Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RexlGSaxsAiJ1X3UWQmwxO1NL6g.roa
File: RexlGSaxsAiJ1X3UWQmwxO1NL6g.roa (raw, json)
Hash identifier: 4iKE0VDhlSCo9h58cTIQ4DqhI2bI3ELKe7oKSA9QUNs=
Subject key identifier: 45:EC:65:19:26:B1:B0:08:89:D5:7D:D4:59:09:B0:C4:ED:4D:2F:A8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3683
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RexlGSaxsAiJ1X3UWQmwxO1NL6g.roa
Signing time: Mon 10 Feb 2025 13:54:23 +0000
ROA not before: Mon 10 Feb 2025 13:54:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13955 (0x3683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:23 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=45EC651926B1B00889D57DD45909B0C4ED4D2FA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dd:13:35:57:ff:e6:c8:f9:30:92:b7:c7:15:
67:8b:4a:03:44:b2:4c:e0:37:24:bd:9d:dd:a9:5d:
fa:11:15:cb:83:ad:47:3c:2e:75:de:58:98:8a:27:
af:05:20:cc:24:72:99:15:11:b9:ba:eb:4a:83:74:
1b:b8:18:e1:6c:38:b7:35:4e:de:5e:07:08:10:34:
86:18:e2:cd:4c:e7:6f:cc:dc:7d:54:4d:72:b3:e9:
d1:73:cf:9d:9f:ab:63:91:ff:ed:8d:39:14:4a:ad:
4f:82:ee:7e:58:d5:c7:aa:0d:8b:18:2a:90:ed:25:
35:78:e7:18:90:43:3c:df:11:b3:81:05:fe:41:70:
53:49:cc:27:62:98:4f:f4:44:a4:43:b6:52:8a:13:
39:38:43:b8:fe:13:e0:50:c6:80:96:69:b7:39:49:
30:0d:fd:76:1c:c9:6e:89:ac:10:e6:fa:6b:d0:9d:
05:44:a3:d3:3d:f4:ab:0b:8c:7f:73:00:7b:ea:c2:
41:23:27:2c:ab:8c:67:2c:d2:f6:77:e6:e5:7d:bf:
62:25:03:6b:38:41:48:0b:8d:41:46:df:d5:53:e4:
fb:3a:5a:bf:f9:a7:ce:e6:09:74:41:8c:a8:58:88:
64:d7:5c:98:5c:64:5c:ef:b1:ce:f7:99:dd:4f:2c:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EC:65:19:26:B1:B0:08:89:D5:7D:D4:59:09:B0:C4:ED:4D:2F:A8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RexlGSaxsAiJ1X3UWQmwxO1NL6g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:e5:91:9e:37:14:f0:0b:c0:ab:20:3f:b5:de:ba:d3:b9:91:
53:44:e5:40:59:9e:10:b4:98:8f:38:aa:1b:b0:c0:46:7a:5c:
44:40:35:a6:6f:53:b3:bd:bc:2d:73:57:97:26:5b:a9:16:d1:
45:ae:9c:63:26:99:49:d7:6b:e9:c4:0b:d1:f3:80:50:cd:9a:
74:f8:e3:52:58:34:89:bc:53:48:e3:fc:9d:80:fc:d0:98:50:
c9:88:78:28:6e:af:ce:07:b8:c3:97:5e:fa:a9:24:9b:0f:5b:
a3:1d:9c:c8:38:73:0c:10:0e:db:5d:ca:f8:d0:a2:79:5e:b3:
ee:c7:a9:4a:7a:0e:82:86:94:9d:bf:1d:8c:59:04:02:21:48:
71:be:ad:d7:0d:c7:9b:43:57:db:be:0e:46:04:c9:d4:d6:8d:
df:e4:35:dd:91:e2:8e:14:8e:ab:7d:3c:16:f5:b5:17:c0:63:
91:17:04:18:e1:d0:f3:7a:a2:ee:90:14:2a:85:18:9c:b6:f7:
64:c4:89:80:04:4c:38:f2:4a:fb:0b:0f:60:8e:a3:5c:12:50:
52:93:06:d4:e7:a6:f9:e0:34:2e:8a:08:4f:40:85:b0:ad:2f:
f9:cb:32:d9:18:a5:85:fe:db:e7:1a:c9:61:7a:10:98:11:6d:
f4:9a:64:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:19 2025 by rpki-client