Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iHHnWOwiS3XNQ1kmC8z0bbmzNpc.roa
File: iHHnWOwiS3XNQ1kmC8z0bbmzNpc.roa (raw, json)
Hash identifier: Cgld4iWFAwzx+d29IeeQZXh4bBhtCx8YiNLwk08N0RE=
Subject key identifier: 88:71:E7:58:EC:22:4B:75:CD:43:59:26:0B:CC:F4:6D:B9:B3:36:97
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3437
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iHHnWOwiS3XNQ1kmC8z0bbmzNpc.roa
Signing time: Mon 10 Feb 2025 13:52:11 +0000
ROA not before: Mon 10 Feb 2025 13:52:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13367 (0x3437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8871E758EC224B75CD4359260BCCF46DB9B33697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0b:00:9f:5b:2c:2a:45:0c:8d:9c:df:64:74:
86:94:f6:30:dc:92:2b:c2:1e:19:55:a3:ac:46:c7:
8a:23:be:26:31:a6:44:84:5d:06:e7:ba:d0:d9:4b:
86:3e:b8:d1:3b:9a:b3:c0:60:22:97:e9:34:b4:6c:
b0:ea:91:eb:d1:99:81:c5:00:30:e1:65:98:c0:22:
e6:10:c6:45:f4:d5:86:84:28:44:cc:55:9f:df:2c:
d2:96:93:67:13:ed:09:2d:f1:11:09:82:ef:fc:84:
78:e9:a8:d6:2a:c8:ce:78:37:02:f9:ce:ff:9c:8d:
38:81:e7:40:c6:72:e4:5d:b9:49:d6:50:26:13:f2:
3b:6d:8a:ee:ce:38:2d:6a:0c:11:a6:9c:0d:65:37:
04:15:37:5a:8f:c1:4d:12:57:98:d7:42:26:0e:4d:
c2:79:df:f4:be:b9:54:a0:e7:f5:e7:d0:e4:e8:17:
4a:d5:7e:a3:89:eb:42:1c:c3:1a:9d:72:ef:52:8e:
fb:82:fc:38:10:a1:c3:5c:ea:39:4a:5f:ab:2d:95:
c6:a4:73:af:84:50:fb:c9:62:d5:b6:2f:e0:69:49:
24:82:cf:8d:b6:78:da:d3:46:22:26:d4:ac:0c:9b:
a6:12:8b:fb:8c:59:c6:50:2b:b3:2f:cf:e9:2d:94:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:71:E7:58:EC:22:4B:75:CD:43:59:26:0B:CC:F4:6D:B9:B3:36:97
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iHHnWOwiS3XNQ1kmC8z0bbmzNpc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.208.0/21
Signature Algorithm: sha256WithRSAEncryption
79:1f:2a:55:fe:1a:8f:ac:ad:57:cd:83:b7:f5:42:be:77:c6:
b1:b3:b3:9b:ac:e8:20:7c:a0:55:f7:54:26:d3:0c:a7:27:9a:
ef:65:f7:8d:8f:7d:8a:62:26:87:b7:f7:86:c0:a1:47:9b:91:
7a:1f:79:db:3a:a2:31:16:87:d1:c6:b2:73:9e:db:5f:71:70:
81:76:47:22:d8:2a:42:c2:f2:fd:3c:00:0a:cf:47:21:49:72:
11:c8:2a:9a:e5:38:d5:4e:05:ba:86:a8:7b:d5:7c:c1:6f:65:
03:bf:7b:d8:23:5e:26:34:7d:b9:47:37:3f:89:27:ac:e6:0e:
85:dc:a6:f3:1e:dd:bc:03:92:04:70:86:86:31:29:e1:a2:74:
a3:8a:b6:53:d9:66:a3:88:8d:c4:71:08:20:fb:8e:39:cb:1a:
e2:f7:5f:8d:1e:c8:7b:36:aa:f3:9e:9c:4f:d1:4a:86:59:f0:
49:4c:d3:ce:f9:bf:ef:25:1e:33:58:83:a7:55:d6:d8:29:bf:
da:a5:08:a1:79:b0:e0:ae:52:1d:0e:43:0f:f3:97:70:fb:1f:
d1:b6:7d:20:23:e8:66:f4:b7:01:0f:4a:bd:3e:7f:9c:04:4a:
18:81:c2:f2:79:6b:2a:26:03:9c:85:82:18:bb:c6:f3:0a:2b:
bd:eb:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:36 2025 by rpki-client