:96:61:A1:45
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33F6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1-gQYNI8-lYWhd-rSqG33ZZhoUU.roa
Signing time: Mon 10 Feb 2025 13:51:56 +0000
ROA not before: Mon 10 Feb 2025 13:51:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13302 (0x33f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:56 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D7E81060D23CFA561685DFAB4AA1B7DD9661A145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:03:3b:06:4e:9e:8e:da:4c:e1:99:7c:e2:
08:1a:77:28:fd:3b:13:9b:c6:fb:0e:d0:2b:7d:7d:
80:ba:a0:d3:55:4b:78:9b:f3:4c:04:4f:d1:5a:28:
fe:1e:2e:cc:29:bb:f9:1b:05:89:f3:8b:75:63:48:
22:2e:e7:83:13:be:1a:a2:85:ac:9d:a5:3d:82:f3:
34:60:77:df:21:a6:cd:d1:71:5c:6d:63:ab:ba:87:
54:7b:36:61:e6:93:06:eb:55:04:2a:cf:5e:57:31:
e4:7a:69:bb:05:cf:26:39:fb:66:dd:b4:79:63:04:
73:ac:04:05:2f:9d:50:32:13:b6:13:04:73:6e:69:
a5:70:43:37:90:6f:86:73:d6:83:64:dd:1a:02:78:
ba:5d:b7:40:fd:3d:46:d1:57:c5:84:f7:13:dd:5c:
55:ba:0f:a0:13:07:28:6c:9f:10:59:ea:9c:63:bf:
5d:e1:74:04:b3:85:0f:4d:27:29:41:d8:db:37:5c:
f8:29:d4:28:2f:c3:ad:21:22:34:bd:c3:dc:d9:54:
fd:c4:0f:2c:54:4d:88:40:a8:f7:cd:0d:56:05:07:
bf:9e:cd:8f:3d:f5:42:6f:75:65:ae:7f:0e:83:e4:
f9:c9:75:be:33:4a:d6:50:50:fe:e0:20:64:20:b1:
35:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E8:10:60:D2:3C:FA:56:16:85:DF:AB:4A:A1:B7:DD:96:61:A1:45
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1-gQYNI8-lYWhd-rSqG33ZZhoUU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:78:0d:f9:7e:cd:52:ca:af:d3:71:52:8d:f0:b5:6e:7a:22:
49:87:b1:14:88:9c:a8:23:e7:80:ed:3f:41:29:c5:d5:d4:2c:
bf:a5:d2:0d:d8:b0:03:39:ff:71:2d:88:89:cd:f2:91:2a:06:
e5:d0:dc:51:12:7c:88:70:93:05:ae:66:83:80:ff:ea:c0:30:
9b:13:3d:cb:5c:64:e7:2f:71:46:40:0a:19:ba:2e:52:ba:24:
99:27:5e:4b:46:30:6b:4b:7a:9e:b6:d6:e7:62:ed:0d:97:04:
23:32:1f:cf:bb:b7:20:1d:24:f2:1b:91:ca:37:3a:27:9f:4b:
e0:a3:c2:73:66:44:99:5c:7f:d8:60:6b:87:97:bc:e9:4c:dd:
2b:bc:e3:b4:71:20:ee:bd:f3:14:cd:cd:e1:bc:e1:a7:24:87:
e8:6d:6a:86:60:1a:0c:1d:77:f9:1d:9b:ab:56:4d:64:06:0a:
aa:a7:44:5a:5a:28:e2:c5:ec:29:23:b4:35:11:9e:2c:ae:e0:
77:30:0e:80:d4:35:8e:de:a8:ec:7a:06:51:77:e8:bf:28:47:
50:1e:9b:d2:15:7e:53:2b:c1:96:fb:51:7b:a1:b1:9d:22:dd:
18:61:f1:37:1c:9e:74:6f:19:d7:c4:6e:8c:e4:9c:88:d5:f6:
74:d5:63:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:04 2025 by rpki-client