Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B8bkRZoh_jcmJd2UKj8sKElCE3Q.roa
File: B8bkRZoh_jcmJd2UKj8sKElCE3Q.roa (raw, json)
Hash identifier: wjrVJmOhctCmIt+WQd54S/AkserIZt4yfiI2tQuVrtY=
Subject key identifier: 07:C6:E4:45:9A:21:FE:37:26:25:DD:94:2A:3F:2C:28:49:42:13:74
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36DE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B8bkRZoh_jcmJd2UKj8sKElCE3Q.roa
Signing time: Mon 10 Feb 2025 13:54:45 +0000
ROA not before: Mon 10 Feb 2025 13:54:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.193.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14046 (0x36de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=07C6E4459A21FE372625DD942A3F2C2849421374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:b7:50:28:64:00:6d:cb:51:c3:0b:e3:21:
3b:4c:3c:15:7b:e6:20:f3:9d:90:8b:d7:16:52:5c:
bb:a0:b8:33:61:62:74:eb:31:df:9a:33:9b:b2:b4:
ed:0a:e1:80:5c:f1:c4:ef:d8:72:b9:e7:b2:1f:09:
67:26:de:7e:a3:0a:57:e5:c4:da:0e:b8:bd:dc:d0:
16:88:a9:38:45:f4:cc:54:7c:99:88:e5:f8:f2:06:
31:0e:19:af:09:e3:98:5f:51:86:ef:98:27:7e:d1:
cb:8e:7d:ec:c9:b6:08:60:af:49:da:47:6d:00:2a:
fb:76:10:64:50:a8:44:9c:3f:89:96:26:fe:36:72:
c4:89:d6:15:e2:56:a8:b1:45:80:54:8d:b8:9c:0f:
87:5d:18:05:b5:96:10:26:7e:b9:a6:92:e5:87:2e:
90:31:e8:28:4c:36:2d:84:53:dd:d2:55:ca:18:7d:
d9:42:f6:c9:e9:56:44:e3:68:e0:c1:57:8a:ab:5e:
df:7f:0a:1a:d9:b3:93:27:a7:cc:7b:80:ec:9b:d1:
40:26:b9:aa:a6:ab:9f:26:26:ba:5a:5e:21:70:f2:
9f:52:9d:72:c0:ab:60:77:a8:fc:d1:e1:7d:81:c2:
7e:cf:e5:0a:20:fe:9e:25:42:1e:1f:97:13:f9:20:
2b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C6:E4:45:9A:21:FE:37:26:25:DD:94:2A:3F:2C:28:49:42:13:74
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B8bkRZoh_jcmJd2UKj8sKElCE3Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:87:19:fd:8f:0a:0e:1a:de:21:ad:2b:11:8e:b0:89:c8:98:
6a:fb:51:91:c1:31:ff:50:ac:93:3f:8f:7b:e4:41:84:1b:e8:
50:7b:f6:c9:8f:6b:49:1d:08:02:da:e4:1b:20:c3:8e:5b:be:
2e:d1:fd:19:a9:f5:ee:53:f8:d4:48:00:36:d0:cf:42:6c:c6:
35:25:12:45:ef:d9:9e:2e:0a:de:eb:63:79:b3:5c:48:92:b6:
aa:03:16:55:09:7b:c8:16:24:22:10:a5:c5:63:3f:ae:97:77:
75:50:d3:15:0b:7d:1a:77:94:f6:4a:7a:d1:a3:f5:e2:17:37:
93:c7:c0:91:4f:ed:a9:fb:9f:e7:3b:54:a7:de:84:5a:e4:17:
25:05:1e:ad:fc:59:2b:c8:90:29:98:ff:bc:ba:1a:c3:c5:d0:
4b:84:b5:29:63:3e:29:e3:9e:1c:8d:dd:e5:3e:0d:c0:18:0d:
bd:f9:88:61:5c:71:b5:57:46:86:58:b8:b8:41:1a:1a:a7:b7:
7d:ec:35:8d:16:ae:d6:94:33:90:7d:be:d0:95:fc:55:5c:9a:
75:25:47:bd:00:24:c6:be:95:fd:f7:39:ac:21:3b:75:99:01:
7e:dc:39:94:d0:29:1b:60:68:3c:db:16:da:db:f9:57:75:76:
32:30:18:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:27 2025 by rpki-client