Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Axlv8ktDVdpCXPXaAWbzvMXQVfI.roa
File: Axlv8ktDVdpCXPXaAWbzvMXQVfI.roa (raw, json)
Hash identifier: M/D1CTBQY2N+2nkGdC618Stb82AqJwvjPWgqsWcobF4=
Subject key identifier: 03:19:6F:F2:4B:43:55:DA:42:5C:F5:DA:01:66:F3:BC:C5:D0:55:F2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3614
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Axlv8ktDVdpCXPXaAWbzvMXQVfI.roa
Signing time: Mon 10 Feb 2025 13:53:57 +0000
ROA not before: Mon 10 Feb 2025 13:53:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13844 (0x3614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:57 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=03196FF24B4355DA425CF5DA0166F3BCC5D055F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:97:60:68:5f:a1:60:58:6e:1f:a6:0c:04:73:
12:8f:41:02:5a:7f:2c:6e:88:b8:aa:42:30:ad:16:
94:39:e2:0e:ac:b4:15:e5:cc:c7:c8:98:9f:5f:bb:
c7:75:b7:ee:7b:2b:b9:69:b4:6e:f3:4c:12:2a:88:
21:bb:85:72:1c:bf:03:89:1d:18:ad:89:67:88:19:
b7:63:a5:10:f1:3b:df:f9:09:e3:a2:d0:f2:8d:d6:
73:f2:e1:b3:93:39:36:48:c2:f6:08:d3:9c:99:2e:
9c:d6:9a:05:51:e3:06:8e:ed:72:54:4c:e5:55:8a:
19:99:5f:0a:14:62:c9:71:a6:a4:ea:f6:f8:ba:e2:
be:25:46:fb:50:0d:70:c2:6e:a2:0a:c4:b3:e4:c8:
df:1f:69:2d:06:21:4a:0c:81:82:c5:7a:ff:6e:d1:
7d:b7:30:d5:52:3e:7b:e1:d0:f6:8c:90:7e:6d:6c:
10:b4:73:36:de:1b:94:04:2e:17:5d:13:10:23:6b:
74:4a:5c:4f:de:ca:ee:2c:77:0d:b2:c5:71:9f:3f:
3c:80:79:d5:0d:01:34:85:60:e0:93:84:8b:56:87:
95:65:bb:08:04:df:0d:d5:b0:e3:e3:73:41:82:30:
a4:24:73:f1:22:ba:c9:32:ed:0b:0f:20:9e:e9:75:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:19:6F:F2:4B:43:55:DA:42:5C:F5:DA:01:66:F3:BC:C5:D0:55:F2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Axlv8ktDVdpCXPXaAWbzvMXQVfI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.80.0/22
Signature Algorithm: sha256WithRSAEncryption
12:ff:b9:0b:44:78:31:7c:7c:26:3e:f9:52:7d:c3:9a:cf:8c:
66:e7:bf:70:d0:2e:87:19:22:3f:50:88:ea:9e:20:a5:78:3a:
57:96:d4:60:96:fc:46:24:87:6b:70:07:c9:e4:75:3c:94:95:
75:18:83:5d:04:9b:6d:a4:cb:12:ec:aa:35:0b:db:66:e1:e8:
5e:1b:80:d5:ee:e0:3c:b2:37:b8:bd:93:05:b9:7a:2c:dd:fd:
bc:d4:12:2b:bc:d1:73:19:b0:56:32:c6:f1:1c:7b:f1:7f:f1:
08:48:ce:b2:a3:98:45:fd:99:2c:f8:c0:5b:92:6d:94:10:06:
26:29:bd:6f:e6:bc:08:5d:3f:24:cb:fd:a1:e5:70:a3:31:3b:
33:e4:4a:4b:22:4e:fc:2f:d3:24:74:8c:80:99:a7:83:43:30:
e9:6c:6b:9e:51:65:e7:57:5e:71:cc:a7:17:0b:97:8b:44:2c:
1f:66:8a:be:b2:00:7e:f5:1d:de:a5:11:88:98:14:d5:b5:db:
42:67:28:6a:ff:c1:22:0f:50:c0:99:53:12:eb:d4:de:b9:7a:
71:a6:37:f3:a6:ab:65:4b:c3:25:fc:cb:e4:89:fc:8d:67:7b:
4b:01:76:05:d9:53:5e:20:ac:da:00:0b:2d:9e:9e:95:52:9b:
cd:d1:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:46 2025 by rpki-client