Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8jz6muuqEypmeTUpuy4psVmv6Sg.roa
File: 8jz6muuqEypmeTUpuy4psVmv6Sg.roa (raw, json)
Hash identifier: TV75zwSaT6OJiCGnpYAOFxhN1d5LQijdl4Q4sFQov6k=
Subject key identifier: F2:3C:FA:9A:EB:AA:13:2A:66:79:35:29:BB:2E:29:B1:59:AF:E9:28
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33D3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8jz6muuqEypmeTUpuy4psVmv6Sg.roa
Signing time: Mon 10 Feb 2025 13:51:48 +0000
ROA not before: Mon 10 Feb 2025 13:51:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13267 (0x33d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F23CFA9AEBAA132A66793529BB2E29B159AFE928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:9f:5c:bb:7b:b5:0d:41:e4:42:28:a8:9c:
cf:f6:60:02:5d:14:a0:9e:85:3f:7b:67:9f:09:28:
98:42:16:e3:a7:b7:07:10:25:b1:12:6b:44:fe:99:
81:2a:c0:8e:be:69:69:56:af:54:72:dc:aa:88:b2:
df:c7:e1:13:c2:83:9c:02:59:98:07:2b:ab:96:74:
ae:66:1a:f6:34:47:9e:e9:f4:11:91:8d:92:13:b4:
bb:69:7f:b5:89:a1:08:b8:68:2e:46:98:a2:73:44:
f1:57:69:12:08:02:31:f6:58:1b:bc:d2:d3:14:0f:
29:8b:25:81:fb:10:d1:90:fa:db:93:4c:49:6a:9e:
b1:bc:8d:87:ce:1a:ef:d7:f9:62:aa:7c:90:ce:bd:
89:74:a0:58:e2:7f:40:5c:fa:39:01:17:0e:a5:f0:
f8:e7:93:bc:4c:77:04:86:da:d8:8c:7b:73:5e:83:
c6:81:13:ad:de:f2:ae:85:03:ce:e9:1f:26:65:ac:
aa:42:47:59:af:59:03:76:61:33:84:82:85:fd:68:
73:3d:9c:a6:84:10:50:68:dd:01:e3:3a:b7:a3:3e:
3e:72:b8:aa:1f:35:01:3f:5e:48:fb:ef:24:e7:6d:
92:73:08:9f:8e:93:e2:6a:8e:a9:25:01:19:68:90:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3C:FA:9A:EB:AA:13:2A:66:79:35:29:BB:2E:29:B1:59:AF:E9:28
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8jz6muuqEypmeTUpuy4psVmv6Sg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:36:0d:51:f9:01:20:33:3c:bf:57:e3:ee:d8:88:2c:aa:c1:
5b:a9:0d:e7:24:27:b6:94:5e:2b:b2:39:1d:e3:9e:a7:93:0c:
77:54:b2:be:f5:e7:40:3c:fe:ce:86:73:70:13:55:33:56:9f:
f4:79:93:8b:1d:8f:35:2f:e8:0e:91:41:8a:8c:90:40:df:28:
2b:2b:15:98:a2:8d:b8:34:83:3b:85:c9:cf:ed:54:96:e8:8f:
b9:f7:80:10:d8:a8:a8:b2:97:33:4f:80:0f:a5:5b:b9:45:1b:
7b:6b:bb:cc:72:e6:44:35:c8:4f:f8:6a:01:4f:e5:b4:06:c4:
89:cc:a3:dc:c3:d3:bf:55:df:64:6f:a6:6e:ee:e3:e8:60:d8:
ac:70:1c:c2:68:ac:0e:14:9a:6c:f6:1b:bb:d8:98:84:5d:62:
81:25:f7:18:ce:4a:28:34:6f:e6:86:25:1d:6b:8c:02:8c:c0:
27:1b:53:b2:83:e2:62:93:ae:f1:e9:12:61:72:85:0d:52:89:
1e:f5:8a:99:e7:12:7f:38:45:0c:6d:c7:84:21:53:d1:2f:83:
d1:72:35:b5:af:07:29:23:f2:3d:85:48:95:0e:0f:8b:56:e1:
71:56:67:2b:29:a7:ae:8c:57:5a:9d:c8:9d:23:f6:11:2b:ed:
b8:cf:46:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:12 2025 by rpki-client