Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4n-lvr7FvtMIaBjuowM9UZIJuB4.roa
File: 4n-lvr7FvtMIaBjuowM9UZIJuB4.roa (raw, json)
Hash identifier: 2McvsoFwFMDOeRC71DnnWX/R+FsWSKRxQQ8HqsxU1Pc=
Subject key identifier: E2:7F:A5:BE:BE:C5:BE:D3:08:68:18:EE:A3:03:3D:51:92:09:B8:1E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33C7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4n-lvr7FvtMIaBjuowM9UZIJuB4.roa
Signing time: Mon 10 Feb 2025 13:51:46 +0000
ROA not before: Mon 10 Feb 2025 13:51:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13255 (0x33c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E27FA5BEBEC5BED3086818EEA3033D519209B81E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:81:5a:c2:f1:0c:c6:62:ba:03:0f:d6:54:
fa:3f:7a:5d:c9:7c:a6:b6:a8:b7:b1:2b:78:c5:16:
35:ac:5a:2c:ae:0e:83:ee:71:1b:de:80:35:00:d3:
4e:0e:fe:10:73:10:43:6e:ba:f7:46:b2:ef:ba:f2:
e5:7b:26:b8:cd:be:e2:62:3d:70:bd:d1:4c:fc:9a:
93:46:17:a5:74:38:f9:2b:18:e1:b0:ca:5f:7b:e6:
bb:58:c5:f0:9c:04:13:13:2b:ac:b4:06:d0:df:0e:
4c:3b:54:81:52:8f:d3:e2:84:24:92:06:f5:6e:11:
2a:1e:2c:da:fe:ce:e7:0d:c9:fa:e2:1c:b4:bf:84:
67:1f:2d:2e:47:b2:ef:7c:f9:2c:2f:82:ee:cb:c2:
e9:c8:02:e8:60:40:a8:16:56:6a:fc:d6:f9:f5:b1:
3d:81:c6:9a:78:86:ec:8d:8e:1e:ab:a6:84:61:e2:
7b:6a:e9:03:0d:e5:00:c5:15:01:a5:a2:56:7b:b6:
8a:6c:66:cc:33:5e:e7:38:44:42:a7:79:5a:84:a2:
b2:4e:a0:86:49:91:70:d4:55:8b:e6:bc:81:56:cd:
f6:31:5a:95:df:bf:5b:3d:60:84:5a:97:1f:a8:5d:
b5:46:c7:33:de:f5:28:54:a0:dd:04:c3:d5:3d:38:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7F:A5:BE:BE:C5:BE:D3:08:68:18:EE:A3:03:3D:51:92:09:B8:1E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4n-lvr7FvtMIaBjuowM9UZIJuB4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.120.0/21
Signature Algorithm: sha256WithRSAEncryption
91:1e:0a:6c:10:d3:15:ef:6a:f8:e1:37:f8:9d:45:ad:a9:8b:
13:bf:7f:37:ad:d7:42:96:3e:4c:f9:da:04:8f:92:ab:c3:00:
a4:51:40:7e:7a:ee:94:88:86:f7:a3:7e:e7:34:1c:7e:f8:61:
8b:3a:74:43:cc:4c:6b:48:bc:3c:eb:65:05:73:7e:63:46:7f:
d1:de:22:fa:a5:f1:ff:79:21:2e:b3:f3:a9:20:34:75:70:43:
ae:ed:c2:fd:57:f4:fc:64:db:00:5c:05:3f:ba:ec:17:19:8e:
18:d6:4e:8e:be:64:23:69:a7:69:31:59:ee:f5:5a:11:18:62:
22:42:6e:62:ef:0f:c8:55:e0:17:2f:4f:14:68:ab:48:51:bf:
bb:70:12:cb:d8:24:0e:d9:6a:75:bc:54:5a:4f:84:93:41:b3:
3e:d5:df:bc:a8:a7:ee:a4:57:17:18:b4:27:70:43:a8:b4:e9:
81:14:87:1d:68:d3:c4:f7:93:21:d7:d6:d1:42:db:eb:e4:0a:
12:4e:fb:f1:c1:a2:0e:83:81:94:28:9a:7c:f8:e4:0e:2e:42:
84:f6:b1:f3:24:5b:ae:75:b2:d2:54:85:02:46:0e:5b:fc:f4:
43:1a:b7:49:04:21:16:d3:9c:a2:b2:42:83:85:3a:4b:99:fe:
59:af:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:31 2025 by rpki-client