Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lzRKXHMe-hw0mgIHhuP6epGtxng.roa
File: lzRKXHMe-hw0mgIHhuP6epGtxng.roa (raw, json)
Hash identifier: b4O4tFl7aoTdWbbOc+rrRMoi2t0qKThki3PjVTZIdHY=
Subject key identifier: 97:34:4A:5C:73:1E:FA:1C:34:9A:02:07:86:E3:FA:7A:91:AD:C6:78
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3415
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lzRKXHMe-hw0mgIHhuP6epGtxng.roa
Signing time: Mon 10 Feb 2025 13:52:04 +0000
ROA not before: Mon 10 Feb 2025 13:52:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13333 (0x3415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:04 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=97344A5C731EFA1C349A020786E3FA7A91ADC678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f3:a2:cf:7b:7c:2e:3f:db:09:2c:e7:53:32:
58:27:b0:c7:03:1c:0d:57:cf:71:ff:af:f9:11:ff:
48:63:eb:e4:fa:ca:38:eb:15:f9:aa:e5:b2:f4:63:
28:48:4f:7b:ce:46:0f:85:a9:6b:cb:3f:6b:0c:a1:
7a:10:de:e8:9f:48:4e:1b:94:6d:47:e3:4f:f2:78:
0c:37:f8:08:fb:10:c2:de:bd:46:e1:9a:64:e4:3a:
98:44:b1:19:0b:3e:66:dd:b9:80:a6:62:cf:a5:b4:
64:f6:1a:8c:42:55:03:f5:f0:f0:86:3f:f8:c3:c9:
fe:ad:52:7e:32:fb:b1:d3:a8:7f:f2:49:2f:59:cf:
8e:33:ff:24:3e:71:47:99:c8:e8:85:36:2b:3b:65:
cd:68:85:a8:b9:88:7a:42:be:c9:6b:21:29:9e:d1:
74:bc:b5:2e:30:91:dd:f6:16:df:a0:1d:97:a6:43:
b3:14:35:23:e8:fa:0f:42:8a:fc:b8:54:45:46:b9:
ab:09:85:c6:98:55:10:a9:f0:91:e7:ad:67:76:29:
fb:8e:eb:5e:ca:58:f6:70:32:ff:fa:7b:83:6d:c3:
60:39:42:a8:1f:e9:60:8a:bf:ef:c7:4c:a7:55:de:
25:28:b3:77:61:e8:f3:e6:72:72:83:d7:bd:d7:fc:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:34:4A:5C:73:1E:FA:1C:34:9A:02:07:86:E3:FA:7A:91:AD:C6:78
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lzRKXHMe-hw0mgIHhuP6epGtxng.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.56.0/21
Signature Algorithm: sha256WithRSAEncryption
54:bb:ed:7b:bd:56:f4:36:13:19:31:96:85:21:2d:18:49:26:
c5:0b:a5:2b:2f:e4:84:d9:2e:0f:7d:6c:62:f6:54:43:1b:4f:
f6:e3:2f:71:13:c2:d3:a5:aa:31:a4:6a:66:a5:d7:80:e3:b5:
31:55:d0:5f:31:14:b7:65:a5:07:c9:c7:c4:c1:ed:ff:6b:05:
2e:1f:95:23:7d:fb:e2:de:fc:22:7f:27:2b:db:1a:38:6c:6e:
a1:d2:4c:2a:eb:8d:3e:4b:1e:b9:17:fe:ab:ed:f0:71:8b:3e:
da:11:6e:8c:1a:39:51:6e:b2:9a:99:a5:32:2f:66:53:94:c9:
3f:1c:f9:a9:69:43:8d:82:7c:19:a3:95:44:29:fd:37:8c:3a:
a6:b3:fa:b4:ec:72:20:f1:39:96:f8:6d:f6:e6:76:5b:0f:57:
59:9e:ba:2e:8e:59:be:32:c9:33:1d:49:8c:d0:5e:68:ec:24:
c7:4d:d2:34:29:a6:8a:09:4f:4f:4a:19:b3:23:eb:17:1e:c3:
75:a5:14:69:a1:d6:7f:61:36:d6:75:44:4c:35:b0:b9:6b:08:
3d:b9:e6:2e:1f:bf:b8:2a:c5:58:32:bb:13:8f:31:19:f7:b6:
35:3b:50:d5:d4:28:a4:f4:20:4c:c9:13:94:6b:77:4a:a8:b0:
bb:16:84:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:58 2025 by rpki-client