Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xzaxmj1yMQ4_WGuOCYCuEUTN6eE.roa
File: Xzaxmj1yMQ4_WGuOCYCuEUTN6eE.roa (raw, json)
Hash identifier: 8cBtlV30j71GxDn5L6zCcG+XnM+pLxpoPM6ewF+yu0g=
Subject key identifier: 5F:36:B1:9A:3D:72:31:0E:3F:58:6B:8E:09:80:AE:11:44:CD:E9:E1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33AB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xzaxmj1yMQ4_WGuOCYCuEUTN6eE.roa
Signing time: Mon 10 Feb 2025 13:51:39 +0000
ROA not before: Mon 10 Feb 2025 13:51:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13227 (0x33ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:39 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5F36B19A3D72310E3F586B8E0980AE1144CDE9E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:82:7a:0e:15:ad:aa:ed:e5:70:ba:cc:2a:
f0:06:6f:03:a4:4f:77:41:cb:0a:58:2f:88:86:9c:
ec:4c:f0:24:a3:e3:ee:78:bf:d1:b5:0d:60:e5:28:
cf:ba:3c:4f:c2:ec:4f:e9:11:af:94:5d:a4:a1:43:
72:c4:8d:c4:ee:fc:f7:4f:99:85:ac:dd:4a:98:be:
3a:2a:50:3d:af:c0:ae:bc:6d:ed:17:d7:9e:f1:40:
71:4b:3d:28:75:e2:58:44:02:54:eb:12:35:9c:8b:
a3:ca:1c:60:8c:59:f5:18:4c:40:46:5f:6c:38:30:
20:08:a5:ac:cd:f9:df:cd:ed:ab:59:89:1e:b1:6b:
1f:f2:de:88:be:b8:b1:4d:79:18:a2:27:de:53:46:
38:6d:1f:98:87:cd:1c:0d:f9:fd:de:85:ff:48:c6:
5b:10:c3:29:2a:12:bc:eb:b4:b6:93:da:ff:4b:4c:
7f:1a:31:39:96:5a:d2:f1:a2:e7:f6:3e:af:d7:da:
ee:8b:9c:86:a0:6f:67:b1:29:64:f6:39:bf:2d:5c:
6d:f2:05:12:b8:aa:41:38:e8:42:2f:0b:5b:0d:05:
1e:52:ce:5a:cf:a4:c0:d7:60:21:75:8a:59:25:7c:
e0:a7:6e:19:3b:5f:13:83:4b:5d:d3:bd:ff:83:4e:
7c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:36:B1:9A:3D:72:31:0E:3F:58:6B:8E:09:80:AE:11:44:CD:E9:E1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xzaxmj1yMQ4_WGuOCYCuEUTN6eE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.100.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:e7:9e:9f:01:b9:06:f2:a8:46:f3:29:53:2c:e0:3e:d7:06:
0f:bb:3d:6c:ec:c7:2e:56:03:f0:d8:5f:7c:73:e4:fc:00:7c:
da:df:73:f1:53:0f:24:e6:ca:1c:48:db:67:22:09:b8:2a:8f:
83:3f:48:18:f6:38:76:39:d2:a8:c9:d6:b1:1f:8e:c5:c4:81:
ea:bf:9b:38:ca:e9:07:ab:1a:e1:96:4b:ab:92:59:13:75:96:
5c:22:c7:79:dd:fd:2c:6e:bf:1f:04:23:26:4e:d6:60:d3:4e:
f0:67:65:05:0b:d8:a0:db:0e:8e:4f:79:7b:46:79:62:e5:90:
cd:62:7e:55:e0:e6:b5:2b:d9:0f:e0:6f:75:94:20:a5:ab:a7:
60:42:58:5e:a4:26:a2:a6:f3:a0:82:6d:e1:b4:17:09:0f:db:
41:3a:fa:0c:e0:27:2d:0e:5c:02:fd:a8:22:e7:83:a8:4c:a8:
8c:ad:15:8f:ba:87:cb:63:6e:b1:f0:28:c6:37:3e:93:0c:4b:
f4:8e:56:be:8f:c1:6c:05:f6:bd:98:d6:e7:67:64:db:0d:de:
7f:2a:89:e3:4f:4d:89:69:f2:36:76:9d:fc:9f:4e:28:92:26:
ed:86:a9:a2:fc:cd:28:b8:c8:aa:7d:7d:5a:ac:f5:38:dc:99:
61:13:64:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:29 2025 by rpki-client