Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X0UzYcp13O6KZWV7ivfl--Ph3XM.roa
File: X0UzYcp13O6KZWV7ivfl--Ph3XM.roa (raw, json)
Hash identifier: ULHWk0eu/dT59KTRhNotmAz9HGMRhDohnQ37QUWYwzk=
Subject key identifier: 5F:45:33:61:CA:75:DC:EE:8A:65:65:7B:8A:F7:E5:FB:E3:E1:DD:73
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35C0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X0UzYcp13O6KZWV7ivfl--Ph3XM.roa
Signing time: Mon 10 Feb 2025 13:53:39 +0000
ROA not before: Mon 10 Feb 2025 13:53:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13760 (0x35c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:39 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5F453361CA75DCEE8A65657B8AF7E5FBE3E1DD73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:87:26:03:ad:9b:2d:b6:d8:c0:40:bb:50:
71:fe:d0:5e:50:54:48:8f:a0:47:d4:be:0b:cd:8b:
f9:ff:6a:89:78:bc:00:ec:7a:a7:94:8c:a8:66:37:
e6:25:de:a7:67:05:70:eb:8d:ea:a9:47:d0:2e:47:
75:28:ce:13:58:76:06:ae:3e:f5:8d:62:d4:aa:49:
a4:c1:88:40:ef:e5:fa:5e:a9:82:b7:6d:c3:45:d8:
d4:98:f8:5d:77:f7:e2:98:d1:9e:5f:17:c3:d4:59:
ce:9b:01:f0:f5:e0:91:8b:2e:cb:20:e0:52:08:4e:
6d:3a:c9:6c:b5:c6:e4:c4:44:11:8e:99:d4:a4:52:
33:6d:71:c5:02:63:15:f4:fd:4f:76:9b:e3:a1:b1:
33:57:d7:71:77:2f:5e:31:2b:e2:5d:96:9c:d7:6a:
b3:c1:75:28:f7:42:a2:e4:cb:3d:fe:36:c3:0c:37:
c6:14:30:89:9b:55:ad:eb:5b:56:ed:da:a0:64:d2:
48:f9:df:30:a3:a6:f2:42:4d:a9:44:ff:4f:72:8b:
c0:0f:8f:ee:83:fc:aa:2a:bb:f7:ba:21:49:58:dd:
97:0c:cc:b6:b1:11:90:c8:25:54:af:74:51:69:54:
1a:37:ba:50:db:9c:3d:07:68:e9:3b:c3:95:52:63:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:45:33:61:CA:75:DC:EE:8A:65:65:7B:8A:F7:E5:FB:E3:E1:DD:73
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X0UzYcp13O6KZWV7ivfl--Ph3XM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:f6:b0:82:b6:4f:14:6a:0b:7b:ea:5f:fd:a1:a0:a6:42:01:
14:ce:b5:b2:d6:2e:97:d1:96:2c:5c:3c:d1:15:96:b8:98:86:
a9:67:e2:84:57:94:fb:24:33:f4:23:10:95:d7:62:dd:3d:b8:
57:9c:63:81:e3:a4:84:fe:0c:b5:3a:86:1a:56:f5:f3:55:a2:
fd:3a:2a:52:ed:fa:e8:cf:5f:dc:5c:5b:f0:86:ad:35:94:fe:
5e:3b:97:cd:6f:ce:f0:86:43:02:7d:d5:f8:8c:e0:43:dc:a3:
98:12:55:92:af:78:14:c5:7f:7c:1b:d2:1c:09:49:8d:f3:a0:
82:82:26:a1:da:3f:38:9b:0a:5b:3f:6e:dc:31:53:ab:57:7d:
a4:3c:73:8f:f0:15:31:78:43:82:cf:87:23:e7:b6:0b:0c:8d:
b2:01:88:fd:68:09:50:76:d4:50:21:0c:4a:cd:cc:24:8a:39:
ff:91:84:fa:19:2b:99:75:c9:4a:69:84:2d:70:31:30:42:9e:
02:da:11:af:55:4b:64:2c:dc:e3:b8:5d:dd:bc:55:c6:cb:d1:
c1:a3:50:a1:9d:75:1d:78:73:fd:36:bb:ef:5e:ec:ad:47:26:
ed:9d:18:6d:9b:38:0c:07:aa:ad:fc:51:dd:be:13:bb:19:ad:
4d:57:6b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:07 2025 by rpki-client