Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HmlY48HdiGpw6WOPkCIfEVxB01U.roa
File: HmlY48HdiGpw6WOPkCIfEVxB01U.roa (raw, json)
Hash identifier: 9K6F3bDvHZinpZrblcHbmcnOkrn8fFUbk+lcc1KZPR4=
Subject key identifier: 1E:69:58:E3:C1:DD:88:6A:70:E9:63:8F:90:22:1F:11:5C:41:D3:55
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3588
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HmlY48HdiGpw6WOPkCIfEVxB01U.roa
Signing time: Mon 10 Feb 2025 13:53:27 +0000
ROA not before: Mon 10 Feb 2025 13:53:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13704 (0x3588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1E6958E3C1DD886A70E9638F90221F115C41D355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:1a:8d:b6:a7:83:78:d8:d9:f7:f1:7a:cf:
8d:68:4c:11:64:a0:37:31:80:95:fc:c0:54:71:85:
51:ba:49:e4:55:b0:4a:03:69:03:e9:03:38:ad:7b:
fd:d9:27:ab:77:25:97:d1:86:78:26:1a:35:07:e6:
26:65:33:45:16:f3:d3:79:a4:c8:f5:c1:63:67:62:
7e:20:f0:ac:ef:79:a6:8b:38:17:62:93:4c:11:b1:
cc:38:35:85:90:b6:ae:d5:03:59:19:09:57:d5:de:
c0:77:e5:31:c9:f7:36:d8:fa:03:60:3b:fd:fd:e8:
df:c5:db:8a:cd:86:9b:69:fe:2f:ef:c2:55:20:d3:
af:51:6b:f1:e9:11:31:41:dc:6b:85:af:13:1d:82:
94:36:d9:a6:0b:b2:34:96:a3:35:fb:8d:b4:bb:fc:
c5:4b:ef:3c:b0:ce:d3:57:fe:fd:90:23:5c:b0:23:
21:80:a9:8e:0e:bc:43:c4:3d:42:ca:bd:c0:e9:45:
2f:ee:47:64:7e:01:2c:84:3a:29:e3:13:45:2c:45:
4d:f7:38:90:4b:47:8d:ce:27:9a:20:d5:32:3e:fa:
d7:9c:ae:5f:da:a6:f8:d3:a1:55:9c:84:2c:12:b4:
8a:15:c9:89:56:9d:c7:29:e0:c3:5a:17:f6:4b:a4:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:69:58:E3:C1:DD:88:6A:70:E9:63:8F:90:22:1F:11:5C:41:D3:55
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HmlY48HdiGpw6WOPkCIfEVxB01U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.192.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:21:45:09:12:3e:d4:2a:92:bc:c5:f0:84:90:ea:e5:1a:d9:
a0:db:58:ca:7f:6e:f5:64:f6:b5:86:f3:62:61:e2:60:15:23:
a5:7b:1d:93:af:ee:8a:2f:4f:a9:ce:30:26:fc:98:07:cd:44:
5c:57:b7:72:89:d8:c8:64:be:41:1e:bc:61:b7:a7:ef:31:02:
02:84:bd:65:a8:10:67:08:a9:1a:52:a8:22:df:41:ac:fb:2d:
ed:9e:85:fd:ee:d7:28:cc:34:e9:d5:c9:d3:d6:97:c3:6d:d7:
96:af:cc:f0:cb:3b:73:33:52:ab:6f:6d:16:3c:1c:7e:ed:f3:
15:52:df:cd:78:be:72:21:a7:71:11:08:a8:25:7e:fd:eb:0c:
0a:7f:86:19:75:79:67:a7:50:65:cf:f1:02:2f:54:3c:e4:2e:
15:3f:cf:48:de:bc:ec:5c:16:33:af:51:b3:d9:de:e2:e5:38:
0e:06:8d:9f:5a:59:f1:25:90:32:0e:3e:c4:5c:e4:52:cf:f1:
6f:6f:65:d9:a9:15:dc:eb:45:66:97:3d:04:2a:dd:a6:5d:ca:
76:17:bf:e9:2b:2a:2e:db:3c:43:fe:5c:21:e4:16:de:17:fb:
f7:fe:a5:94:4c:62:71:80:2f:60:85:36:f0:20:04:fd:47:d8:
ea:81:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:09 2025 by rpki-client