Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YAjolhZqRKGG39jramtb35kS278.roa
File: YAjolhZqRKGG39jramtb35kS278.roa (raw, json)
Hash identifier: buZWveI0pZnKaDPI1ySTrmCI++MckCN2yzSbDyOgiuE=
Subject key identifier: 60:08:E8:96:16:6A:44:A1:86:DF:D8:EB:6A:6B:5B:DF:99:12:DB:BF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 343D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YAjolhZqRKGG39jramtb35kS278.roa
Signing time: Mon 10 Feb 2025 13:52:11 +0000
ROA not before: Mon 10 Feb 2025 13:52:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13373 (0x343d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6008E896166A44A186DFD8EB6A6B5BDF9912DBBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:12:aa:ca:d9:74:17:00:da:c0:55:04:b2:a5:
5d:6d:19:6e:40:7f:8b:10:73:6e:38:3b:94:08:3e:
b1:36:d4:ce:c2:a4:69:40:2a:cd:17:1a:b5:e0:83:
a2:89:d6:79:6c:60:2f:d1:16:b7:d1:d8:5e:fd:59:
e8:22:af:6e:4d:dc:a7:d7:82:84:1d:4c:9e:f1:0b:
4e:88:c9:9d:36:63:2d:46:ef:92:06:fb:f0:13:b1:
bf:27:0b:c0:4b:3a:3b:f6:33:f1:b5:ca:57:f8:32:
ba:97:55:ff:d3:82:ea:8c:65:20:6d:dd:b4:91:44:
3a:de:cd:39:92:93:00:66:8d:ba:f4:0f:2f:86:01:
cf:09:8a:1f:bb:f0:e9:c2:3e:50:42:22:c5:0f:18:
d0:ac:8b:ab:86:0b:4c:eb:19:f7:d5:84:9c:b2:81:
ac:e6:6b:22:4c:e4:28:41:78:17:8e:cf:4c:b0:a6:
89:23:c5:39:cc:1f:4a:70:c0:4f:9c:fc:0a:17:4a:
08:df:6f:2f:67:0e:ef:9a:ca:2e:a3:9e:28:46:11:
d9:68:39:02:8a:b1:49:72:e2:fb:3b:d2:84:ee:04:
3e:3c:32:19:2b:21:aa:b4:a1:b3:ef:80:a8:3e:16:
09:94:6f:c9:17:23:92:99:8a:87:10:13:8a:10:c6:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:08:E8:96:16:6A:44:A1:86:DF:D8:EB:6A:6B:5B:DF:99:12:DB:BF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YAjolhZqRKGG39jramtb35kS278.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:b0:6a:62:1f:21:b1:f2:91:aa:7b:89:cd:c5:1f:23:be:89:
16:bf:75:13:49:b6:01:f3:87:32:42:83:1f:5a:10:85:bb:35:
6f:bc:f4:f8:14:9e:10:e4:2a:cf:fe:90:52:dd:c6:16:b6:0a:
51:0b:7b:41:60:da:89:7a:03:e1:c5:03:3f:0d:11:25:30:14:
d6:74:1e:72:30:7d:40:09:bf:60:18:91:4a:17:ad:81:10:d8:
be:cc:89:43:f2:b5:46:d0:7f:6f:c1:44:72:0f:f0:a0:9c:63:
89:d7:4d:35:9d:07:0d:74:2f:13:bf:0c:e9:dc:10:bb:74:bd:
73:b9:96:5d:6f:48:c7:c8:98:9e:fa:48:8e:d4:c5:f6:6b:08:
cb:ca:21:48:d4:34:38:e1:b9:ef:24:65:80:2e:25:9e:b0:f9:
0f:7e:0b:10:55:0d:29:4c:47:05:35:91:bc:0b:9f:50:1c:8c:
e8:90:e7:7e:47:2d:f2:04:67:cd:bb:1e:59:54:ac:8b:f5:5e:
6d:ec:1b:9c:70:3e:9b:2c:b9:a5:c9:70:6b:cd:89:c9:91:56:
1d:d9:07:1f:c8:bd:dc:4d:7e:98:2d:ed:d6:17:c9:e5:4a:e7:
d2:7b:d1:72:6a:f5:82:fa:a0:df:6e:aa:70:7c:ad:ff:f1:4e:
4d:85:56:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:15 2025 by rpki-client