Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bAR2FrHl2Bmn79Wm68FKlHMysCI.roa
File: bAR2FrHl2Bmn79Wm68FKlHMysCI.roa (raw, json)
Hash identifier: T1/f+DaadotQ+JIa52jlU/9vCG8wwn1KmkeTmGufZcA=
Subject key identifier: 6C:04:76:16:B1:E5:D8:19:A7:EF:D5:A6:EB:C1:4A:94:73:32:B0:22
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3412
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bAR2FrHl2Bmn79Wm68FKlHMysCI.roa
Signing time: Mon 10 Feb 2025 13:52:03 +0000
ROA not before: Mon 10 Feb 2025 13:52:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13330 (0x3412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:03 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6C047616B1E5D819A7EFD5A6EBC14A947332B022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:74:15:9b:a8:25:68:e9:cb:0d:76:72:5f:
3b:71:ac:c7:38:d0:eb:9e:81:c2:2c:48:b2:8b:8d:
5a:ff:3d:e1:51:e0:11:93:51:fe:26:a8:91:ab:b6:
ba:6d:e7:a7:8c:1f:49:a2:22:23:01:33:e8:35:51:
dd:5c:1e:16:69:d0:57:63:25:37:bc:d5:cb:5e:c7:
f2:0b:ff:c4:4b:07:68:d6:05:c5:71:8c:25:1d:83:
d5:69:c4:4f:6a:99:f1:28:61:33:fa:4a:22:e3:2d:
e3:48:84:62:fb:d6:31:b1:b1:c7:d0:b9:77:e4:5c:
0b:99:29:01:92:55:8a:05:42:21:75:fb:68:a3:d6:
b7:e0:57:df:56:17:25:2c:23:fd:91:31:ae:89:2b:
e3:24:10:40:f2:bb:6b:1d:c2:79:f1:bc:c9:8c:33:
10:b9:4d:14:62:56:a9:34:d1:e3:04:e7:56:51:09:
20:8d:3e:d9:46:97:65:66:78:25:39:6e:11:a0:5b:
de:e8:3b:5d:84:ef:6a:69:13:a5:a8:ed:f1:e9:0c:
b8:84:b8:73:5e:32:1c:a2:a3:58:8c:01:33:7e:9f:
2d:45:3c:f4:91:21:d7:5c:9d:bc:c2:e7:5a:ed:1e:
b7:29:50:29:09:7d:dd:51:f1:1b:f6:0d:1e:76:3f:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:04:76:16:B1:E5:D8:19:A7:EF:D5:A6:EB:C1:4A:94:73:32:B0:22
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bAR2FrHl2Bmn79Wm68FKlHMysCI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.32.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:99:34:47:68:4a:81:da:22:37:f0:23:71:ad:5b:16:ec:6b:
7b:72:0a:39:d7:de:35:c1:47:69:df:e1:ff:81:9e:85:a5:23:
a9:ec:55:a4:e4:98:38:2f:9c:1f:a1:d8:85:3d:a1:fb:83:8b:
37:cc:16:9b:8c:4d:5a:f8:ae:cf:e5:4a:aa:9d:ff:e9:b9:a4:
a8:46:51:01:01:b2:ff:5a:92:c0:64:90:1b:d8:2e:5d:40:98:
53:17:5d:86:d8:36:6e:a8:be:9f:5a:67:00:4c:3f:11:bf:0c:
10:c0:7a:69:e2:99:8f:f5:c2:7d:bc:08:ed:fa:38:7b:79:9a:
c9:b5:4b:8b:20:6e:1c:69:d6:0d:fc:5f:e4:b9:d0:ed:82:4b:
05:53:ac:1f:c9:59:f5:3e:8b:e9:70:4c:26:10:87:d2:6f:c8:
6d:7e:3c:e5:c2:59:c1:4b:45:e0:0b:a9:7a:53:65:c0:ed:f0:
ef:ea:4c:de:ad:ed:cb:e3:4f:e1:29:7a:8c:2d:b1:91:17:4a:
c2:65:12:6b:40:7f:65:71:05:a0:c3:e2:dd:af:8d:cb:08:ff:
c8:92:fd:13:42:d3:80:cb:79:79:08:1b:59:fa:95:9e:18:38:
b1:6d:92:e1:fe:65:60:fe:0d:93:8b:6b:82:65:33:ff:cf:0a:
48:30:ac:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:02 2025 by rpki-client