Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a31O8Yzeap2-Y5MFQMkm1MrTNsg.roa
File: a31O8Yzeap2-Y5MFQMkm1MrTNsg.roa (raw, json)
Hash identifier: 0oXRGI8GCzcJmJkfQitiJb9YKYUjp12t0vH3ssJ4n8Q=
Subject key identifier: 6B:7D:4E:F1:8C:DE:6A:9D:BE:63:93:05:40:C9:26:D4:CA:D3:36:C8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 345B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a31O8Yzeap2-Y5MFQMkm1MrTNsg.roa
Signing time: Mon 10 Feb 2025 13:52:18 +0000
ROA not before: Mon 10 Feb 2025 13:52:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13403 (0x345b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:18 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6B7D4EF18CDE6A9DBE63930540C926D4CAD336C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:18:36:42:b2:4a:53:59:94:22:c0:31:39:
7b:41:84:78:ee:65:10:b8:2e:0e:61:15:ec:49:e5:
37:10:b1:a0:6e:cf:d1:e9:0e:4e:3c:25:0b:14:6b:
11:c9:04:24:c6:e8:62:13:0d:ae:8e:2d:eb:7c:b4:
c5:0f:ac:d6:90:47:cd:1c:3b:11:09:b6:2d:3b:9a:
ae:20:04:d0:f3:ba:f6:cb:18:fe:c1:3c:b0:a5:67:
cb:97:ee:2a:23:60:31:51:bd:85:ad:3f:5f:52:91:
76:c2:85:d6:7a:f0:18:6f:84:1f:71:8a:f8:00:9a:
00:36:88:63:80:1a:64:e7:e1:1b:b9:b4:19:19:fe:
53:24:66:fd:ce:aa:46:d0:f7:37:46:cb:83:4f:a7:
7c:ad:3d:06:3c:ab:5c:00:d3:aa:9f:2a:c7:dd:91:
89:e8:fa:ce:76:44:cd:45:da:d0:0b:14:9a:cc:bf:
86:e2:d3:5c:ca:02:c8:2c:e1:d6:74:80:5e:a1:b4:
40:b9:59:fe:ee:e1:8d:05:4d:b0:f5:f0:cd:58:ec:
38:9c:9e:59:03:9d:6b:a5:7d:ec:f4:ba:02:4c:55:
1d:a7:f7:92:5a:ca:21:85:22:3d:7e:e0:94:3a:13:
67:29:ea:16:5d:d3:9b:ea:bc:de:e0:84:2d:90:0c:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7D:4E:F1:8C:DE:6A:9D:BE:63:93:05:40:C9:26:D4:CA:D3:36:C8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a31O8Yzeap2-Y5MFQMkm1MrTNsg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.95.0/24
Signature Algorithm: sha256WithRSAEncryption
94:9a:4f:1b:8e:76:ec:97:8a:fe:8b:47:a4:ea:4d:b5:73:5f:
0f:4c:d1:d0:9d:8c:db:9f:d5:a2:07:13:58:10:6c:66:bc:87:
c2:e6:d7:94:ab:3c:75:0b:c2:74:9b:aa:86:51:91:7a:9a:cd:
85:44:e9:65:4b:03:05:58:95:04:da:d4:d6:52:c8:15:50:72:
be:d5:54:19:cc:4d:2e:bc:48:90:9c:ac:fe:87:9d:14:56:ac:
68:40:35:87:76:c6:73:da:31:d4:d2:a8:ec:64:de:92:24:f4:
da:b6:fe:cb:fd:db:63:58:78:b0:de:e0:e8:cb:1b:78:b3:1a:
56:06:25:c0:ef:35:e0:db:16:32:9d:e1:3b:c2:eb:87:66:e9:
66:10:63:b4:5f:5c:e9:42:44:45:3e:22:14:1f:ea:ec:9d:0a:
22:0d:c5:09:c8:67:a9:ae:9d:21:4e:53:7b:c7:87:7b:ed:b4:
a9:17:c8:13:52:09:69:1d:7c:a7:45:ae:e7:ad:7a:a4:a9:4a:
3a:ed:83:b9:60:ab:53:1b:85:01:0d:94:ee:59:5b:66:dd:1f:
9c:c3:fb:d2:53:ec:da:06:43:8a:f7:8b:7c:80:9d:2f:39:3b:
db:22:a4:aa:6b:79:f1:71:18:99:99:f2:d1:68:c6:b1:88:5f:
a8:11:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:45 2025 by rpki-client