Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gj4AWpPJYTi_8vkTpsWs7rrofAo.roa
File: Gj4AWpPJYTi_8vkTpsWs7rrofAo.roa (raw, json)
Hash identifier: wxUyeYvkHWEUQaockE94wFabcv6+yZHD2vFjCKbPIsA=
Subject key identifier: 1A:3E:00:5A:93:C9:61:38:BF:F2:F9:13:A6:C5:AC:EE:BA:E8:7C:0A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 344A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gj4AWpPJYTi_8vkTpsWs7rrofAo.roa
Signing time: Mon 10 Feb 2025 13:52:15 +0000
ROA not before: Mon 10 Feb 2025 13:52:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13386 (0x344a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:14 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1A3E005A93C96138BFF2F913A6C5ACEEBAE87C0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:01:c6:b4:08:46:31:e7:24:0e:64:17:af:
45:0d:77:54:45:6a:08:ec:30:af:2c:38:64:57:a6:
56:a8:0e:73:af:c4:51:fe:45:38:a2:67:ec:57:4d:
c1:6a:ba:4c:a3:5a:64:ef:bd:6e:83:76:37:4c:96:
31:d7:6e:06:2b:b7:65:3b:27:42:99:96:11:06:b3:
69:06:c9:dc:3a:fd:8b:73:38:db:ec:e7:7c:24:8e:
aa:fd:14:d5:ad:2a:c8:41:0c:d5:87:b4:1c:7b:0a:
df:1f:31:93:b0:3a:59:e0:7d:f0:58:71:15:5e:9a:
28:e1:6e:29:03:0d:a2:3c:fb:04:1c:52:6d:25:7f:
da:24:ed:ca:4d:e8:a1:c6:d2:dd:01:76:c6:de:c9:
0f:72:f8:4b:e8:22:ec:a3:a7:00:b1:fb:91:8f:49:
25:77:1e:79:fc:40:91:b9:45:1a:16:67:8a:31:6c:
bd:2b:56:e7:66:7b:0f:68:9b:1a:b9:01:3a:4c:bd:
3b:d2:e1:90:1d:f2:6b:0a:56:9e:37:14:3f:18:e1:
ee:bd:ae:e5:6d:77:e4:e1:b9:0c:a1:ff:99:45:4b:
b2:d1:c2:20:2f:be:81:ab:08:3e:03:a0:2f:4e:17:
71:0e:06:b2:33:e6:0d:5d:3c:45:1d:c9:3c:2e:ae:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3E:00:5A:93:C9:61:38:BF:F2:F9:13:A6:C5:AC:EE:BA:E8:7C:0A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gj4AWpPJYTi_8vkTpsWs7rrofAo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.159.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0e:63:5b:1d:62:82:27:88:94:2f:b3:12:49:6d:dd:ef:a5:
54:2c:99:98:4e:1d:20:a5:aa:8d:4b:72:af:a0:60:28:ec:2c:
75:6c:96:ea:c6:ad:f2:11:61:ce:e9:73:f8:16:89:b6:85:a1:
f0:67:6a:e7:39:4a:d9:f6:15:9c:c8:9d:69:fc:d2:ba:ff:09:
07:fd:3d:af:f6:90:63:bc:f0:f9:e8:de:47:43:81:4f:6f:c3:
92:0f:ee:4a:92:72:5f:b1:a5:26:2f:fb:f9:3c:85:3b:8d:85:
22:aa:78:49:bf:51:c7:78:73:e7:14:81:19:e1:1e:d4:8e:f8:
a5:6e:8f:03:4b:7d:c6:a3:93:2e:fe:cc:91:3c:56:4a:49:e3:
7c:10:1a:e5:d1:2d:47:a2:db:1d:46:e0:47:64:35:fe:5a:5c:
19:ad:e3:7c:b8:54:88:34:83:ce:21:23:60:1c:76:ce:bd:d7:
8a:5b:6f:8e:98:05:16:73:6f:ab:58:3d:e8:e0:aa:32:a4:6f:
77:94:8e:87:78:c9:fc:d6:3d:7a:91:78:ec:23:2e:88:ee:aa:
fe:bd:0b:61:5b:54:61:ef:35:20:cc:85:1a:9f:84:28:8a:ee:
55:0c:d0:4f:86:1d:fc:61:38:47:5f:7a:00:10:fd:c5:60:10:
62:4a:b9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:27 2025 by rpki-client