Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zqm-FAwR_w26v1ezs8foWtpJFwA.roa
File: Zqm-FAwR_w26v1ezs8foWtpJFwA.roa (raw, json)
Hash identifier: /cqWTpU+VDriAy5sZUtDujjikiTVlFfMo0nVI9r4ctE=
Subject key identifier: 66:A9:BE:14:0C:11:FF:0D:BA:BF:57:B3:B3:C7:E8:5A:DA:49:17:00
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36B3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zqm-FAwR_w26v1ezs8foWtpJFwA.roa
Signing time: Mon 10 Feb 2025 13:54:35 +0000
ROA not before: Mon 10 Feb 2025 13:54:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.194.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14003 (0x36b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=66A9BE140C11FF0DBABF57B3B3C7E85ADA491700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:0a:2e:00:6e:c2:4a:65:e9:7c:ef:67:9e:
b6:14:d8:9c:cf:9f:49:30:6f:4a:c6:ab:de:b5:ff:
8a:ee:55:7b:c9:fb:3a:1c:3a:48:90:0f:6e:e8:ad:
05:99:4b:62:26:ae:3f:d7:77:33:35:b9:23:60:fb:
f3:bf:b5:9e:82:4c:6b:a9:cb:9a:5c:d7:29:db:a1:
fa:83:5d:4d:b5:05:05:e6:58:af:24:95:05:ff:cd:
c7:32:44:3e:37:6a:57:89:de:f8:75:f9:aa:9f:6b:
0e:62:89:04:84:5e:ae:85:d4:1f:d2:07:8e:27:87:
6d:76:d7:02:60:fe:34:e6:9f:98:1f:2f:40:d7:66:
ae:a5:c3:c6:c4:b7:3b:b5:97:e2:7c:fe:18:29:6c:
2d:5f:91:90:9a:f1:36:fa:43:74:86:ff:b5:b4:1c:
d7:ec:76:05:e4:25:00:1c:d6:3d:97:35:83:84:fb:
4a:a4:6e:3a:f9:22:0d:50:40:04:01:40:b8:86:48:
94:86:81:0b:a0:f9:97:14:cf:57:16:9b:fb:68:8d:
7a:fc:ca:4e:20:75:48:3a:16:f5:44:cb:0c:64:82:
89:bd:b2:00:6c:db:d6:e6:1d:51:bf:4a:03:30:df:
83:78:8c:a1:f0:04:d8:64:b7:dd:0f:e8:9b:8c:7d:
a9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A9:BE:14:0C:11:FF:0D:BA:BF:57:B3:B3:C7:E8:5A:DA:49:17:00
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zqm-FAwR_w26v1ezs8foWtpJFwA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.232.0/22
Signature Algorithm: sha256WithRSAEncryption
95:06:f8:02:08:2c:59:40:79:04:61:fe:9f:4d:44:49:c3:3e:
3a:32:cc:62:9a:65:e6:bf:10:08:9d:32:a4:07:a9:0c:91:8b:
5b:93:bb:89:fc:17:5b:e6:92:87:25:38:fb:bb:2f:28:cb:d5:
0f:c8:f2:71:fc:07:91:30:21:0a:be:02:e6:69:3e:f5:a4:02:
64:64:fc:89:da:29:88:85:88:48:6a:cf:a3:e5:8c:fb:cb:07:
75:a3:2c:cd:ce:be:ab:d0:18:50:2a:db:6a:13:46:b4:3f:d9:
cc:52:6f:38:71:0e:3f:fb:5f:13:52:27:3a:b6:f2:b6:c1:f0:
c5:b9:7c:60:11:4f:53:47:e2:e8:ed:c3:2d:01:29:61:a7:03:
02:44:66:92:9b:db:65:8a:f1:68:ff:01:3c:55:89:ce:35:80:
83:bc:44:8d:62:18:09:28:78:49:c0:ad:75:83:af:3b:e9:24:
73:53:29:e8:cc:31:24:6c:14:aa:f9:a8:24:a8:e9:88:f8:c1:
3e:cf:7e:bf:6a:b8:a5:89:20:12:62:d4:32:95:f5:d3:d6:e1:
dc:5f:a4:81:b0:3d:ed:3b:d1:7c:ee:b1:56:7f:60:0b:93:4e:
07:b7:0c:4f:2e:60:04:fb:d5:2b:f2:55:aa:66:4c:a8:8e:6e:
92:cb:c4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:26 2025 by rpki-client