Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qwgy7K2HB4cEa1LTHgmIF2uk6Ao.roa
File: Qwgy7K2HB4cEa1LTHgmIF2uk6Ao.roa (raw, json)
Hash identifier: z8fjuKx+R3CUtv9pEv42fCHu/1yYDdRgARp2/wnfSbs=
Subject key identifier: 43:08:32:EC:AD:87:07:87:04:6B:52:D3:1E:09:88:17:6B:A4:E8:0A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36E0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qwgy7K2HB4cEa1LTHgmIF2uk6Ao.roa
Signing time: Mon 10 Feb 2025 13:54:46 +0000
ROA not before: Mon 10 Feb 2025 13:54:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.195.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14048 (0x36e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=430832ECAD870787046B52D31E0988176BA4E80A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:88:23:88:cd:f0:94:dc:c0:61:f5:cc:6f:
dd:20:89:39:6d:5e:b4:72:88:bd:5e:1c:fe:66:cd:
d1:fe:74:67:ec:3c:dd:71:15:b7:6e:73:b2:57:45:
f0:f0:de:c8:ce:80:46:d4:47:5e:8a:64:43:be:a9:
fd:dd:7e:96:fd:78:a9:f9:77:b2:1b:08:0e:8c:16:
36:6f:5b:d5:89:2e:07:55:8a:63:bb:31:00:e2:3b:
ad:72:4d:e0:0f:3f:c9:f3:1e:85:85:d6:6e:79:53:
73:fd:1a:85:4b:64:64:c1:66:47:83:7c:bb:bc:80:
17:b9:65:31:ab:28:e2:96:72:b9:19:61:52:94:5f:
4b:0c:52:7f:96:73:7a:27:37:a4:68:8e:56:73:0a:
46:15:a3:08:01:b6:45:a2:88:8f:1b:96:73:11:81:
14:02:06:2a:e5:8e:91:c5:00:9b:c0:92:2c:6d:86:
53:e8:b0:d0:44:cd:76:a4:db:e1:f4:4b:b8:f6:4d:
bf:53:72:8a:fb:fc:06:c5:2b:26:54:54:c6:8a:5e:
7e:a3:45:85:c9:a5:59:51:20:7d:88:f6:95:d8:bb:
87:be:2e:aa:e2:34:ee:89:18:45:8d:67:db:57:5f:
28:9e:01:2c:9d:57:eb:dd:6e:9e:3d:13:3f:83:a3:
0c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:08:32:EC:AD:87:07:87:04:6B:52:D3:1E:09:88:17:6B:A4:E8:0A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qwgy7K2HB4cEa1LTHgmIF2uk6Ao.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:ef:02:de:94:fe:38:e8:46:ca:2e:09:de:53:44:f0:1b:37:
4a:4c:5c:0d:bb:03:6f:c3:4d:57:21:ca:1c:1b:40:ce:4a:1e:
fb:cd:f1:77:c3:b3:b1:83:16:69:89:27:0c:d2:2a:15:7d:1d:
d3:40:aa:d9:07:6a:91:e0:09:da:05:f1:f0:ab:e2:da:01:df:
89:bd:1f:84:a2:7f:6a:48:06:d6:dc:8e:b7:7e:8b:c3:aa:00:
b9:61:e0:90:26:17:4c:9e:34:ef:a6:c3:e9:d9:47:cc:11:6c:
cb:72:0a:68:fa:85:fa:0d:46:1c:8f:a0:d3:2e:03:c2:04:ee:
94:41:57:01:65:fc:b5:8e:8c:16:d2:54:60:ee:8f:9e:ae:de:
72:0d:ed:1e:6b:5a:4a:42:db:47:01:72:62:2f:4e:05:00:de:
c5:2d:61:87:91:33:ce:db:fb:be:5d:f1:a5:bd:d8:db:4f:4f:
b0:c0:53:e0:6a:80:df:9c:fa:b9:67:b6:cc:60:4f:d1:fa:24:
c5:c2:3e:26:35:d7:f4:de:2e:21:55:71:de:ee:5f:b7:b8:67:
88:b3:7d:b6:59:0c:56:e7:07:34:1a:58:cd:ca:7d:86:74:65:
fe:f7:7b:4d:d6:89:ec:3b:8b:7d:59:f6:dd:79:ed:06:ba:62:
c4:68:1d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:20 2025 by rpki-client