Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lk6yKcEjmtAEjdl4CamOrtRa-s0.roa
File: lk6yKcEjmtAEjdl4CamOrtRa-s0.roa (raw, json)
Hash identifier: MGK5/IU31MiAl/id5Yx+N86XadKSRpZWXVfhFX+zlfw=
Subject key identifier: 96:4E:B2:29:C1:23:9A:D0:04:8D:D9:78:09:A9:8E:AE:D4:5A:FA:CD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35DC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lk6yKcEjmtAEjdl4CamOrtRa-s0.roa
Signing time: Mon 10 Feb 2025 13:53:45 +0000
ROA not before: Mon 10 Feb 2025 13:53:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13788 (0x35dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=964EB229C1239AD0048DD97809A98EAED45AFACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:f8:95:da:06:9e:fd:56:6a:13:f0:c6:0d:
1c:21:d0:3b:e0:d4:eb:7e:c9:d0:ee:a0:29:61:03:
c5:fb:a5:a7:9d:ce:32:2a:fa:15:2a:2f:76:de:c4:
67:56:f5:dc:2c:c4:a2:54:5b:fd:08:20:15:8c:c4:
4a:17:80:9d:6e:19:7b:ce:c1:53:7c:42:7c:7e:b3:
ce:5e:c8:4f:38:66:4e:86:7b:10:93:92:ac:a9:6c:
fb:ac:4b:c7:70:cf:fa:82:8f:c6:dd:9a:4c:b3:73:
71:aa:ec:b8:cd:24:13:e7:23:16:52:09:7d:ed:e0:
1c:30:dc:f4:0a:ed:bf:03:5e:fb:ec:21:07:be:23:
8c:45:5c:a6:a8:28:6d:16:de:7e:7c:ae:ac:8b:5f:
f7:19:d9:f8:76:13:3c:b5:71:a8:98:e4:f6:17:aa:
f7:8a:e4:0a:30:db:fc:99:18:fa:2f:bd:85:ec:79:
28:1f:97:fe:92:07:64:29:75:69:0b:a4:16:97:e8:
09:09:7e:3b:01:0b:b1:36:b0:9f:e2:9a:c2:c6:cb:
43:50:43:5c:4f:f4:26:06:3a:de:2f:18:cb:e9:17:
af:b0:5a:88:95:e2:45:e3:54:9a:29:d4:7a:2e:e6:
6a:a2:24:73:1c:83:f6:f1:73:ac:d4:49:cb:32:57:
fc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4E:B2:29:C1:23:9A:D0:04:8D:D9:78:09:A9:8E:AE:D4:5A:FA:CD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lk6yKcEjmtAEjdl4CamOrtRa-s0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.112.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:f6:49:ce:1c:11:4b:e0:5a:bc:d6:da:2c:b6:1c:a1:8f:d7:
33:d9:16:b2:ef:85:e9:db:48:6f:73:c9:fc:8e:fe:04:b2:fa:
fb:36:16:58:c3:2a:db:02:f7:d3:81:df:f2:5f:1d:a0:b3:86:
fa:e2:3c:44:92:32:7d:45:f0:05:a8:ff:d9:b1:90:1d:79:8a:
a1:28:ac:96:ae:87:be:87:e0:c0:0a:b6:99:26:ca:ad:fc:9a:
be:c1:5b:cc:f2:f1:0e:09:87:43:fd:4e:3e:7b:12:a4:15:6b:
02:0b:8a:fe:f4:d4:f4:85:79:b2:39:5b:6b:12:94:81:ba:1a:
31:b4:5f:18:54:a2:02:cd:0d:d6:ac:7d:a0:fc:5f:8f:ea:cb:
df:d9:86:5b:39:71:ea:01:ef:f3:f9:3f:7c:fa:bf:b7:7d:1f:
55:d2:dc:42:4b:c1:9c:1e:42:b5:cf:62:e1:7d:60:81:ac:ce:
c2:cd:d5:10:39:17:e2:66:e1:90:5a:f7:ca:e9:32:54:fb:75:
c9:60:b7:c4:7b:05:2e:6f:b9:91:fb:12:3a:87:a4:75:cd:06:
cd:d5:10:93:f6:86:5c:80:4b:89:89:92:15:65:3f:ff:e7:c6:
6b:fc:5e:8d:15:a3:ca:3a:0f:c0:00:59:8f:c6:49:2c:ba:f4:
5f:a6:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:58 2025 by rpki-client