Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_4clJVYBKdFJUKcEEqlDW6VyJik.roa
File: _4clJVYBKdFJUKcEEqlDW6VyJik.roa (raw, json)
Hash identifier: +anN9gO74k2mZx4FboPS1McUqaov1IaymM5LY6uKczg=
Subject key identifier: FF:87:25:25:56:01:29:D1:49:50:A7:04:12:A9:43:5B:A5:72:26:29
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3557
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_4clJVYBKdFJUKcEEqlDW6VyJik.roa
Signing time: Mon 10 Feb 2025 13:53:15 +0000
ROA not before: Mon 10 Feb 2025 13:53:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.193.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13655 (0x3557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FF872525560129D14950A70412A9435BA5722629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:cd:0a:64:64:b7:1f:61:93:be:89:78:be:
50:a6:ed:76:61:5d:3d:0d:c0:f7:ff:1f:92:ad:07:
76:96:c7:c9:f3:71:23:68:62:2a:48:08:77:56:6a:
42:79:54:61:ba:ce:e6:0a:c7:cc:59:3e:25:11:ee:
0a:14:0f:40:5f:f8:16:7f:e3:17:25:60:02:80:48:
39:27:fb:db:6f:93:12:ed:13:c5:30:5a:2d:ce:7f:
06:af:ca:84:6d:be:73:33:dd:ba:21:45:47:91:4c:
30:e0:71:7c:1f:af:ec:24:38:4e:41:4d:a5:50:d9:
3b:b1:0a:e1:40:6f:7a:b5:47:86:71:06:f5:41:31:
a7:d4:e7:40:19:64:a2:f0:19:10:71:67:9d:d4:ad:
f7:1d:60:30:27:1d:01:c2:99:f4:64:3f:ee:d3:0e:
47:fd:bc:a6:4c:21:94:04:d8:9a:a4:93:e8:cc:5a:
12:07:77:d1:39:2f:f5:b4:3a:e8:5d:4f:da:20:b0:
4c:25:63:c5:45:25:b8:59:e6:56:27:78:22:fd:f7:
e6:6f:f7:ac:5b:55:59:50:ee:f3:a9:fe:a8:8e:2c:
6e:56:71:5e:ae:de:40:2e:c5:1b:cf:7b:b1:c4:47:
64:25:ce:82:dc:03:b5:22:1c:08:63:c5:09:8e:9e:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:87:25:25:56:01:29:D1:49:50:A7:04:12:A9:43:5B:A5:72:26:29
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_4clJVYBKdFJUKcEEqlDW6VyJik.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.224.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:69:35:4d:fd:e0:b3:40:74:6f:82:b1:91:72:54:d5:69:00:
f2:32:03:c5:f5:b4:bc:93:97:49:ef:cb:c0:40:6f:b1:d3:0c:
be:94:95:a9:0f:31:3a:70:77:a8:5c:47:33:5c:2e:e2:3e:9e:
57:cd:f9:bf:96:90:3e:5c:8a:bc:9c:4a:ce:fd:4d:09:d5:34:
cc:b9:91:81:d4:ba:df:f7:50:98:d7:22:eb:16:87:51:1a:18:
4e:61:c5:b7:c6:3c:36:d8:01:4a:a6:af:85:76:47:b4:1f:91:
86:8e:e1:52:eb:5e:6e:ee:2a:39:02:f9:77:e3:b0:31:a1:6f:
a6:73:49:41:cc:85:4b:d2:22:8a:8e:61:97:37:4e:6d:53:5b:
ed:00:b6:3d:28:8c:b5:58:69:65:f5:5b:97:67:b9:d2:36:4d:
8d:ce:f9:1d:f8:0d:38:41:0b:88:d0:dc:d4:80:1f:4f:b9:26:
8d:c3:ba:c9:39:dc:84:1d:20:e7:9a:ab:ea:a9:c6:9a:1f:e0:
e5:0e:be:88:f3:82:19:7d:c4:55:b9:f5:0e:ac:aa:9a:4d:a0:
15:b3:92:13:96:3d:14:21:2f:44:53:a8:13:63:b1:65:ee:7d:
22:9f:39:8b:3b:7a:3f:4d:3d:13:39:95:c8:44:2c:e3:78:9b:
aa:c6:87:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:29 2025 by rpki-client