Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Jqlp8_eET6BbBxPgM4mltTBZ9o8.roa
File: Jqlp8_eET6BbBxPgM4mltTBZ9o8.roa (raw, json)
Hash identifier: UkZl4pWC1XZaUBH0mf/bG3OotqsfpDLiZeh7kzd9I7E=
Subject key identifier: 26:A9:69:F3:F7:84:4F:A0:5B:07:13:E0:33:89:A5:B5:30:59:F6:8F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3484
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Jqlp8_eET6BbBxPgM4mltTBZ9o8.roa
Signing time: Mon 10 Feb 2025 13:52:27 +0000
ROA not before: Mon 10 Feb 2025 13:52:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13444 (0x3484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=26A969F3F7844FA05B0713E03389A5B53059F68F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:c7:7d:2c:e6:b0:fc:e5:03:b1:05:66:20:
79:a5:8c:cb:8a:47:6f:2c:77:29:54:22:96:8d:ee:
fa:4a:71:25:32:2b:66:a7:6d:41:d7:af:9f:ee:f9:
83:38:9c:78:b3:3a:ef:17:36:06:70:06:03:56:a5:
b0:e0:48:7e:27:5a:8c:c3:9f:2d:07:b0:b2:99:37:
b2:03:11:91:53:05:f4:ac:e4:46:f8:c3:05:a4:ce:
1f:ad:b0:79:45:9e:ef:be:56:68:07:9d:7d:4b:83:
05:e8:8a:41:9b:7d:1e:25:a4:38:62:d0:d8:6e:b1:
82:1b:30:fd:30:a2:82:5d:9e:19:4a:2b:4b:78:df:
63:57:98:d9:ec:d5:fa:53:c7:22:f3:81:48:67:ab:
ea:20:0d:65:48:96:2d:6f:e1:0f:b2:ce:0e:70:1a:
d7:c0:ab:e5:04:f8:66:96:c0:aa:6e:8b:a6:73:fc:
21:71:3f:67:e0:14:9a:fd:7f:f4:32:7e:6b:95:09:
59:0c:2c:53:ce:cc:fb:73:4e:45:bf:87:81:d4:4b:
54:50:7a:98:0d:54:61:07:02:6c:fb:f2:cf:6c:f4:
bf:c0:8d:fb:0c:40:24:68:60:51:25:34:54:16:c0:
68:63:67:e3:82:16:6c:19:5e:72:6d:2a:c5:88:1a:
96:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A9:69:F3:F7:84:4F:A0:5B:07:13:E0:33:89:A5:B5:30:59:F6:8F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Jqlp8_eET6BbBxPgM4mltTBZ9o8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.20.0/22
Signature Algorithm: sha256WithRSAEncryption
32:5e:48:f1:bb:ed:a0:20:6d:83:d3:65:20:2f:80:d9:1b:9f:
0b:bf:aa:38:e8:29:97:03:c6:db:61:bb:13:ef:cc:0c:e6:d8:
3f:e3:30:fd:b5:aa:d1:b9:77:3c:3f:8f:95:79:bd:c7:dd:b0:
22:19:f3:bf:62:ba:7d:94:76:26:0b:cb:cf:09:7b:1b:00:f5:
40:11:a9:1e:70:a0:58:54:30:88:b5:d7:ec:28:88:c4:91:c9:
25:38:e4:b0:64:07:31:02:19:d6:08:9a:ea:25:07:fa:dd:44:
94:60:f1:65:46:97:f4:55:ec:60:f7:04:35:63:51:a8:5c:68:
e2:1b:fb:40:d5:6e:78:cf:24:c3:ae:a3:a4:f1:32:13:45:f7:
0a:25:20:aa:bc:9c:f9:92:82:68:d0:32:86:99:16:43:0b:fa:
19:06:f8:79:15:ea:34:38:2e:bf:0a:69:57:92:c2:b7:9a:36:
e8:62:71:82:96:ec:2e:7b:dc:19:d0:11:7c:62:9a:50:64:b2:
7d:bb:cb:0d:96:a8:80:08:4e:da:57:2c:46:0f:c0:71:86:68:
81:3e:d1:c6:35:be:33:17:df:9e:94:2e:52:57:0c:6b:9f:14:
2c:df:9c:af:68:f0:a5:2c:00:0d:6a:d5:33:0c:3c:c0:99:7d:
cf:68:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:14 2025 by rpki-client