Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/enRcwSYrRBoY9uW5r7QZG3zX2bY.roa
File: enRcwSYrRBoY9uW5r7QZG3zX2bY.roa (raw, json)
Hash identifier: Y99eAV4v1ucBmJ+QeesllKpcRIvwAZ6K3lOvQXDRqug=
Subject key identifier: 7A:74:5C:C1:26:2B:44:1A:18:F6:E5:B9:AF:B4:19:1B:7C:D7:D9:B6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 351A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/enRcwSYrRBoY9uW5r7QZG3zX2bY.roa
Signing time: Mon 10 Feb 2025 13:53:00 +0000
ROA not before: Mon 10 Feb 2025 13:53:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13594 (0x351a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:00 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7A745CC1262B441A18F6E5B9AFB4191B7CD7D9B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:3b:21:df:79:fb:c4:54:e3:ec:e0:77:16:
28:29:38:fc:f2:c0:c8:3c:61:00:6b:76:5d:51:62:
af:e1:cd:e2:da:7a:b8:62:b4:f6:7f:66:cc:3d:63:
84:6f:0d:b5:3f:42:1d:18:3f:4e:f0:e6:8b:43:84:
af:ec:03:44:15:09:a4:3f:88:c0:a8:47:f2:11:c4:
71:a8:5e:eb:b7:ad:c0:aa:25:dd:93:de:e7:d4:c4:
5e:78:72:e2:37:d3:e4:35:f4:9a:db:b8:5b:0a:3e:
1e:b9:3e:1d:c1:c4:7d:9d:f0:7c:7a:74:2b:09:18:
4a:d9:9d:b5:45:79:6f:82:e4:ae:c7:e7:ab:e9:b7:
e3:28:16:cb:e9:d0:e3:da:7a:67:17:e3:9b:04:e6:
90:65:ba:c1:44:5e:75:8f:ee:78:ab:df:e0:40:e1:
dc:48:67:e2:32:87:57:1f:5d:32:1d:5c:f4:de:54:
f8:4f:48:f4:1d:64:aa:c6:fb:49:0c:cf:c2:87:50:
7f:29:02:e5:35:63:86:31:fd:e7:19:8b:91:7e:a4:
d7:4f:8f:3a:73:b2:ff:ac:93:ec:3e:f2:e1:b2:b4:
5d:fa:ad:06:af:a5:ac:50:ef:7b:56:03:86:9d:ed:
cc:91:11:22:d4:a6:9f:37:1a:04:8d:98:ef:ad:f6:
07:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:74:5C:C1:26:2B:44:1A:18:F6:E5:B9:AF:B4:19:1B:7C:D7:D9:B6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/enRcwSYrRBoY9uW5r7QZG3zX2bY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.32.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:f0:31:56:18:de:78:be:82:79:00:e5:da:fb:ad:9c:81:10:
80:80:eb:87:11:3c:7e:b3:1a:51:69:93:e4:57:d2:38:1f:75:
c2:3c:57:9d:9a:4a:5e:45:12:c2:eb:5e:db:61:39:e9:bd:56:
77:f8:94:fb:05:49:7b:e1:5d:24:59:cf:36:13:30:12:cb:f3:
e7:96:01:79:ad:41:dc:e3:75:f6:8a:15:38:bb:fe:4e:33:97:
2c:05:cb:8e:67:9e:3e:b4:99:55:11:ed:c4:6e:75:e4:fb:2f:
a7:7e:76:94:7e:18:ae:94:43:5c:b4:a8:43:c5:b2:c1:5d:57:
5f:03:98:b8:83:48:21:4e:5e:06:49:f5:91:f6:b3:57:07:5d:
95:31:83:69:d4:85:aa:db:b5:f2:10:2b:9c:a9:55:95:d7:83:
1e:44:a2:b1:7f:34:83:12:eb:7f:a7:44:3c:fa:73:10:3d:33:
97:95:a3:33:d3:00:11:46:07:22:43:f4:02:04:7b:6a:fb:09:
65:c0:b3:3d:f7:aa:aa:6d:b1:8f:a2:c6:f9:5e:12:3d:4b:16:
cb:6c:1f:6f:f4:94:20:2e:33:61:c3:3d:22:c5:f8:03:b1:a8:
97:40:7b:21:37:cb:1c:0e:a8:b0:44:8e:dc:e3:93:83:7d:05:
64:0d:d3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:25 2025 by rpki-client