Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_yjC4PrYHSI0IyESy3kcbPTRYQU.roa
File: _yjC4PrYHSI0IyESy3kcbPTRYQU.roa (raw, json)
Hash identifier: ZFpeN+8jY6GEC5Ua22zbgalwL0TLbnSv7Mi4pjkxSGE=
Subject key identifier: FF:28:C2:E0:FA:D8:1D:22:34:23:21:12:CB:79:1C:6C:F4:D1:61:05
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34E7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_yjC4PrYHSI0IyESy3kcbPTRYQU.roa
Signing time: Mon 10 Feb 2025 13:52:48 +0000
ROA not before: Mon 10 Feb 2025 13:52:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13543 (0x34e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FF28C2E0FAD81D2234232112CB791C6CF4D16105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:27:aa:4c:c2:41:ea:92:15:87:40:e7:3d:
2f:b5:15:3f:63:3b:db:0c:50:d1:46:5c:a0:01:6a:
87:a0:15:6a:16:74:7e:7a:ce:c7:79:d6:2b:8b:06:
1f:eb:7e:39:07:65:92:78:ce:d7:d9:3f:69:99:cf:
3e:0e:de:57:a5:32:8e:05:02:a4:c0:4e:82:83:35:
e1:0d:a9:aa:89:03:f7:a2:28:70:41:24:12:eb:a8:
69:ab:99:d2:2d:83:8c:fc:7b:af:ac:7d:6e:40:0f:
0f:12:a0:ab:1f:c3:69:2a:4b:ed:36:6e:3f:ea:42:
8a:e5:04:c2:4d:2f:c8:31:4b:2d:29:96:9f:35:76:
e4:e4:e2:91:52:77:b6:91:ab:4c:6b:a7:fe:e0:12:
02:d9:31:88:50:79:8e:47:c5:49:0a:f3:e8:c0:c6:
02:14:8f:2a:2d:4b:8a:3a:3c:d5:42:86:27:39:cc:
b1:ee:2f:6c:23:7c:bb:a5:cc:8f:05:5f:84:7c:4a:
7f:a0:f5:85:b1:1a:3f:20:ee:9c:45:ee:cf:0b:de:
d5:8f:1e:c9:31:ba:2c:49:19:5d:d5:4a:a6:6d:cf:
e2:17:31:3d:e3:d7:ff:02:10:46:98:78:50:25:0d:
68:ae:2e:23:26:c5:67:86:55:c4:f3:fd:d2:af:68:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:28:C2:E0:FA:D8:1D:22:34:23:21:12:CB:79:1C:6C:F4:D1:61:05
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_yjC4PrYHSI0IyESy3kcbPTRYQU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:4f:fe:98:1b:e8:92:42:50:9e:0e:76:bd:4e:b4:a3:14:77:
2d:d2:89:9d:91:c8:2c:b6:21:77:4b:36:29:b2:a4:82:bf:c8:
20:a3:14:54:99:51:7d:64:54:97:54:df:39:c4:1e:e7:55:4b:
31:56:d4:6d:a7:c0:72:9f:2c:80:60:dd:c4:89:03:0f:3f:89:
8e:bd:5b:9e:2e:1b:a1:32:e0:69:46:97:be:e0:93:6d:74:c3:
7f:58:00:b7:8d:61:ec:19:46:c9:85:73:c6:35:e9:6e:24:5c:
3e:52:f8:07:ee:9c:2c:5d:8e:10:44:1b:ee:2b:93:f7:d1:c9:
39:9d:07:50:a9:8e:90:0e:27:c8:c8:b9:88:d9:21:48:53:9f:
99:ec:15:fa:dd:1e:0d:2f:0d:f6:08:e9:07:55:5b:55:8d:b9:
47:1c:ed:08:0d:72:97:b6:bf:c0:87:70:c0:6d:5d:ce:6a:d9:
80:5d:5f:cc:c2:00:67:a9:52:10:47:59:70:4e:69:a2:8f:ad:
9a:9e:79:06:17:be:63:91:86:a4:5d:9a:e5:06:1a:e2:bb:b1:
f7:67:d4:e8:5d:2c:6a:f4:a9:fa:f0:af:3c:b7:8c:47:c2:66:
74:43:2a:53:10:c6:f8:40:1d:59:19:85:1e:7f:ce:b9:b5:06:
9a:34:25:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:34 2025 by rpki-client