Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qI7vtct5VVkdMj3cKBcLGWb9dIE.roa
File: qI7vtct5VVkdMj3cKBcLGWb9dIE.roa (raw, json)
Hash identifier: xr8cc+9vp1J4DLXWlnF+XPQGWMIy56HObXbcLo6utek=
Subject key identifier: A8:8E:EF:B5:CB:79:55:59:1D:32:3D:DC:28:17:0B:19:66:FD:74:81
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33CA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qI7vtct5VVkdMj3cKBcLGWb9dIE.roa
Signing time: Mon 10 Feb 2025 13:51:46 +0000
ROA not before: Mon 10 Feb 2025 13:51:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.180.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13258 (0x33ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A88EEFB5CB7955591D323DDC28170B1966FD7481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:3b:3a:64:f7:b1:8a:8c:81:20:cf:3c:25:
a9:ed:f2:67:04:a1:9c:01:ce:cb:b7:dd:60:64:ea:
c0:06:15:af:78:66:ec:6d:fb:c5:30:a6:e0:41:22:
b3:ad:f8:f0:7b:93:b3:9f:c3:80:9c:49:92:02:17:
47:05:d0:a2:9f:62:46:63:37:28:d1:69:af:23:b3:
fc:c3:f4:6c:d6:6a:a9:25:2e:d5:b5:3d:a1:45:58:
3f:3d:a1:97:4f:08:e9:e6:66:78:a0:67:24:37:26:
b9:81:8f:a3:65:1f:82:f9:2b:da:1b:9b:51:ad:64:
7f:d3:9d:d7:76:58:15:ae:65:0e:f6:4e:79:4e:de:
5b:e8:cb:8b:10:c1:59:14:17:41:73:53:cd:d2:82:
be:ca:98:a6:d0:31:a1:13:45:c6:c6:d3:a0:d7:95:
3c:ac:b0:81:72:60:5a:28:10:be:7b:3b:f9:5e:6d:
18:33:3c:67:3a:c9:21:0e:8e:0b:f5:88:8d:f2:81:
9d:27:12:60:9e:af:ea:7a:88:ba:bc:1d:32:7f:2d:
ef:70:3b:bd:0b:dd:65:9a:55:02:d8:f3:df:b4:fb:
c2:d4:53:d3:fd:95:ab:3a:b2:c7:ae:49:df:22:7b:
1d:3c:b9:81:3a:1c:39:d4:b1:07:de:f6:a1:71:28:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8E:EF:B5:CB:79:55:59:1D:32:3D:DC:28:17:0B:19:66:FD:74:81
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qI7vtct5VVkdMj3cKBcLGWb9dIE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.180.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:b8:2f:9e:6a:1a:c3:45:2b:83:a0:e8:7a:a8:60:bf:e7:80:
87:83:7c:1e:2b:49:6f:ab:a6:6b:8a:e5:aa:87:6e:56:bd:67:
49:96:0c:45:a7:15:b8:54:a1:c5:f3:1e:19:6b:8c:a4:0b:33:
14:e9:07:c0:83:fe:c4:45:1b:9a:b7:bf:30:2a:92:80:aa:41:
26:da:28:4e:f5:9d:09:ee:0c:52:66:b2:61:b9:62:a9:e8:cb:
0d:6e:24:0e:59:69:6e:ae:c7:52:06:1f:6b:e1:48:f4:e8:53:
6e:fb:c9:3b:ae:68:d2:3f:08:4e:35:f4:b5:c7:27:61:9e:9b:
9d:c3:37:c5:4f:1e:2b:e7:dc:ed:83:5e:7d:b1:a2:0e:3e:6c:
7b:4c:27:34:fa:ae:eb:f2:cd:a9:da:c8:1e:b2:bf:0b:bc:b5:
a5:f8:f4:ce:f4:f3:4d:0e:12:f8:87:e0:b2:05:fe:af:3b:89:
d7:5a:9f:af:2d:58:2e:f4:b4:26:84:ed:bc:16:ff:a4:3a:bd:
b6:7e:54:7c:a8:a0:ed:d0:e0:6a:f7:3d:e0:da:a4:04:cd:5a:
c8:9f:0a:59:b1:6f:af:64:fd:14:49:42:65:5c:b6:d6:52:34:
39:f7:ba:bf:ac:34:24:a0:11:9f:0c:da:c2:a8:ef:60:bd:6a:
c8:85:25:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:57 2025 by rpki-client