Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N8O_SN4K7jUK3mo9XnCANeRkLuA.roa
File: N8O_SN4K7jUK3mo9XnCANeRkLuA.roa (raw, json)
Hash identifier: rNMP2gpa/GihrGR/Oe7u+sBES96ix3yonlf4J1xGk38=
Subject key identifier: 37:C3:BF:48:DE:0A:EE:35:0A:DE:6A:3D:5E:70:80:35:E4:64:2E:E0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35B3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N8O_SN4K7jUK3mo9XnCANeRkLuA.roa
Signing time: Mon 10 Feb 2025 13:53:36 +0000
ROA not before: Mon 10 Feb 2025 13:53:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13747 (0x35b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:36 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=37C3BF48DE0AEE350ADE6A3D5E708035E4642EE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:13:8c:38:6d:23:b6:ec:c4:32:83:be:3b:
81:b1:52:72:83:9b:51:59:21:62:3a:83:da:53:6b:
51:91:40:3f:01:93:d8:e7:27:eb:2a:80:a7:da:29:
aa:8f:3d:09:ad:b2:86:d0:59:76:36:f0:7d:ab:10:
90:2b:ce:44:81:cb:d5:90:87:be:8a:e6:28:d9:73:
4f:44:f3:54:50:eb:bf:71:aa:94:97:4c:77:3b:c0:
65:55:19:98:f5:d5:d5:2f:e4:74:e6:47:8c:db:20:
0e:42:eb:b7:c9:fc:88:32:bc:bd:78:55:2f:17:3f:
f8:25:54:d1:0c:22:bc:9a:af:f4:0f:53:2a:88:9d:
57:ee:e1:cc:0c:b4:d0:9a:b8:0c:0a:72:ec:bd:f3:
c2:26:7a:f8:40:63:f7:c8:03:a1:61:db:28:b0:00:
37:b9:0b:8a:b9:37:47:29:ef:fb:60:cb:21:cd:24:
e6:2f:6f:7a:d9:d1:e4:77:96:73:0a:8f:63:3c:3d:
cb:35:d0:5f:80:10:47:ba:89:ac:c4:d8:18:c0:00:
e0:34:54:31:4c:be:e9:24:39:aa:95:24:2a:4f:2b:
a1:14:6c:a6:10:33:1f:d6:7d:c3:29:0c:20:cf:aa:
6c:e2:47:28:79:2b:9c:9b:d7:20:f7:b2:f2:e6:30:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C3:BF:48:DE:0A:EE:35:0A:DE:6A:3D:5E:70:80:35:E4:64:2E:E0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N8O_SN4K7jUK3mo9XnCANeRkLuA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.237.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:55:6a:8d:3a:81:ac:ac:97:f1:2e:c1:92:02:25:73:bc:42:
a7:c5:11:ae:4c:72:14:51:dd:0a:5f:9a:9d:45:7d:90:d0:a2:
ec:33:13:22:95:8e:79:4b:75:d0:06:8d:8b:b9:23:77:8e:14:
e8:7f:f8:8d:5b:db:ee:50:89:af:79:11:68:57:64:36:54:db:
e7:68:7a:97:22:98:67:30:e0:f3:a0:47:22:23:bb:04:2d:8d:
4b:3a:b3:71:85:6c:4f:05:8c:05:05:da:53:13:a8:80:a4:b6:
8c:44:9f:4d:bd:4b:a1:24:3c:b5:c5:1e:2e:2a:68:2f:0a:ef:
d1:a7:88:17:02:e5:94:66:d7:55:05:28:81:37:40:10:eb:8f:
76:09:78:21:69:a4:a2:d2:ae:8b:5f:16:5b:f8:2d:08:14:37:
63:e0:56:5e:ae:0d:28:0c:8e:67:b0:dd:91:d4:0d:f2:10:9c:
e6:c2:4b:c7:5e:b4:6d:58:15:e0:3d:25:62:d5:64:56:f1:71:
59:55:89:39:cb:11:0b:9a:f2:06:b5:f1:c1:c0:ed:c9:fb:3a:
58:4e:6e:85:2b:78:48:be:f5:62:0f:a2:00:54:3e:c2:77:7a:
51:57:92:b4:4d:4c:f4:a8:60:04:c4:0c:47:27:e0:0e:f7:1c:
e6:d9:80:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:49 2025 by rpki-client