Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ol8is1lCcsii7VosLF_vlSo52zE.roa
File: Ol8is1lCcsii7VosLF_vlSo52zE.roa (raw, json)
Hash identifier: ogSqHg+k5xSjNMzO196+QcS8iAlUuko9I8JdomrIOoo=
Subject key identifier: 3A:5F:22:B3:59:42:72:C8:A2:ED:5A:2C:2C:5F:EF:95:2A:39:DB:31
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3532
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ol8is1lCcsii7VosLF_vlSo52zE.roa
Signing time: Mon 10 Feb 2025 13:53:07 +0000
ROA not before: Mon 10 Feb 2025 13:53:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13618 (0x3532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:07 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3A5F22B3594272C8A2ED5A2C2C5FEF952A39DB31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:20:fa:83:ad:b5:8f:89:a4:6a:96:2f:b7:
08:f3:52:78:28:0c:0c:13:ab:a9:ec:97:61:d4:64:
0b:f4:c3:e9:cd:0f:13:a7:41:a3:48:b5:29:0e:6f:
b1:2e:42:82:cf:ee:0b:94:1d:ae:42:e4:bb:21:6d:
33:58:63:e8:de:fc:08:30:3c:0b:42:a2:df:ed:28:
ad:22:ac:90:a7:e4:0e:53:a7:0b:52:f5:8f:ab:c9:
0a:7b:60:42:dc:a0:f0:10:c6:6f:2a:a0:fe:39:66:
54:2b:dc:0e:ce:cf:16:0a:8a:e6:65:35:9c:f3:d9:
26:67:48:93:a8:d6:71:ef:fb:ad:7e:04:0d:e3:81:
9a:0c:ac:d3:ef:00:c3:9c:ad:b7:a1:a4:22:05:d9:
5d:79:ba:f6:14:98:bf:0a:ba:aa:32:97:1e:d1:63:
4d:d8:01:f2:01:f3:e5:de:0b:2a:5b:40:a1:a7:92:
53:19:50:1f:a8:c9:cb:5b:c9:c9:c9:b1:13:47:fb:
c1:3c:a0:26:3e:aa:88:e0:a3:e5:8b:f0:ae:61:05:
16:c9:ad:8e:ec:f1:f9:00:be:2f:69:a4:41:ac:75:
ee:95:66:dc:ab:cc:47:ce:41:a2:41:4e:81:0d:e8:
16:85:e6:8d:c9:52:99:61:8c:a8:fa:2f:96:0f:8d:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5F:22:B3:59:42:72:C8:A2:ED:5A:2C:2C:5F:EF:95:2A:39:DB:31
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ol8is1lCcsii7VosLF_vlSo52zE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:56:1e:19:f0:3e:c0:55:4f:46:41:57:fa:ad:5b:fc:c2:ee:
93:49:2d:61:9a:e3:cc:79:a7:7d:62:5d:9a:dc:1a:16:c7:b5:
eb:fd:a8:f3:13:8a:3c:95:31:69:f1:97:58:3c:fa:f1:3c:65:
ed:c1:3e:60:ec:25:ee:9f:1a:2f:a2:ff:90:53:fc:f9:63:16:
bf:f4:9f:8f:2b:1c:be:68:5a:40:f8:77:6b:c4:43:37:21:9f:
82:e0:c3:00:ff:67:26:74:cb:74:73:12:e7:98:1d:e8:1d:5f:
f7:c5:75:13:35:a1:00:2e:52:30:bf:7e:0f:6b:12:e4:d3:91:
cc:2c:78:fb:35:a6:83:b7:4a:15:fd:47:bc:b5:a5:d4:a5:41:
df:70:96:fd:74:8b:5d:34:83:23:04:83:7a:80:4a:ad:42:1d:
ad:1d:77:4f:25:e1:21:2d:c3:96:ec:49:2f:f2:7e:59:3e:b7:
6c:93:82:37:ca:ae:0b:d3:37:ae:76:a8:e5:89:76:6d:a6:ac:
b5:45:e4:83:cf:66:05:e6:62:9e:02:cb:1b:51:da:34:74:13:
80:70:0c:16:66:5d:3a:8c:39:ae:a7:46:fd:de:13:9a:18:a1:
18:ec:d4:0a:18:99:ef:7b:64:62:d1:7a:86:a1:40:e0:3b:28:
c0:0f:2c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:29 2025 by rpki-client