Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gZ_trdKXwFCaXYB56noRlpseIH8.roa
File: gZ_trdKXwFCaXYB56noRlpseIH8.roa (raw, json)
Hash identifier: jEFjRVseErHm3v12cx00ROY6Jj6IfA9L5UtO/CkNpAQ=
Subject key identifier: 81:9F:ED:AD:D2:97:C0:50:9A:5D:80:79:EA:7A:11:96:9B:1E:20:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33C3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gZ_trdKXwFCaXYB56noRlpseIH8.roa
Signing time: Mon 10 Feb 2025 13:51:44 +0000
ROA not before: Mon 10 Feb 2025 13:51:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13251 (0x33c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=819FEDADD297C0509A5D8079EA7A11969B1E207F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:6c:6c:e0:0e:c9:ff:e0:79:49:c4:20:77:
d1:24:90:f0:52:66:24:92:38:5f:8f:77:60:19:94:
4f:92:32:0a:4a:24:a5:ae:66:87:29:c4:30:97:69:
26:4f:73:f8:3c:ba:39:e7:64:eb:6c:ab:0e:ae:2e:
59:42:89:32:7b:eb:ff:9c:67:56:55:c0:9b:3a:db:
4d:7f:6c:e7:73:2b:75:67:b0:bd:07:fa:74:5d:00:
8d:6c:30:df:d6:04:9e:2c:91:b8:ae:74:34:13:a1:
e3:82:24:92:ad:2d:cb:45:25:a1:86:fe:6e:8b:19:
ba:eb:d1:f2:21:56:8b:1d:4f:b5:6c:ef:41:57:38:
49:44:1b:8b:d1:f8:c0:91:7f:9f:40:73:24:1d:24:
53:69:01:6c:1c:f4:08:46:cb:aa:a5:ae:57:cf:49:
8f:a0:90:7f:5a:4d:4f:94:ee:88:11:73:a3:6c:69:
21:35:0d:66:c0:ef:9e:4f:40:e2:eb:82:47:dd:4b:
74:89:e7:31:07:03:04:db:fd:c4:6c:de:bb:fc:f8:
21:75:d5:15:b2:d8:5a:08:5d:45:c0:44:76:fa:d1:
ca:67:15:55:cb:f5:1c:46:83:4d:5f:e4:c5:d3:76:
c8:e3:be:82:45:5b:e2:ed:e3:83:d7:e8:79:b2:47:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9F:ED:AD:D2:97:C0:50:9A:5D:80:79:EA:7A:11:96:9B:1E:20:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gZ_trdKXwFCaXYB56noRlpseIH8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.188.0/22
Signature Algorithm: sha256WithRSAEncryption
36:e4:ce:c0:af:29:a5:6f:06:fd:2f:32:34:88:4e:02:22:fb:
26:9c:e8:92:c2:e7:ef:4c:b0:91:56:1b:d2:80:c3:c0:9b:6a:
e6:17:c9:fb:e3:a1:a4:bd:aa:0f:09:c5:ce:d8:87:de:2f:14:
8e:10:49:e9:8a:dc:a0:cb:c2:f3:90:a3:95:29:7a:26:5a:a9:
0a:2a:b9:87:d8:86:00:21:26:66:13:da:18:57:33:40:de:71:
7f:30:63:93:6f:e6:ff:e3:dc:6e:1f:19:1b:fe:8d:43:f5:b8:
bd:66:f7:51:de:9d:ca:7b:7b:6f:f4:15:aa:00:d4:5d:fd:01:
2f:48:1a:0b:52:52:62:38:7a:f0:89:14:82:c1:89:7c:46:45:
8c:6d:00:1d:32:5d:1b:b2:2a:e7:a7:02:6b:8f:e5:87:67:1a:
3c:4d:47:d7:85:55:c2:32:f6:55:d3:96:e0:46:f3:7d:b2:70:
3c:dd:d4:8f:12:b3:c1:f9:b5:a0:46:19:25:59:65:42:4b:a3:
bb:09:9c:92:9a:a4:7c:77:c1:9b:f2:bb:72:80:fd:d9:2b:11:
e6:24:f5:ff:0f:c9:dc:40:23:7d:4b:da:bf:2e:47:36:b5:3c:
73:10:23:5b:4d:1a:82:50:92:94:cc:c4:42:c5:0f:d1:92:bb:
b0:6f:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:25 2025 by rpki-client