Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yd1Umh8PU-v2jGi1Q2ZOxlSaQEw.roa
File: Yd1Umh8PU-v2jGi1Q2ZOxlSaQEw.roa (raw, json)
Hash identifier: E/U4KOSip7MargWbGlAu3sgHMUqn4lXn/L2M+ggEjdQ=
Subject key identifier: 61:DD:54:9A:1F:0F:53:EB:F6:8C:68:B5:43:66:4E:C6:54:9A:40:4C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3643
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yd1Umh8PU-v2jGi1Q2ZOxlSaQEw.roa
Signing time: Mon 10 Feb 2025 13:54:09 +0000
ROA not before: Mon 10 Feb 2025 13:54:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.193.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13891 (0x3643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:09 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=61DD549A1F0F53EBF68C68B543664EC6549A404C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:ed:80:fd:c0:2d:18:1a:98:7b:ac:c8:93:
7e:30:60:68:01:10:87:56:e1:99:bd:c7:83:ae:ec:
7f:18:9c:db:45:79:13:f9:86:64:de:e1:6d:42:64:
ec:91:b1:91:3e:d0:14:90:e5:b1:6e:d9:93:50:7a:
29:ac:d7:42:15:f5:05:9c:5a:e7:f3:c8:f0:c7:51:
60:0a:af:6f:43:5a:6f:41:ea:b0:47:61:2e:a0:0b:
64:2e:e7:fa:8c:69:93:34:30:13:4d:f8:91:e3:bf:
00:33:b6:fa:92:75:96:d4:06:c7:c0:47:74:4b:ac:
4e:7c:aa:8b:3b:8e:9d:6f:46:ff:bb:a1:a8:52:bd:
e1:d3:4b:9e:21:06:88:87:d5:e1:99:f0:7f:d6:82:
31:66:88:b4:0d:81:99:9d:f3:b6:89:05:22:a7:d1:
be:4c:3b:2e:f5:f0:4b:54:18:99:c9:51:a6:4e:ed:
6f:d1:58:a4:1d:9f:f3:8f:31:e5:78:81:37:d0:60:
c2:06:5d:d0:88:1a:13:85:9d:2a:9a:54:f3:60:46:
7d:54:23:d6:4e:fb:23:96:78:d1:aa:be:a3:33:15:
02:36:52:dd:51:2a:54:cb:10:f2:78:e7:55:46:78:
07:9e:9e:40:84:75:ec:05:ed:1d:83:a4:62:bb:1c:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DD:54:9A:1F:0F:53:EB:F6:8C:68:B5:43:66:4E:C6:54:9A:40:4C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yd1Umh8PU-v2jGi1Q2ZOxlSaQEw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.0.0/18
Signature Algorithm: sha256WithRSAEncryption
06:fa:98:97:b5:7e:da:e3:87:0f:c1:ac:9c:ae:c7:ff:c7:9b:
3c:7f:86:77:44:df:69:14:ab:d4:f7:98:54:49:ad:db:77:7d:
c9:f4:e4:5f:56:cf:f5:13:f4:6c:1f:5c:94:fe:3b:b3:49:b1:
33:4b:cb:36:ba:17:97:89:cf:62:e4:59:78:6c:b3:8e:b8:be:
e5:32:a7:78:73:ab:df:63:ff:d8:38:b4:48:b8:34:7b:3f:af:
16:3a:cb:6b:d0:48:a5:7c:46:bc:3e:1b:c3:e2:b9:f3:c2:d3:
cb:03:bd:35:23:f8:31:1f:03:98:62:38:b6:40:a9:6a:d5:e6:
ce:53:ff:29:d8:0f:58:ae:4f:d6:3a:88:ee:3b:ac:f8:c7:49:
b6:ee:fc:5b:df:6e:58:aa:98:84:e6:38:f5:1e:bf:01:43:43:
68:a6:78:5a:d3:77:4b:55:57:e9:a4:6f:68:41:f9:46:a3:ec:
e7:33:b3:00:68:60:3c:ff:eb:d9:20:30:9d:02:b0:ab:8d:e1:
d8:c3:ff:7c:bf:28:ba:84:eb:3e:29:0f:de:4a:03:cc:60:63:
b5:ef:fc:db:11:ac:11:08:5e:a3:a2:d2:04:d1:37:f6:c8:8a:
dc:c8:e0:1b:92:29:6c:b0:18:4c:cd:dd:c2:06:39:59:7d:c3:
d4:57:f9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:49 2025 by rpki-client