Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JT08bU4JgenTl_QlqPRGEqEdu9o.roa
File: JT08bU4JgenTl_QlqPRGEqEdu9o.roa (raw, json)
Hash identifier: EUlV9ML6Zm9hwfsAoUNJY7kaBh2pjaxVPF3DH2US12U=
Subject key identifier: 25:3D:3C:6D:4E:09:81:E9:D3:97:F4:25:A8:F4:46:12:A1:1D:BB:DA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3693
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JT08bU4JgenTl_QlqPRGEqEdu9o.roa
Signing time: Mon 10 Feb 2025 13:54:27 +0000
ROA not before: Mon 10 Feb 2025 13:54:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13971 (0x3693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=253D3C6D4E0981E9D397F425A8F44612A11DBBDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:13:b8:3a:04:e5:20:73:67:48:32:f2:8b:
e7:60:4a:25:b9:cc:22:ae:4a:6c:ec:7f:7a:4d:c7:
cd:13:fd:41:1c:99:4c:b6:6e:b3:a4:cb:e3:41:f9:
d5:74:d2:cc:be:de:d5:2b:89:7a:35:f9:17:61:6f:
21:7e:c8:2e:d4:a3:02:c2:9c:b0:e5:0e:1f:e8:00:
17:8e:24:10:0d:ce:74:c9:93:03:7a:a0:de:d6:8b:
5e:81:1d:72:33:cb:41:8e:7f:7e:c2:8d:11:89:c8:
55:02:ee:22:62:6d:45:43:ba:8b:65:f6:ea:8d:67:
98:3d:cf:0e:1a:2d:7f:96:dc:4f:cc:2b:89:c8:6f:
56:e0:83:e4:9b:92:b4:7e:87:24:24:ff:e9:fa:6b:
36:61:66:2a:5e:c1:19:c4:c4:f3:36:ab:87:f6:a1:
0e:95:1e:9d:b1:c1:ab:88:40:f5:1d:70:34:c9:ee:
f7:cd:30:63:8b:0b:19:9d:23:67:54:6e:a0:13:b9:
18:ab:f1:de:cd:a4:83:51:34:96:85:1d:21:0d:49:
75:64:da:61:2c:7d:66:3b:42:9e:6c:9b:23:14:a2:
80:00:b3:5c:a9:02:b7:2f:5e:4a:1b:81:d4:04:0e:
a1:b3:b4:ac:4a:06:b4:63:d5:e6:fb:51:cb:89:6b:
b2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3D:3C:6D:4E:09:81:E9:D3:97:F4:25:A8:F4:46:12:A1:1D:BB:DA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JT08bU4JgenTl_QlqPRGEqEdu9o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.68.0/22
Signature Algorithm: sha256WithRSAEncryption
04:9e:0f:ee:df:6e:37:0a:78:e5:e9:85:58:df:0e:5b:97:47:
e6:78:ca:f6:4b:2b:c5:15:b0:fc:4d:63:86:01:c6:4d:ab:58:
4a:e7:42:95:cf:03:8c:43:54:71:54:bd:e9:8f:90:15:01:72:
13:92:d8:60:ca:12:98:61:05:f0:20:a3:80:72:f4:74:34:86:
57:e9:8a:40:6f:ff:4f:e1:27:95:68:09:d0:76:1f:1f:80:61:
ab:65:f8:da:d6:14:15:1a:21:2f:7b:4f:fe:7a:6c:c3:ac:3f:
4a:73:75:8e:3a:4c:d6:9d:4f:13:21:11:8f:e0:21:a0:bc:8c:
a3:07:07:bf:89:9b:aa:d1:a9:dc:ef:c0:85:87:4e:23:52:ff:
2f:b6:7f:a2:c9:31:91:da:7e:6c:d9:23:d4:5a:17:0b:a1:69:
d1:90:f8:e8:8a:6c:37:9a:c5:e7:a9:53:c8:1d:24:c4:fd:f2:
7d:d9:da:e9:ad:89:8e:48:26:34:54:d8:60:c7:4c:8f:74:15:
d0:8f:01:b7:26:50:57:18:5f:db:a1:e0:d0:18:11:8f:9e:55:
57:39:1e:88:4d:15:d3:23:9d:b3:41:0c:8e:5f:b1:d6:de:d3:
13:20:63:dc:c9:c1:7f:0c:1a:56:28:ac:8a:1b:f1:cf:fb:60:
6b:33:8c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:11 2025 by rpki-client