Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JtZ55iyrou-iUhqKMBLJeieDjF0.roa
File: JtZ55iyrou-iUhqKMBLJeieDjF0.roa (raw, json)
Hash identifier: JVPTEcdYJYiyvmItwRN9uqPkDAaR1qlr0d8XGgW7TwM=
Subject key identifier: 26:D6:79:E6:2C:AB:A2:EF:A2:52:1A:8A:30:12:C9:7A:27:83:8C:5D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33AE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JtZ55iyrou-iUhqKMBLJeieDjF0.roa
Signing time: Mon 10 Feb 2025 13:51:40 +0000
ROA not before: Mon 10 Feb 2025 13:51:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13230 (0x33ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:40 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=26D679E62CABA2EFA2521A8A3012C97A27838C5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:e0:0d:37:a0:16:e3:ad:9c:4d:77:74:e4:
0e:59:52:b1:88:cd:67:b9:35:a3:d3:e4:eb:f9:1e:
45:3f:b8:93:de:d8:ff:20:e4:13:42:49:55:8d:eb:
52:fd:1b:2e:c4:4f:99:1f:37:db:3b:c6:07:a7:c1:
86:15:46:f9:b0:35:59:3c:21:62:0c:06:84:df:07:
f9:7e:c0:f2:34:73:5d:87:a6:4a:38:34:a2:0e:9a:
0e:8d:74:7a:22:89:96:fb:18:24:99:9a:76:16:da:
27:81:73:f1:7c:03:49:1a:25:5e:b4:8d:c1:52:1a:
90:f4:0f:5b:29:9e:b0:a8:ae:e7:93:82:52:92:64:
b7:03:b8:04:22:92:c8:b8:42:79:a7:06:b4:32:a6:
94:fc:3b:d6:d1:f7:db:73:cb:8e:48:76:d6:9a:2e:
5c:fc:b4:ba:41:fe:2c:bd:2f:d8:36:e8:4a:33:6b:
0c:e6:af:3e:ad:61:f9:08:4b:49:63:90:22:d8:e4:
91:75:82:3c:36:c2:f3:57:a5:14:29:c6:a1:fe:63:
59:e8:70:4a:45:19:44:34:0e:85:be:22:30:28:b7:
7c:e0:09:13:d7:d4:d4:26:4d:14:3f:ec:83:df:7f:
68:d8:46:f2:52:21:c9:7d:a3:39:5f:35:b3:5d:fa:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D6:79:E6:2C:AB:A2:EF:A2:52:1A:8A:30:12:C9:7A:27:83:8C:5D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JtZ55iyrou-iUhqKMBLJeieDjF0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.64.0/21
Signature Algorithm: sha256WithRSAEncryption
96:bd:ac:0b:e3:3e:e6:de:e9:7a:50:38:40:8b:14:db:2c:6b:
47:57:9e:51:ae:ab:bc:35:62:65:a7:0a:26:1a:11:f7:db:5f:
75:0b:0b:37:64:bc:e7:34:84:1b:0a:14:e2:8f:b2:87:dc:16:
4d:b7:ee:fc:a7:00:ae:24:b1:1d:6b:85:be:ea:7f:1c:9b:b2:
5a:4c:b0:75:7c:9c:25:73:c0:e6:cb:f0:d6:3f:8c:a2:00:ef:
6a:59:58:67:f3:3d:b9:cb:2c:c1:12:f5:8b:fd:cb:92:bb:38:
35:bd:96:e8:fc:35:b7:8e:59:62:31:fa:cb:1b:b6:9e:69:78:
3f:37:2b:9c:8e:68:72:da:36:b5:16:41:be:66:88:d4:f6:7d:
6a:eb:7a:4f:85:97:e7:24:bd:a8:14:a4:92:a1:a3:4b:3d:eb:
38:b4:76:25:18:ba:30:f1:4a:f6:93:05:46:a0:f5:d2:6a:ea:
a9:07:37:46:45:80:ce:03:82:5c:a7:03:66:a5:52:3e:b2:f1:
62:34:c5:dd:7b:f6:6f:1d:4c:84:2b:38:8a:92:34:91:ac:34:
93:f7:44:61:e7:1c:46:32:bf:4c:62:e7:2e:a0:2d:96:ba:5b:
e3:bf:03:99:72:d0:99:2a:1e:75:94:e9:66:9f:6d:f9:36:0e:
a3:f3:85:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:49 2025 by rpki-client