Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F0qnN4r39Yse4JxuPr4dKtbXkn8.roa
File: F0qnN4r39Yse4JxuPr4dKtbXkn8.roa (raw, json)
Hash identifier: drxBuvXWJjMYH+sfvcD51tfq/ID8n2i1rl6KpnHUOvQ=
Subject key identifier: 17:4A:A7:37:8A:F7:F5:8B:1E:E0:9C:6E:3E:BE:1D:2A:D6:D7:92:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3546
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F0qnN4r39Yse4JxuPr4dKtbXkn8.roa
Signing time: Mon 10 Feb 2025 13:53:11 +0000
ROA not before: Mon 10 Feb 2025 13:53:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13638 (0x3546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=174AA7378AF7F58B1EE09C6E3EBE1D2AD6D7927F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:d8:c7:61:24:30:a3:64:c1:44:fe:8d:66:
a7:f5:e1:71:37:39:e3:8a:02:b5:70:ea:04:02:01:
bd:cb:32:7c:f3:82:10:3f:6a:e6:a2:42:3d:ed:e2:
75:b3:d2:5f:3a:b8:c4:97:0b:b0:c0:c2:52:6d:ba:
59:cb:71:52:f8:26:b5:44:6c:cb:3f:7a:51:16:e6:
dc:47:08:d4:8c:5b:97:2f:63:99:f8:7e:db:2d:14:
bc:54:8a:4f:85:68:5e:b2:75:d3:ec:56:32:29:5e:
81:2d:29:81:77:d7:28:b9:79:fd:a8:5a:9e:3b:91:
5e:f6:ed:a6:3f:bb:83:9b:e2:b4:15:32:9c:e9:d1:
f9:cf:75:b3:44:d6:89:49:a8:c1:22:a1:fa:2e:1c:
a4:b5:c5:4a:19:4d:1c:c3:6a:9c:dd:a7:c7:68:2d:
fd:05:5c:70:d6:99:52:14:39:e2:6c:f1:92:8b:08:
f6:a0:fe:dd:76:54:ad:b8:c1:16:95:dd:ab:b1:bd:
af:96:83:36:f8:fb:fb:e9:78:4e:16:26:64:66:9a:
33:b6:09:bf:9c:42:43:e7:c1:44:af:2c:97:5a:35:
63:8c:f2:b0:0f:f4:29:20:88:43:e8:eb:72:7c:0f:
9d:dc:d1:d2:eb:fe:b3:0f:62:aa:3a:b0:45:06:c7:
23:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4A:A7:37:8A:F7:F5:8B:1E:E0:9C:6E:3E:BE:1D:2A:D6:D7:92:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F0qnN4r39Yse4JxuPr4dKtbXkn8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.168.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:83:6f:3e:84:5a:18:ad:1a:f7:ba:01:d8:36:8d:4d:b3:67:
5b:ea:b3:f6:96:11:fb:c5:2d:60:57:ed:cf:68:9b:dd:02:b1:
3c:52:99:69:fc:9d:5f:7e:d0:ed:bf:29:ac:f5:c0:a6:22:7d:
e8:2a:d5:99:40:0b:c4:df:33:a4:81:54:2e:ea:45:e8:98:f3:
50:55:60:a7:6f:8e:5b:8d:62:b3:d0:c2:53:72:b9:b5:c4:87:
6d:5a:dd:fa:7c:a8:ed:dc:93:08:70:6b:e8:c2:0c:12:ce:7e:
31:67:ef:58:e0:36:f6:f1:0e:cc:bb:4a:de:f0:7e:dd:8e:d3:
b1:c8:fd:33:87:38:5a:5e:a1:6a:d5:e6:68:74:32:13:a0:7d:
30:55:76:0d:dc:1a:e0:15:0a:a7:75:27:a0:78:e8:10:a6:22:
8d:a1:ce:0d:d4:ec:df:5b:20:1f:c8:46:f7:f7:b9:2a:a8:45:
de:3f:52:38:d4:26:01:fc:26:38:38:54:f7:30:33:9a:41:2b:
a3:5c:94:cd:f5:93:ed:cf:cd:9e:66:9b:4f:4b:bb:79:43:5c:
59:db:b4:93:57:05:6d:b5:de:b5:68:38:0a:a0:6a:35:a6:b9:
16:11:e6:ee:a2:de:4c:2b:d0:f4:f2:c1:8a:90:76:8e:f2:b4:
cb:1d:49:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:09 2025 by rpki-client