Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Kbwjyr6a2gBR2Rx6TE_4R1CEmQ.roa
File: _Kbwjyr6a2gBR2Rx6TE_4R1CEmQ.roa (raw, json)
Hash identifier: vh4BsQ2ujdGG3WLHs8AkcbjLqNainpZmzFA8LZiPVZQ=
Subject key identifier: FC:A6:F0:8F:2A:FA:6B:68:01:47:64:71:E9:31:3F:E1:1D:42:12:64
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33DB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Kbwjyr6a2gBR2Rx6TE_4R1CEmQ.roa
Signing time: Mon 10 Feb 2025 13:51:50 +0000
ROA not before: Mon 10 Feb 2025 13:51:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13275 (0x33db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:50 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FCA6F08F2AFA6B6801476471E9313FE11D421264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:34:35:92:c8:37:2f:4e:6d:38:b3:44:82:3a:
b6:df:dc:44:2e:99:cb:04:cc:d5:69:29:25:a0:f1:
38:7e:0d:8b:ed:6e:89:08:0a:75:24:02:5f:ab:c3:
9f:d8:a2:8e:01:4d:d0:21:c5:a1:9e:ea:11:a9:8b:
8a:f3:b9:46:55:9c:8d:09:99:32:a2:9a:ed:3b:1b:
91:a4:47:18:5f:1a:a1:77:b8:e1:f3:57:22:3c:42:
70:4c:98:4b:e5:85:f8:c3:8d:84:fa:18:bf:08:22:
37:74:86:fa:18:cc:b2:2e:a2:5d:f3:f1:98:2a:25:
e3:7c:5f:dd:88:bd:52:9a:f6:91:04:da:20:9e:97:
82:f9:c2:c8:64:a3:7b:a1:7c:f3:a6:5a:b6:65:00:
0f:98:61:94:6d:ab:d6:54:c4:81:6c:47:99:39:6f:
de:e2:33:2a:ca:97:b8:83:8f:40:24:4d:61:dc:fc:
ab:de:60:10:4e:39:f8:73:d1:3d:b5:77:17:92:27:
c0:02:81:f9:5a:30:81:fa:87:26:66:f9:e5:d3:dc:
51:95:d8:73:b1:f0:6d:1d:26:e3:14:73:91:67:31:
9c:45:04:bc:b5:80:65:de:16:b6:81:d2:23:99:90:
20:2c:fa:4f:7c:bd:c0:87:18:68:fa:4c:e6:d5:97:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A6:F0:8F:2A:FA:6B:68:01:47:64:71:E9:31:3F:E1:1D:42:12:64
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Kbwjyr6a2gBR2Rx6TE_4R1CEmQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.104.0/22
Signature Algorithm: sha256WithRSAEncryption
10:fc:b4:e5:c1:8d:2a:1e:f0:98:56:48:3f:61:57:99:22:5b:
49:6b:f5:d6:e1:35:71:f5:56:fb:70:df:6d:ab:f2:5a:2b:2d:
c6:6b:24:30:96:01:54:bb:90:58:77:15:1d:65:6b:38:da:82:
4f:da:76:ec:40:c2:05:8a:10:61:75:1c:b4:7c:72:1a:3b:8e:
d6:a7:ed:73:d3:8a:9a:2d:cf:4f:5d:89:0d:ee:49:45:28:7d:
ce:0a:7c:a2:45:49:92:13:ad:66:5b:b9:2a:b8:e9:85:03:0b:
a0:67:6f:e7:48:c9:10:96:22:ba:5c:ea:88:df:19:cf:eb:22:
3d:22:63:1b:f9:7d:ff:a9:d3:9a:de:91:f3:0d:b1:e5:c3:b3:
16:2c:23:07:0f:73:ed:0a:70:52:28:68:99:0a:6b:41:9d:8c:
c5:a9:3f:fd:e6:56:e8:27:04:92:b2:b0:59:d4:8e:80:73:6d:
2c:52:fb:0c:db:80:ac:7b:34:15:9b:a6:a7:18:ff:25:db:51:
34:25:72:4e:6a:53:31:33:9f:bc:82:a7:52:92:c0:37:5d:c5:
6f:97:d3:59:11:3c:0a:48:42:be:de:0b:cc:c6:fe:31:51:cc:
cd:89:96:15:f1:44:45:10:76:4a:f5:cb:7e:6d:83:4a:5b:d3:
85:69:ad:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:02 2025 by rpki-client