Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vvgz5l55JtoqebA7-Og5bhtIucY.roa
File: Vvgz5l55JtoqebA7-Og5bhtIucY.roa (raw, json)
Hash identifier: wjueG6qFL761WoZLtQulgLg7oSr4qbDY1qiOTg9+1Y0=
Subject key identifier: 56:F8:33:E6:5E:79:26:DA:2A:79:B0:3B:F8:E8:39:6E:1B:48:B9:C6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34D7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vvgz5l55JtoqebA7-Og5bhtIucY.roa
Signing time: Mon 10 Feb 2025 13:52:44 +0000
ROA not before: Mon 10 Feb 2025 13:52:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.248.0/21 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13527 (0x34d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=56F833E65E7926DA2A79B03BF8E8396E1B48B9C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:f6:de:4a:69:44:18:d2:f6:e4:d5:6a:46:
85:c1:95:2a:c7:8a:0e:bf:e0:87:51:c8:c8:b7:a1:
4c:f8:9e:10:17:ea:46:ad:52:95:2c:f0:ab:ba:72:
96:f2:f8:e2:72:c4:75:92:40:de:aa:d6:a2:ba:b1:
f8:e0:ba:e3:85:79:97:d8:a4:e8:8a:54:4d:e3:89:
83:29:4b:0b:6b:00:f9:2e:c8:14:3e:90:c7:8a:ee:
e2:28:0f:bd:6e:6b:4b:1e:35:37:31:31:86:8d:37:
0e:68:f6:bd:d5:e6:4c:96:25:5a:70:5a:b5:92:a5:
68:8b:65:ef:49:4e:60:03:e0:ea:5b:78:8d:63:1f:
29:f8:d3:ab:aa:b3:60:91:5c:e2:36:8b:e9:41:70:
bb:d9:de:16:e2:9e:9d:f7:29:d4:76:5e:c5:b5:eb:
bb:14:66:89:f0:b1:f9:e6:e7:55:33:29:b1:b3:60:
ca:91:7e:82:01:2b:db:d9:02:a7:0d:18:4a:b3:14:
f6:82:89:3f:e6:2f:f8:13:c2:8f:8b:8e:9e:86:2f:
b0:49:8b:ba:8c:98:f9:d0:2f:47:ac:c0:23:35:ce:
fb:64:d8:48:0b:5f:19:43:34:ce:a3:f8:89:7a:ba:
bc:0d:25:bc:f0:91:2e:95:3e:47:3e:dd:51:25:38:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F8:33:E6:5E:79:26:DA:2A:79:B0:3B:F8:E8:39:6E:1B:48:B9:C6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vvgz5l55JtoqebA7-Og5bhtIucY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.248.0/21
Signature Algorithm: sha256WithRSAEncryption
41:56:c0:0e:ed:9b:c8:61:93:86:94:e8:d6:ba:5e:ad:59:7d:
0d:90:00:64:4a:f3:db:44:b7:3a:d5:e7:2c:41:a4:03:3f:06:
0b:9f:f2:42:88:15:c2:f0:dc:81:7a:89:83:d0:5f:62:75:7a:
83:25:82:8e:e2:07:2e:f2:d2:b1:d4:f5:24:f6:0b:11:3a:84:
65:b8:df:f7:8e:4e:06:ef:e6:3e:84:5e:e4:ce:2f:73:f8:8f:
c7:12:19:c1:d2:a0:f7:ba:56:36:0f:cb:4f:6d:a6:61:7a:30:
6a:48:c9:97:47:9d:8f:51:06:4e:29:2e:dc:19:76:f1:78:9c:
48:23:b9:cb:38:cb:04:3c:d1:26:4f:db:d8:3d:e6:03:c4:d2:
e5:89:d5:d9:20:5c:d6:a7:b6:29:9f:70:95:29:99:44:d7:5d:
83:b3:59:b0:7e:31:8d:80:a1:d3:e7:65:7d:a0:f8:08:1a:b6:
fe:06:81:6e:0c:69:53:55:77:bb:3f:16:bb:c0:ff:41:99:a7:
92:17:79:36:53:49:ea:cb:b5:36:2d:65:f9:7b:88:42:26:c6:
59:18:9f:1e:30:ed:01:f6:bd:c2:19:fa:04:53:75:d8:42:f1:
64:d4:82:28:fb:31:ac:fc:98:4c:b2:57:18:1c:03:56:81:ff:
da:0e:7a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:57 2025 by rpki-client