Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fi96p11ClymeEgKAoJHJuLP1qgc.roa
File: Fi96p11ClymeEgKAoJHJuLP1qgc.roa (raw, json)
Hash identifier: ufWoe5kA9flgEA1YVBz0e4d5AtIqE+m0FntklUt8J4M=
Subject key identifier: 16:2F:7A:A7:5D:42:97:29:9E:12:02:80:A0:91:C9:B8:B3:F5:AA:07
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34FE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fi96p11ClymeEgKAoJHJuLP1qgc.roa
Signing time: Mon 10 Feb 2025 13:52:54 +0000
ROA not before: Mon 10 Feb 2025 13:52:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13566 (0x34fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:54 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=162F7AA75D4297299E120280A091C9B8B3F5AA07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:d8:47:41:83:35:e2:7f:b9:ba:10:55:0a:
b4:8d:25:ed:a1:e4:c0:86:eb:16:15:08:87:b4:a8:
00:60:8d:b6:52:67:23:b3:62:5a:40:29:cc:a6:a7:
e6:da:a4:4a:af:aa:18:73:3c:27:6b:56:24:a6:66:
bf:83:93:51:9f:7f:46:d2:a5:b3:8b:08:1c:93:7b:
7b:72:2f:d0:b1:6b:62:1b:99:da:64:4e:d5:32:92:
d3:91:8a:de:64:a1:a3:3e:dc:ee:d5:49:5d:c1:b4:
03:ed:a1:a8:b0:00:63:64:8d:f8:0f:e9:68:e9:8d:
1b:b0:74:57:cb:16:e2:dd:30:c4:b5:e0:a8:7d:ea:
47:23:eb:c4:21:60:07:19:bb:bc:ce:80:97:13:a9:
b0:54:18:a9:2a:a7:0a:63:c9:45:71:f0:78:22:e2:
25:15:b6:0a:37:7c:f1:ad:e2:7f:36:89:52:ed:a4:
f1:39:76:52:2c:a6:1d:f7:e0:c9:08:30:c0:84:ef:
75:16:47:c0:56:5f:ec:b3:d6:03:f6:3e:76:05:38:
47:f9:2d:21:60:e0:60:9a:1e:16:1a:50:a9:95:6e:
81:94:f4:26:0c:98:50:e9:e2:4f:0e:01:1e:fa:39:
6a:40:0b:3c:ef:48:f1:a8:97:de:5a:f5:55:18:73:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2F:7A:A7:5D:42:97:29:9E:12:02:80:A0:91:C9:B8:B3:F5:AA:07
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fi96p11ClymeEgKAoJHJuLP1qgc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.240.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:c6:a6:25:6b:4e:5c:59:3f:51:83:e6:67:55:9c:01:7d:65:
66:ad:e5:2c:76:9b:06:b9:a0:9a:dc:c3:6c:22:25:9a:5f:ce:
4d:b9:8a:91:14:55:a6:12:54:ce:c6:a4:52:23:e2:f0:63:06:
92:d0:33:41:f0:3a:0d:77:e3:c8:76:ed:96:96:d6:bb:21:b9:
67:71:1b:62:0c:31:ea:bf:b6:4a:97:58:90:ca:63:cf:e0:02:
89:46:fe:18:3b:dc:41:a9:74:7f:50:05:5e:f0:be:8f:65:b7:
5d:d2:8b:29:0f:0a:b7:8b:cf:a1:ee:ab:bd:10:6b:89:4a:2e:
71:12:d6:85:ea:87:68:1d:c9:cc:14:b6:cc:79:76:94:0b:31:
68:25:e4:16:56:a7:4b:a7:c5:ea:e1:09:08:6b:33:00:29:f1:
93:c2:51:33:3b:eb:5a:a0:45:2f:49:0c:ab:97:84:9e:0d:26:
7f:49:89:7b:ef:24:bc:93:a0:96:0c:9f:7d:dc:ca:3d:94:e9:
84:3f:45:22:a9:ae:a1:cd:d5:3a:39:39:92:9a:6c:de:ae:ec:
c2:66:6c:15:fe:22:c5:0c:58:a0:32:cb:e1:b4:3c:bf:0e:37:
8c:2f:f5:63:41:8c:7c:14:0c:9b:e4:a0:f1:2f:95:ce:ec:86:
40:72:a5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:55 2025 by rpki-client