Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YvIqyEsg93ExHWJ4ZUumvULBiSA.roa
File: YvIqyEsg93ExHWJ4ZUumvULBiSA.roa (raw, json)
Hash identifier: QJ+zcF5NWdMysYjoIr+Z62DLSZpjJRuHqqddKi0eTB0=
Subject key identifier: 62:F2:2A:C8:4B:20:F7:71:31:1D:62:78:65:4B:A6:BD:42:C1:89:20
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3394
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YvIqyEsg93ExHWJ4ZUumvULBiSA.roa
Signing time: Mon 10 Feb 2025 13:51:33 +0000
ROA not before: Mon 10 Feb 2025 13:51:33 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13204 (0x3394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:33 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=62F22AC84B20F771311D6278654BA6BD42C18920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:ac:89:99:d5:6a:70:ca:96:d5:de:82:76:
2d:fb:9e:81:82:2e:2b:59:fe:70:b7:37:03:cf:40:
63:3c:4b:f6:8e:5e:14:6a:b3:c2:3d:25:59:95:30:
c0:56:ef:31:62:27:2b:5a:41:65:3c:5d:ab:0d:46:
64:a3:21:86:49:1a:3e:e0:bf:64:ff:9a:8a:79:9d:
3d:2e:38:1a:07:2a:26:43:08:02:d9:00:f6:c6:dd:
65:f6:2b:97:38:5c:f0:0b:8f:3c:95:74:cb:ad:7a:
7d:b0:44:00:96:f6:86:0d:29:3f:d5:d6:e0:42:36:
83:bf:97:e3:8f:4a:4a:b4:39:30:b5:b0:ab:26:7b:
52:07:80:12:b8:76:46:fc:05:7b:1a:69:ea:fe:06:
3b:60:0a:88:d9:76:08:3b:f0:d4:0c:53:9e:9b:d9:
25:f9:a7:f5:e5:4d:05:b4:6c:df:06:7c:9e:8a:ab:
32:b9:55:12:a8:f9:44:fd:f0:9a:d8:82:06:68:b0:
15:78:26:67:14:2c:b7:66:8e:7f:b6:d2:99:99:27:
e0:46:03:fa:ac:66:72:9b:fc:29:07:7d:45:30:36:
5c:04:18:1d:8f:ca:06:27:7d:0a:34:4a:fe:71:dc:
a1:2a:25:95:be:30:30:a7:65:3d:8b:f1:13:ed:bc:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F2:2A:C8:4B:20:F7:71:31:1D:62:78:65:4B:A6:BD:42:C1:89:20
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YvIqyEsg93ExHWJ4ZUumvULBiSA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.160.0/22
Signature Algorithm: sha256WithRSAEncryption
97:01:eb:79:48:21:27:db:6c:72:34:13:18:39:8e:95:28:75:
c6:6f:b5:6a:aa:0b:48:da:12:b6:d5:7d:f1:ab:af:35:76:37:
77:c6:f8:20:9f:48:6e:70:56:43:b4:3d:e3:a7:00:bf:38:55:
9d:de:5a:16:9a:8d:ff:d4:88:9b:33:07:48:a3:f8:fa:d6:f9:
39:82:35:3e:94:2b:6c:0d:b8:cf:9f:1d:ed:ca:ff:b7:37:e2:
4b:ac:b2:6f:5e:29:37:29:c6:77:b0:a3:e5:10:6f:7e:32:02:
c2:0a:73:1e:76:5b:da:b2:4a:b2:ec:85:d6:9c:5b:7c:e7:8d:
71:93:e4:26:32:13:d6:2d:26:9d:68:24:d3:4a:48:da:8c:f4:
03:1c:d0:bf:42:3e:50:51:4f:83:19:61:62:7a:92:96:4d:7b:
73:38:3a:da:94:f6:2d:a2:75:86:23:01:5e:e7:38:d9:55:ef:
6c:d0:0e:a3:a0:e7:01:24:d2:52:c8:4f:1c:01:51:e3:85:60:
7b:50:85:6d:17:c9:b4:54:20:8e:bf:b9:94:79:46:19:f1:b7:
d4:73:2b:18:05:0d:28:82:ef:1b:e2:ba:bf:fe:f2:45:d9:dc:
ed:b3:ac:fe:7f:00:3f:94:1c:23:0f:a9:15:a0:dd:79:20:c4:
16:96:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:21 2025 by rpki-client