Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ELiz3FtBaVOFSQiQ7RcTKyQoYGs.roa
File: ELiz3FtBaVOFSQiQ7RcTKyQoYGs.roa (raw, json)
Hash identifier: l8kXHTsqsSpPtv1yxaAA0QFuZNJcb8F/n5pYC8ck5Z8=
Subject key identifier: 10:B8:B3:DC:5B:41:69:53:85:49:08:90:ED:17:13:2B:24:28:60:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33C8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ELiz3FtBaVOFSQiQ7RcTKyQoYGs.roa
Signing time: Mon 10 Feb 2025 13:51:46 +0000
ROA not before: Mon 10 Feb 2025 13:51:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13256 (0x33c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=10B8B3DC5B41695385490890ED17132B2428606B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:a7:54:cf:e7:28:2b:b9:44:ee:53:da:3d:
02:8d:7a:eb:d8:eb:a1:55:6e:af:89:7c:a3:c6:75:
02:9b:18:b8:bc:51:a0:7f:fd:34:c4:71:56:b9:ea:
7d:04:28:84:a0:c9:fc:21:d6:5e:43:cf:31:9a:d3:
6a:41:8a:8e:7f:74:c0:6a:25:1f:bb:ef:d6:35:b0:
f3:37:1b:47:2a:22:bb:a0:31:b2:6b:f4:dc:ad:de:
1d:58:e0:b5:b3:e8:b3:23:20:50:c5:29:26:2a:2a:
4d:68:eb:c6:ab:a4:3d:d4:36:bf:60:e8:d3:8b:34:
54:e6:5c:5e:22:a9:2a:77:72:60:26:38:5e:f6:c1:
d0:c7:01:3f:61:36:e0:a2:6d:07:73:d7:c8:2c:1a:
2f:6f:4f:ae:92:8c:0d:90:05:65:91:89:bd:aa:8d:
21:4a:45:1b:64:bd:4c:ff:45:e7:3e:d5:b2:e0:74:
4a:a9:a4:8e:ae:58:0b:6d:74:8e:c5:85:f3:22:50:
8a:84:be:0b:12:32:a5:06:d2:91:96:58:a3:f1:06:
1b:cd:ca:e0:ba:3e:76:81:30:d9:ef:2f:38:be:5a:
d5:64:ba:36:3f:1a:64:35:8a:86:d8:d4:40:16:07:
6b:ae:32:07:80:10:31:6f:04:09:81:8c:a1:73:fa:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B8:B3:DC:5B:41:69:53:85:49:08:90:ED:17:13:2B:24:28:60:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ELiz3FtBaVOFSQiQ7RcTKyQoYGs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.152.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:0b:a8:bb:0c:23:8b:ce:68:75:3b:38:a2:a5:2d:12:ad:96:
fb:52:19:8b:6c:a9:ca:7d:02:a9:65:c5:07:fc:2c:e0:ea:f4:
de:c6:28:45:e5:e5:ba:32:b7:0c:bd:9c:67:3c:80:42:db:f2:
fd:6c:d7:38:17:47:65:47:8d:70:fd:ff:d0:81:e1:f0:1b:1f:
0f:01:f7:f9:3e:73:f9:46:17:ac:34:33:9d:a3:d0:aa:f1:dc:
fb:6c:10:1c:10:28:d2:41:73:dc:68:29:ac:12:7e:e7:c3:46:
91:88:7b:b8:e8:52:62:65:2e:e4:d1:d2:70:03:e2:4c:bb:b2:
71:31:84:af:0b:bc:b1:74:a7:d5:c8:9c:19:d5:88:cc:2f:f7:
52:36:e5:cf:98:87:92:9a:cc:b3:a0:90:4b:c1:1a:ef:55:ea:
d6:63:12:0a:d8:47:d5:55:e3:cc:90:d8:f0:5f:e8:e5:a9:80:
67:9d:d2:28:f3:15:fc:2b:08:b2:f4:b5:50:89:76:3b:0d:46:
5f:de:19:6c:f3:a6:88:39:20:c8:2d:03:78:34:32:11:ea:ec:
66:f3:bf:00:ba:a3:a2:5d:a2:c0:50:0c:ed:0c:c4:a3:98:90:
bf:f3:64:02:0f:da:20:a1:c7:42:ea:f1:36:d4:32:df:41:69:
41:0f:ff:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:09 2025 by rpki-client