Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lbkzJ6jAkaKXEGgiIcHn1QJpNZQ.roa
File: lbkzJ6jAkaKXEGgiIcHn1QJpNZQ.roa (raw, json)
Hash identifier: 6OhV0D0YhaWvWfQBFw73/pJofIsz5V9FI7y8+m6icFk=
Subject key identifier: 95:B9:33:27:A8:C0:91:A2:97:10:68:22:21:C1:E7:D5:02:69:35:94
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34E5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lbkzJ6jAkaKXEGgiIcHn1QJpNZQ.roa
Signing time: Mon 10 Feb 2025 13:52:48 +0000
ROA not before: Mon 10 Feb 2025 13:52:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.144.192/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13541 (0x34e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=95B93327A8C091A29710682221C1E7D502693594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:80:b6:e2:3d:1a:fe:c3:14:a7:60:d8:16:
4e:18:4d:e9:84:55:b8:e9:a4:8e:10:de:da:5c:ed:
38:84:61:15:4f:24:a9:dd:c3:04:69:b6:ed:64:e2:
de:c0:84:45:74:98:9d:50:28:61:f0:98:83:6f:f9:
94:4e:70:3b:dd:f4:3d:d6:1d:bf:2d:59:1d:2e:9e:
cb:c9:40:42:18:07:7a:f1:aa:f7:a2:f2:66:a6:9a:
0b:b5:68:60:67:5f:d8:bb:08:f4:07:8b:b6:a3:fd:
5a:6c:b4:db:7f:dc:63:51:ce:36:01:32:56:86:b9:
cc:93:1e:8e:1b:22:cb:61:d3:4f:45:9f:19:65:61:
8c:dd:6b:29:0a:85:c9:68:02:bf:70:e8:bc:31:2e:
54:50:dd:b6:db:3e:2f:f4:ca:d4:37:fe:0d:05:49:
c7:01:40:0a:86:d0:a0:a7:d6:06:84:5a:87:38:f3:
f8:c9:f5:c4:79:f8:6b:8e:03:f1:8e:d7:13:12:e8:
95:d4:22:4c:5b:c7:5d:51:21:51:c0:3c:8f:d4:de:
a0:bd:68:e5:a9:9c:d9:b1:14:45:37:55:f0:76:ba:
72:53:17:84:ef:92:c5:04:4f:e3:3c:a9:61:39:4f:
65:16:df:58:8c:79:d5:ce:b9:56:59:16:30:04:63:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B9:33:27:A8:C0:91:A2:97:10:68:22:21:C1:E7:D5:02:69:35:94
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lbkzJ6jAkaKXEGgiIcHn1QJpNZQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.192/26
Signature Algorithm: sha256WithRSAEncryption
71:0c:1c:8f:f7:4b:13:a3:05:11:b5:14:c8:b1:c5:5c:e7:8d:
d0:5e:ea:6b:01:95:a6:ad:82:40:76:b8:d2:dd:b9:7e:aa:61:
15:2e:a6:50:56:60:2a:a1:31:13:0c:07:c8:66:72:85:5d:7a:
97:96:4c:96:d9:53:8f:2c:44:31:d2:c5:48:3c:0a:8e:c3:15:
a5:6a:84:cd:d3:ee:3c:44:db:4e:cc:da:e8:23:a9:a4:60:54:
65:0c:73:6f:8d:8d:1a:05:c8:fb:23:7d:3f:5b:04:19:2f:c9:
b5:56:c2:66:cd:93:af:b8:a8:9b:6b:48:a5:38:fb:de:34:bc:
30:62:6a:48:56:6e:94:e0:7c:f3:74:3d:bb:38:2e:cf:49:d9:
fc:74:cf:ae:bc:0a:df:5b:ce:fc:46:c8:c1:d5:fb:8b:7d:a5:
db:73:e0:e9:7b:bb:46:08:cf:37:fa:6e:30:3c:3a:8c:e7:a9:
9b:b8:3a:2f:2e:6b:1d:81:fb:a6:a9:3c:b1:5b:dc:46:b8:6d:
29:e6:0e:a2:ce:24:1f:b5:e6:f2:50:68:08:96:03:be:90:d2:
a7:f1:ff:dc:cb:16:a5:14:f6:6a:be:9d:35:8d:41:71:e5:9d:
3c:72:e6:6c:c2:bf:4c:99:ff:52:80:10:e3:67:5e:e8:d3:b9:
26:e3:7f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:44 2025 by rpki-client