Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fhbg6jxye4xjTsQIyrJ_4U-TOn4.roa
File: Fhbg6jxye4xjTsQIyrJ_4U-TOn4.roa (raw, json)
Hash identifier: RoQ5Rk6qqTP+DX+VE3XkQwm6LrVY1nlCRESLkG4wYNQ=
Subject key identifier: 16:16:E0:EA:3C:72:7B:8C:63:4E:C4:08:CA:B2:7F:E1:4F:93:3A:7E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36C5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fhbg6jxye4xjTsQIyrJ_4U-TOn4.roa
Signing time: Mon 10 Feb 2025 13:54:40 +0000
ROA not before: Mon 10 Feb 2025 13:54:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14021 (0x36c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:40 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1616E0EA3C727B8C634EC408CAB27FE14F933A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:43:38:a1:86:e3:29:b2:13:55:3b:60:cd:4f:
da:00:9c:58:2c:a3:ff:dd:dc:5e:d9:01:1e:b0:2c:
5b:77:4c:c3:4d:8a:26:49:cc:e5:2e:b7:91:52:e1:
0a:bf:12:a4:c4:3f:f8:26:22:84:8f:50:a4:2d:b4:
7c:af:e4:ad:df:16:a1:6b:3c:69:b6:45:1d:c2:99:
f9:ab:f8:30:e4:8e:2c:a1:5f:6a:64:ea:20:8d:1e:
12:df:96:fe:47:b8:0e:0c:6a:80:14:92:35:5d:6d:
7a:1e:c4:27:da:b7:dc:01:86:47:61:70:8e:c5:a8:
2b:9f:11:50:df:c0:29:e1:5f:cf:39:27:73:8a:64:
c5:a9:14:07:df:eb:a6:5e:cd:c3:b6:e6:bd:b4:e4:
d9:04:dc:6b:7b:55:ba:37:25:6c:e0:c3:22:6d:58:
c8:0d:a4:21:f3:9e:92:40:1a:08:54:c4:f7:3c:3b:
cc:59:62:6b:23:46:ec:77:45:0c:41:7a:01:c8:23:
67:da:15:1b:fc:c6:7a:c4:13:69:ae:26:a9:49:3f:
0e:2f:2a:28:3b:a2:64:66:db:86:0c:1d:b9:8e:0a:
2f:3c:8c:c4:86:2a:27:b6:11:d8:38:7e:9b:26:96:
b0:0f:94:bb:86:8a:ef:f6:88:4c:b6:16:80:12:ff:
d2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:16:E0:EA:3C:72:7B:8C:63:4E:C4:08:CA:B2:7F:E1:4F:93:3A:7E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fhbg6jxye4xjTsQIyrJ_4U-TOn4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.94.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:2d:96:10:2e:56:95:53:f9:99:6d:8e:55:84:cc:2f:75:40:
c6:b0:13:3a:66:56:6f:a9:f3:ab:f1:85:8d:8e:0d:cb:09:4e:
51:f4:4d:23:87:79:5f:64:e8:d7:84:bb:78:e9:94:ac:03:d2:
ab:d9:c9:63:c7:5f:1a:cc:77:df:d4:5d:b2:3e:ed:69:82:b4:
2c:1b:f5:d0:57:59:43:22:b6:8a:2c:7a:25:51:ab:91:0b:48:
ac:53:d1:a3:ab:27:d4:08:a6:1e:5e:b3:84:f9:c9:1c:b2:8c:
89:ed:10:0b:53:b9:b9:94:86:11:9e:bc:f5:2d:1b:9d:92:98:
1e:57:3a:fb:51:54:85:63:69:7d:f7:8a:8c:de:54:f5:64:33:
9d:72:47:22:99:93:44:2b:c0:d3:0d:ed:29:18:b4:3f:29:0a:
2a:d4:41:bb:bb:c7:ba:49:4c:ff:a7:7c:3a:87:5c:35:52:35:
72:fa:b7:e3:bc:7e:ae:56:07:3b:c3:08:a0:b7:e6:d4:84:4f:
cd:e2:7a:d0:25:50:72:1d:f7:77:4e:d2:d9:11:58:be:d3:78:
d3:fe:ba:ea:d3:b1:27:d6:f9:0a:8b:4c:79:ce:25:ce:a7:fc:
92:74:e9:3b:7e:57:0f:4b:01:ba:d7:a5:f4:34:f3:e2:f7:5a:
98:52:0c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:23 2025 by rpki-client