Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h-00GHrCuv_WNvwVabeqsrcqdjM.roa
File: h-00GHrCuv_WNvwVabeqsrcqdjM.roa (raw, json)
Hash identifier: VoDPW/fsH1IGCEfVqvuH84Tn8F6Iqz5iST2vpQAiTy0=
Subject key identifier: 87:ED:34:18:7A:C2:BA:FF:D6:36:FC:15:69:B7:AA:B2:B7:2A:76:33
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3611
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h-00GHrCuv_WNvwVabeqsrcqdjM.roa
Signing time: Mon 10 Feb 2025 13:53:57 +0000
ROA not before: Mon 10 Feb 2025 13:53:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13841 (0x3611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:57 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=87ED34187AC2BAFFD636FC1569B7AAB2B72A7633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:1d:03:f2:6b:4a:91:d6:c2:02:d9:ac:88:
f7:3f:d0:82:b7:57:3e:81:a4:6b:10:c8:82:23:b9:
a2:cb:ff:b1:20:08:f2:15:8e:c9:9c:80:d9:aa:59:
33:42:df:a7:93:50:6e:6d:a0:21:44:53:85:ac:d5:
45:dd:76:9f:ab:23:a6:60:f3:21:eb:77:5b:3e:dd:
4b:8d:95:1a:22:c7:ec:6d:d9:6a:7c:e2:61:ef:ab:
fb:0c:3e:dc:ba:0c:0e:4e:fd:69:20:b7:bd:7e:76:
e7:4b:4f:4c:32:c5:8e:0f:78:c1:39:81:a2:e1:04:
c6:bc:99:d1:ef:d0:e3:bb:8c:eb:6a:5f:96:2d:77:
ae:82:35:2a:71:e3:e8:09:eb:2a:2c:86:98:26:15:
6f:9c:3a:11:31:a8:38:4f:5b:d0:7b:b6:20:e5:f4:
a1:18:2a:7c:df:5e:6d:0f:e4:d2:23:f5:23:d7:07:
f5:dc:44:46:43:1d:4e:bb:76:0d:fd:dd:d1:f6:ed:
80:49:1a:7d:1a:25:9d:92:b7:43:b6:a7:31:de:a2:
27:97:46:ed:44:83:96:67:67:7c:c6:ec:b7:3b:13:
16:6f:7d:4d:5c:7f:0c:15:5e:b0:7d:12:1a:eb:13:
65:24:0b:44:e7:f0:45:93:b2:bd:c6:a1:0f:19:f2:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:ED:34:18:7A:C2:BA:FF:D6:36:FC:15:69:B7:AA:B2:B7:2A:76:33
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h-00GHrCuv_WNvwVabeqsrcqdjM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.64.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:aa:6c:e1:51:90:83:f9:47:5c:93:f1:d2:29:cd:9f:21:8b:
01:9e:72:f5:19:ca:af:5e:33:52:d2:a3:86:55:7d:92:fa:8c:
6f:61:d2:7b:fc:68:0b:a2:5d:2e:a8:c3:ea:f3:7a:49:e4:6e:
93:91:af:62:d7:55:44:c1:6d:84:e1:47:ed:b9:ea:79:b4:8a:
70:84:55:1b:78:20:6b:85:8e:15:2e:34:28:8b:d3:66:e5:ec:
e8:bf:8b:88:20:57:38:75:a8:f9:63:38:ff:bf:17:ba:96:36:
1e:4d:36:4c:f9:7e:6c:de:8d:4b:9b:d7:34:61:a8:cc:0c:88:
77:a2:53:64:7e:91:b7:b9:6b:31:e2:d3:91:c2:4c:b0:9b:ca:
20:d7:0f:9a:0f:7d:a7:8a:06:27:4d:8e:90:c2:11:43:51:5e:
cc:96:91:23:84:b5:e3:07:8a:05:99:3f:56:73:a8:20:57:13:
24:fe:8e:55:31:b7:2e:ed:91:31:3f:fd:a2:3f:6d:0f:d2:08:
22:bc:01:4e:18:57:8f:39:d4:31:52:6c:c5:66:2f:4b:aa:eb:
88:19:46:fa:0f:b5:5b:2e:4a:a7:84:e7:3e:22:87:38:68:e8:
e2:a7:85:35:d9:b0:23:47:1a:15:cb:f7:33:aa:84:4b:1e:51:
6c:b3:72:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:49 2025 by rpki-client