Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ODvbuWeKIGyOUvS3sJE5WPinmFY.roa
File: ODvbuWeKIGyOUvS3sJE5WPinmFY.roa (raw, json)
Hash identifier: u0uUZ0adGz8nUVyVtxVigar5E/RPYhVWrUjEjURvk3A=
Subject key identifier: 38:3B:DB:B9:67:8A:20:6C:8E:52:F4:B7:B0:91:39:58:F8:A7:98:56
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35D8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ODvbuWeKIGyOUvS3sJE5WPinmFY.roa
Signing time: Mon 10 Feb 2025 13:53:44 +0000
ROA not before: Mon 10 Feb 2025 13:53:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.195.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13784 (0x35d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=383BDBB9678A206C8E52F4B7B0913958F8A79856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f5:a6:e8:3a:97:71:ee:11:c3:5f:16:1c:88:
9b:da:a2:3b:c3:f9:ef:7d:bc:21:f3:5e:2e:37:97:
5b:3b:c1:b1:20:3f:43:11:98:61:43:ff:46:70:bb:
ab:04:4f:b1:73:06:ca:9b:d5:4e:0e:4f:4c:62:a0:
27:da:02:2e:15:d1:85:c4:b0:58:18:e4:d5:c0:ab:
d0:a6:c5:82:15:ec:fd:31:39:87:5d:61:91:b2:d6:
7b:6e:f9:7c:b8:10:50:e0:7b:35:f5:dc:ca:98:7b:
8b:00:f2:a6:e5:ae:58:9a:3b:b5:70:4f:0b:2d:53:
c2:d0:b6:1f:71:b0:cc:7c:8c:79:eb:f2:24:cb:b2:
1e:90:b3:88:8f:46:b7:e8:ae:00:9b:1b:06:30:85:
47:dc:81:f1:24:62:f3:c7:df:3f:ad:53:ca:55:27:
05:dd:52:d9:a1:4d:f8:c5:bb:32:6c:fd:84:02:10:
0f:e7:46:d0:b2:13:84:2f:ba:74:d2:4c:22:ac:2c:
e2:62:df:4c:30:58:50:29:0c:e2:b1:d7:d7:9d:8d:
c8:26:e9:44:a4:70:43:d2:34:73:45:16:16:79:a9:
c4:22:e5:9e:93:6c:fb:7a:bf:c7:12:88:e4:e4:b0:
f7:20:0c:ed:29:ec:af:b2:32:fc:e8:f1:b6:0d:5a:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3B:DB:B9:67:8A:20:6C:8E:52:F4:B7:B0:91:39:58:F8:A7:98:56
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ODvbuWeKIGyOUvS3sJE5WPinmFY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/18
Signature Algorithm: sha256WithRSAEncryption
14:d7:67:28:86:c9:c2:36:bf:ba:b1:4a:57:27:e6:ef:b9:5c:
1f:1b:aa:b9:27:35:7d:e9:31:cc:93:36:54:5b:2e:14:33:f3:
1d:66:2e:8b:92:92:ed:0e:2f:85:17:10:67:c3:c9:8c:6e:64:
29:39:6b:bc:bd:ba:d4:5b:e5:dd:27:9a:b1:be:d0:b7:e7:3d:
3f:04:96:f5:79:70:64:be:ee:f8:1c:2c:b9:50:c7:a8:03:c8:
8b:6a:27:f8:dd:8a:83:29:1f:22:76:11:14:6a:40:3b:4c:a6:
c0:f2:64:87:1a:9d:5e:c8:cc:11:f8:98:6b:fb:0b:ce:62:35:
36:02:bc:33:c8:55:d3:a9:fd:50:3b:40:44:43:f4:2a:6b:a3:
49:75:bd:45:fc:0b:a5:b5:bf:55:f8:8f:fd:f4:7e:35:f8:39:
4b:c5:11:80:ce:6f:ab:fe:b2:78:a3:5a:d8:48:70:b0:66:5c:
0a:72:ca:13:fa:05:df:51:6d:27:39:a2:e9:ae:6f:d8:d4:f7:
3c:ec:e6:c0:4a:48:6f:05:d7:db:62:82:c7:30:e2:4d:bb:8d:
47:40:56:eb:6d:9a:19:50:15:dd:df:07:4e:de:2a:9a:b2:aa:
43:21:89:a2:c0:43:f9:af:06:84:56:99:a6:a7:51:38:d8:78:
c2:c2:df:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:10 2025 by rpki-client