Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZnvEVNbBROSgt5noyUgP7y0gEQI.roa
File: ZnvEVNbBROSgt5noyUgP7y0gEQI.roa (raw, json)
Hash identifier: wSaH346ZrpHtZxzTgQM17YQTYgeG1nH/kgCZLAbOJGY=
Subject key identifier: 66:7B:C4:54:D6:C1:44:E4:A0:B7:99:E8:C9:48:0F:EF:2D:20:11:02
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34F5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZnvEVNbBROSgt5noyUgP7y0gEQI.roa
Signing time: Mon 10 Feb 2025 13:52:51 +0000
ROA not before: Mon 10 Feb 2025 13:52:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13557 (0x34f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=667BC454D6C144E4A0B799E8C9480FEF2D201102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:ed:5a:71:c5:d3:7d:9d:c8:ca:74:01:e6:
2f:99:c8:19:7b:53:2e:5e:52:3b:08:c7:89:41:57:
b3:d6:41:26:53:0c:51:72:fc:94:3d:00:fc:fb:c7:
bd:1f:2a:e1:70:70:0b:ba:42:8a:9d:b9:0d:05:32:
ba:66:9f:24:2e:2b:a1:2d:23:3f:1e:b4:66:85:e8:
92:0c:7d:48:07:e0:b4:47:37:65:8b:28:04:3e:f4:
6b:42:ef:9d:c6:da:91:1c:36:96:aa:6c:83:bc:d5:
27:d5:a2:61:dc:0a:c7:05:a9:35:61:1f:21:46:64:
0d:b2:0b:ca:ef:2f:59:9a:93:49:f8:dd:af:83:39:
6e:56:18:14:41:78:0a:fb:32:f1:75:23:f3:09:de:
dc:d8:c1:f6:2b:25:c9:9a:ae:c4:98:ea:70:cb:68:
ad:fa:f5:74:83:0d:1b:e7:2c:75:e7:85:bc:01:9d:
59:fb:5a:5d:10:27:72:87:8b:08:4e:ab:eb:5c:43:
1b:ab:eb:d3:87:50:fc:06:69:32:11:ba:6a:dd:4b:
5b:c5:9f:69:62:bc:97:bd:2a:39:dd:0d:a4:68:61:
b3:7d:9c:ee:ea:d3:cd:e5:d8:c1:5c:df:1b:e8:c1:
54:bb:08:06:6f:ec:bd:18:48:77:6b:7c:6a:c7:49:
97:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7B:C4:54:D6:C1:44:E4:A0:B7:99:E8:C9:48:0F:EF:2D:20:11:02
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZnvEVNbBROSgt5noyUgP7y0gEQI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.148.0/22
Signature Algorithm: sha256WithRSAEncryption
57:aa:90:8c:08:26:3b:7a:f2:6c:79:23:19:10:c5:0b:db:e7:
01:ec:31:f9:47:db:65:18:64:1e:5b:e9:9d:ec:e7:0d:fc:ba:
eb:03:2e:10:30:22:c4:47:a9:d1:4c:6f:97:22:06:5a:c2:96:
12:ba:3e:9f:62:f1:a7:75:43:20:27:f7:23:eb:2c:81:24:e1:
ea:5c:6a:8f:26:52:48:14:3f:e1:2e:f7:7a:74:e4:79:48:a3:
7d:43:c5:e4:8e:37:82:a0:64:c2:90:d4:75:1e:ed:4e:c8:42:
47:e0:fc:88:65:e0:ab:16:88:ce:ba:6f:dd:be:fb:a8:cb:91:
6b:ed:6d:25:e7:c3:11:ba:e1:cc:9c:70:cf:52:4f:99:4d:3d:
b5:29:51:54:6d:5a:96:71:a8:45:83:2e:42:80:b5:11:66:ea:
03:cd:82:08:65:7b:eb:f4:d5:82:b6:0f:f4:7b:39:4f:53:9b:
c9:c6:34:51:8f:c5:90:da:23:97:5c:cc:8c:b2:53:07:0d:98:
37:e6:55:29:7d:aa:80:e5:cb:fe:08:77:87:3e:85:97:a4:17:
9e:63:59:97:3a:88:42:2d:5b:5e:53:7d:44:2a:df:0b:76:5f:
5a:0f:a9:bb:45:ba:47:82:40:42:51:20:af:de:4a:69:4f:74:
4b:3b:3d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:03 2025 by rpki-client