Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VlgSLVqVeD9-iRPi3M9S7HBfSrQ.roa
File: VlgSLVqVeD9-iRPi3M9S7HBfSrQ.roa (raw, json)
Hash identifier: fYU2rn9p4C5I0fQBh4kJ/cl18BTJjJXRO3MTnXO25+Y=
Subject key identifier: 56:58:12:2D:5A:95:78:3F:7E:89:13:E2:DC:CF:52:EC:70:5F:4A:B4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3376
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VlgSLVqVeD9-iRPi3M9S7HBfSrQ.roa
Signing time: Mon 10 Feb 2025 13:51:26 +0000
ROA not before: Mon 10 Feb 2025 13:51:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13174 (0x3376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:26 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5658122D5A95783F7E8913E2DCCF52EC705F4AB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:f3:f8:72:b1:23:f3:b8:f3:4d:3b:25:14:
1e:85:4e:79:b7:3a:a4:22:b0:5e:ba:01:1a:5b:d5:
37:67:8e:ab:de:19:99:dc:3e:f8:12:db:ed:bf:4c:
fa:18:e0:a6:7d:33:9f:fe:75:30:9a:47:f3:45:66:
2f:65:28:46:a4:6f:2c:d1:9d:b2:67:af:b4:88:90:
14:7d:64:55:2c:0d:cb:c8:b7:bf:bb:e3:dd:b5:8b:
80:a4:91:1e:40:b8:39:3b:ab:a7:7f:8f:fc:fd:4e:
dc:87:fe:72:c2:8b:12:1e:43:e6:72:11:0c:05:05:
9d:61:83:2f:b1:11:0e:eb:01:f2:a0:b5:c9:3d:fb:
ec:8f:3a:e7:a4:c4:ee:ec:ac:34:4d:69:10:e5:7b:
d6:4a:bd:45:15:b2:74:35:0f:fc:8c:2a:90:4e:6b:
67:d6:d1:7f:31:de:ad:5d:84:82:65:a2:c1:e2:66:
3f:18:31:97:df:40:1a:69:5d:10:6e:e3:c8:aa:be:
76:09:32:41:f0:1a:9e:d2:7b:a7:5c:c7:db:b0:bb:
8a:02:9e:b2:34:94:4d:2b:0c:d6:91:1b:c7:62:91:
52:be:97:cd:5d:e5:88:f1:b1:a5:fe:8f:24:a5:d9:
12:1a:a6:d5:d0:7f:a7:13:e4:63:ae:63:37:86:5e:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:58:12:2D:5A:95:78:3F:7E:89:13:E2:DC:CF:52:EC:70:5F:4A:B4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VlgSLVqVeD9-iRPi3M9S7HBfSrQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.112.0/21
Signature Algorithm: sha256WithRSAEncryption
18:38:e0:a3:98:ee:28:40:85:4d:5f:ef:2c:5c:2a:fe:29:ea:
e2:79:4d:5b:19:44:2e:26:22:2a:67:51:c7:13:80:3d:57:9c:
19:4c:4f:cb:3a:f4:46:9d:2f:00:e6:78:c6:3b:a5:4c:da:6c:
2e:19:be:78:ad:db:cd:00:fb:93:ed:70:f3:14:ac:b2:e9:db:
ff:18:a6:73:60:92:08:6c:5c:a2:9d:eb:c8:c1:da:6d:23:6e:
2e:08:e5:f5:15:fc:5a:1c:84:01:e9:72:77:2f:1f:44:98:ed:
35:b8:95:3c:99:0e:ed:be:02:27:44:14:d4:59:26:ed:fc:f3:
e9:19:c5:e6:61:76:82:ce:dd:28:cb:b4:e3:00:b7:e0:0d:7f:
48:77:03:66:61:b6:92:a8:24:7c:f0:bb:18:69:e0:6b:2b:31:
c2:3c:0d:31:31:6f:d1:2a:79:51:cc:c9:f9:27:85:ca:82:29:
fd:78:4a:99:42:4a:12:b0:00:3b:5f:6c:37:c8:2c:af:37:11:
df:41:de:17:74:1e:3f:be:5c:0a:6c:5f:ff:f8:50:9b:87:19:
8a:ba:30:fb:f4:7c:8d:bb:89:7d:f8:c9:06:88:90:7a:ca:0b:
bc:a3:76:84:d5:be:bc:b5:25:09:79:f1:72:fa:cf:62:34:a3:
12:fb:e6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:26 2025 by rpki-client