Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YGNh0gnIW1SYNcSO9QmKqB_f0uU.roa
File: YGNh0gnIW1SYNcSO9QmKqB_f0uU.roa (raw, json)
Hash identifier: 52YS4GMGFh/bIb+sChpR+/68roPPuQMDzMK3nL8IN0g=
Subject key identifier: 60:63:61:D2:09:C8:5B:54:98:35:C4:8E:F5:09:8A:A8:1F:DF:D2:E5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34F7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YGNh0gnIW1SYNcSO9QmKqB_f0uU.roa
Signing time: Mon 10 Feb 2025 13:52:52 +0000
ROA not before: Mon 10 Feb 2025 13:52:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13559 (0x34f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=606361D209C85B549835C48EF5098AA81FDFD2E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:58:37:48:c4:ca:0d:ca:5a:8a:b4:57:0d:
41:d3:5e:81:d8:0f:c6:89:fd:bd:39:59:59:4b:d2:
c2:8b:ed:81:a9:97:ab:97:3a:8d:20:53:eb:a3:0e:
2a:a1:46:57:ef:08:4f:38:5f:e6:b5:e5:0e:32:df:
f0:6e:24:d4:05:3f:3b:31:5d:b6:a3:c1:e1:90:2f:
a7:00:6d:ba:30:66:86:cb:d2:86:c0:5f:11:96:de:
ef:82:8e:c1:26:c8:b5:02:58:4e:04:47:d3:fc:0c:
57:8a:6d:b5:af:8b:71:47:0e:2b:8f:66:a2:92:41:
43:bf:81:64:5e:62:32:15:7e:32:1b:9b:10:f0:20:
47:4f:0b:bf:36:87:48:90:3f:fc:09:27:5e:ff:66:
9c:2e:42:1c:0b:74:05:56:1f:1b:31:2a:f8:de:6e:
5a:67:76:4b:8d:d0:2f:6b:bd:40:41:d6:f8:a6:38:
8f:c8:f5:0e:ef:0c:84:b2:d3:df:9d:53:c7:8d:55:
2d:3d:62:08:fe:3e:08:12:41:f2:07:e9:ef:cd:b2:
3b:24:88:e4:d0:30:c0:ec:64:3d:35:4c:29:e3:cb:
60:79:57:fd:fd:b9:fa:f6:1a:2f:fa:31:61:96:86:
54:0c:aa:4b:d0:e3:b9:9f:05:8d:40:64:cc:b0:c2:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:63:61:D2:09:C8:5B:54:98:35:C4:8E:F5:09:8A:A8:1F:DF:D2:E5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YGNh0gnIW1SYNcSO9QmKqB_f0uU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.244.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:ca:41:6b:8c:45:1a:b9:95:17:36:bd:f2:ef:df:b0:a1:2d:
99:0b:78:c6:84:37:76:9d:e4:24:bd:5d:2b:0a:5d:6b:58:30:
b9:25:df:83:c4:c1:30:dd:9e:fd:b6:6b:f9:66:13:e6:f1:39:
11:22:eb:a4:91:97:77:8d:ff:4b:a6:44:cb:f6:78:bb:22:f9:
4f:fb:53:4d:b4:79:87:19:d5:b1:c9:f0:99:84:50:45:ce:0d:
db:fe:51:1c:dd:ce:81:77:0d:13:61:6b:06:d6:ae:57:19:04:
98:97:63:15:27:02:66:7d:5f:49:89:16:5a:3d:7a:17:60:f3:
6b:b9:0d:ed:6b:ff:ce:8a:82:b6:21:26:62:45:d3:80:80:a5:
ce:31:57:d5:51:03:de:0f:29:4f:d4:3d:70:a0:ab:e0:1f:88:
bd:f5:e0:65:25:d7:2e:5b:04:4b:ff:fd:73:b8:3e:57:a5:e9:
82:a2:5b:3b:66:39:47:ba:9b:19:c7:3a:a8:66:6f:78:e0:84:
1a:01:8a:bb:01:a5:67:21:7f:14:36:0f:da:00:ae:50:e6:86:
5b:e6:f1:c0:02:a2:1e:a9:49:fd:31:e7:6d:7a:ea:8e:30:52:
bc:78:5d:72:0f:07:d8:eb:78:32:a5:83:b3:7d:67:c7:01:6c:
4e:e6:4a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:27 2025 by rpki-client