Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l1ln6adBkLx67af_m_CkChLfqp0.roa
File: l1ln6adBkLx67af_m_CkChLfqp0.roa (raw, json)
Hash identifier: Rc0Y9F2LvAA0v8/pvbnfbONOEbpDxVqqlNzJ8KTJoUs=
Subject key identifier: 97:59:67:E9:A7:41:90:BC:7A:ED:A7:FF:9B:F0:A4:0A:12:DF:AA:9D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35DE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l1ln6adBkLx67af_m_CkChLfqp0.roa
Signing time: Mon 10 Feb 2025 13:53:45 +0000
ROA not before: Mon 10 Feb 2025 13:53:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13790 (0x35de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=975967E9A74190BC7AEDA7FF9BF0A40A12DFAA9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:1a:32:73:60:05:d6:1c:8f:94:31:0f:07:
d8:8b:2b:41:95:b5:fb:a7:06:21:e6:69:c5:0f:6d:
16:7f:b1:a7:d0:9d:03:9b:1b:69:a4:e6:24:37:d2:
2a:f0:c7:60:1a:36:0c:f7:4a:9b:67:97:1c:14:3e:
7f:9e:6e:af:2b:6a:84:17:f5:67:e7:43:37:a1:f6:
10:bc:a4:f6:be:16:19:2d:a7:13:a1:cc:7f:27:d1:
d6:95:07:df:4f:b6:f0:2e:0d:fa:dd:84:e4:1c:bb:
2d:04:a2:75:4e:b2:ec:bc:d0:5e:bb:c7:a7:a0:54:
42:f1:05:7d:03:cc:a1:e0:1c:c5:a8:84:9a:22:76:
a1:8f:56:64:38:1d:bf:c3:c1:b4:9b:06:0c:84:8b:
e1:54:53:49:ae:fb:33:a3:2f:a5:e3:84:80:bc:99:
44:02:58:6d:64:35:8f:47:0c:e7:df:fc:f4:ff:7d:
5b:cb:fb:bf:11:a5:51:89:89:f3:a5:7e:65:7b:59:
aa:bb:26:7e:df:05:98:26:59:ef:ae:88:99:1a:83:
64:81:80:04:f8:a0:70:94:e6:19:8f:41:ec:86:28:
c3:dd:80:c5:43:55:af:1b:f9:6c:52:ab:9c:0a:7b:
6a:35:c6:d9:a1:ee:73:6c:18:e6:43:9f:50:bf:58:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:59:67:E9:A7:41:90:BC:7A:ED:A7:FF:9B:F0:A4:0A:12:DF:AA:9D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l1ln6adBkLx67af_m_CkChLfqp0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.104.0/21
Signature Algorithm: sha256WithRSAEncryption
bb:11:68:e6:97:b1:37:85:56:c8:1b:d2:0a:ff:6c:66:5a:c8:
30:3a:a0:0c:28:9c:94:a8:e5:1a:07:bf:5f:09:d5:e8:da:d2:
ae:4e:ae:63:ee:b9:8c:e3:fa:0f:26:32:6b:19:20:e6:d4:a9:
ec:7f:fd:de:ee:06:56:6d:ca:3a:c1:4e:5e:89:0f:60:cd:fe:
4f:4e:1e:cb:02:82:83:1e:e7:de:65:51:d4:17:00:69:2c:66:
b6:6e:c9:76:d3:ee:77:6c:0e:89:b8:bb:d6:f3:2b:01:ee:d2:
9b:83:b5:b5:ea:33:44:95:1d:ab:20:7b:6b:21:0d:dd:8e:1f:
5a:53:93:80:fb:eb:25:60:41:19:4d:23:d4:39:ca:38:3c:a7:
73:b8:8d:e0:cd:a1:c5:ed:44:31:fe:97:bd:ec:15:6a:20:b3:
c4:ef:0b:50:9a:ac:ab:67:9e:98:6b:30:57:06:92:d4:37:1a:
50:76:ea:46:92:32:d8:d0:1d:c0:60:fe:09:71:69:8d:ed:96:
29:ea:23:db:58:37:3a:a0:2d:4b:c7:1e:ff:2e:9a:7f:b5:d6:
a2:4f:c0:bb:aa:0a:99:1c:8c:98:86:f5:10:da:0d:24:8d:db:
ea:bc:5c:0f:38:43:50:64:25:27:0b:dc:34:cb:5e:2b:26:b9:
6e:6d:3e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:37 2025 by rpki-client