Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lo4pgS-laihdbJA_4Zj_kg681cw.roa
File: Lo4pgS-laihdbJA_4Zj_kg681cw.roa (raw, json)
Hash identifier: xo08I3ClWihKMvr8gBVd4RJMI+VLujDJKVmgisX/f0k=
Subject key identifier: 2E:8E:29:81:2F:A5:6A:28:5D:6C:90:3F:E1:98:FF:92:0E:BC:D5:CC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 367D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lo4pgS-laihdbJA_4Zj_kg681cw.roa
Signing time: Mon 10 Feb 2025 13:54:22 +0000
ROA not before: Mon 10 Feb 2025 13:54:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13949 (0x367d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2E8E29812FA56A285D6C903FE198FF920EBCD5CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:b4:04:cb:bf:ff:7f:31:ec:15:04:e0:bb:
96:dd:96:1f:26:d5:30:04:36:ee:70:a1:de:c2:95:
eb:61:d1:17:22:be:5a:e0:79:b0:67:fa:a1:26:dd:
67:21:61:21:06:8c:ff:67:4b:e0:cb:07:89:4b:a4:
89:68:51:b7:3d:0f:11:b3:15:89:a9:3a:89:ae:6f:
d4:84:3a:25:2b:22:ee:72:31:77:72:7c:14:32:88:
6a:48:06:37:bd:7c:9e:3e:f9:b7:96:b4:3e:93:df:
3d:75:5c:4f:a5:fb:09:41:f2:c7:64:b0:f6:91:5a:
a2:09:3f:5f:da:f0:29:1e:2b:85:65:6e:aa:f4:6b:
4a:aa:71:11:f8:61:2b:da:f1:b4:aa:c0:fb:1f:89:
3d:ce:db:87:7a:39:27:26:4a:00:c6:8c:f9:34:ec:
fe:7a:e7:05:ad:88:57:09:0f:82:5f:38:53:8c:02:
1f:f1:91:63:f0:cb:d6:c7:00:c8:86:1b:d6:d7:10:
76:46:b9:f0:4c:24:87:27:67:4f:ce:dd:18:2f:67:
e8:3c:c2:a5:7e:07:9d:cc:13:b7:30:9c:f9:3a:16:
7a:bd:5a:68:e9:73:54:47:5b:6e:f8:51:cc:a8:29:
91:4f:40:5d:99:5b:fa:d9:b3:56:21:cd:97:54:79:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8E:29:81:2F:A5:6A:28:5D:6C:90:3F:E1:98:FF:92:0E:BC:D5:CC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lo4pgS-laihdbJA_4Zj_kg681cw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.16.0/20
Signature Algorithm: sha256WithRSAEncryption
00:70:6a:c0:18:b2:58:51:fd:3c:58:3e:6f:8d:6c:66:b0:c2:
1c:ec:57:32:49:ae:47:09:a3:f8:00:73:96:f1:cf:9e:2a:75:
58:e5:b5:86:fe:53:07:0a:ae:3c:af:a3:4a:a6:ff:87:ee:dc:
1b:1b:59:4e:37:44:5a:d9:09:f0:b7:83:26:0c:f4:85:d2:86:
1c:fb:f4:a9:84:56:d2:55:19:92:b1:46:f9:2f:ed:4e:16:a8:
16:49:cc:00:34:ba:64:b8:09:da:b9:76:bd:28:33:c5:79:da:
98:e5:2c:f8:43:d6:9e:25:53:3a:1a:48:47:83:15:c9:35:52:
4f:fc:80:35:fd:b0:20:4e:60:5f:b4:9f:f1:bd:85:f4:8a:18:
b4:04:9a:ba:95:4c:6f:57:3f:b1:c6:aa:51:1d:6e:34:1e:50:
ff:df:f0:bc:d8:c9:3e:a5:5c:68:a4:81:ca:1e:7b:4c:70:e3:
8b:9f:64:a6:95:d3:ac:95:99:79:3d:5a:c6:dc:58:49:ee:3f:
df:04:58:58:d6:bc:b2:e0:71:9f:49:50:01:ad:e3:75:c7:5b:
8c:89:f8:0d:d4:f3:aa:99:86:90:82:cc:ca:ee:15:01:07:f8:
4b:43:5e:c9:fa:a3:49:28:8b:e2:37:91:2b:49:58:ea:4e:f9:
98:98:a0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:14 2025 by rpki-client