Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qawalgKc46ZQyEmnu4_wLx-mM9w.roa
File: qawalgKc46ZQyEmnu4_wLx-mM9w.roa (raw, json)
Hash identifier: xmmxjykWekQ9WhtFb2zxroKo+7/msM95vYGbDtE9vHw=
Subject key identifier: A9:AC:1A:96:02:9C:E3:A6:50:C8:49:A7:BB:8F:F0:2F:1F:A6:33:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34F3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qawalgKc46ZQyEmnu4_wLx-mM9w.roa
Signing time: Mon 10 Feb 2025 13:52:51 +0000
ROA not before: Mon 10 Feb 2025 13:52:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13555 (0x34f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A9AC1A96029CE3A650C849A7BB8FF02F1FA633DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:c6:5c:60:e5:4b:52:77:06:50:ef:b7:48:
b9:76:df:fa:46:65:f6:3d:bd:a5:a7:cd:d9:6b:50:
2c:d3:89:5d:98:f9:6e:26:f0:2f:11:43:2c:fe:39:
3b:7b:bf:09:f5:67:81:f9:7f:92:44:ec:2c:fe:7f:
07:d4:83:0a:4d:f8:b5:00:a0:c6:39:9c:01:70:01:
0c:17:60:58:5c:b4:a3:aa:b9:01:f5:59:89:11:84:
89:d8:02:c5:f8:3d:e5:48:b0:09:f1:2e:3c:c9:43:
7e:6a:e6:5f:b3:16:fb:d0:f1:ed:00:85:3d:89:67:
72:cc:e5:23:17:8c:c9:f7:f1:93:91:cc:ac:89:bd:
c4:35:07:d2:f7:8e:39:e9:b0:24:36:8d:51:b8:b7:
19:b5:da:b0:d6:8e:f0:86:03:ea:ca:e7:de:10:c6:
38:54:af:6c:a1:b4:da:f3:9d:a1:ab:7b:a0:ec:79:
36:3d:6f:8e:fd:bb:f1:ee:f0:2d:af:99:0d:4b:4e:
2d:31:4a:08:5f:0c:e7:46:0f:e9:09:a6:74:56:b5:
5e:08:2c:be:51:bd:1c:5d:11:4c:6e:63:09:1d:a7:
2d:45:bf:35:7a:0c:8b:a9:95:49:b1:b2:1f:f4:86:
9f:35:02:76:d6:65:68:dc:bb:c0:d9:69:e1:fc:27:
20:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AC:1A:96:02:9C:E3:A6:50:C8:49:A7:BB:8F:F0:2F:1F:A6:33:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qawalgKc46ZQyEmnu4_wLx-mM9w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.152.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:cf:ae:e6:ab:94:15:16:bc:4d:84:35:4a:fe:1f:9d:b1:c8:
b7:5a:69:cc:83:66:dc:6e:50:ce:3f:92:70:a8:a7:75:83:66:
33:62:11:c6:2f:70:b5:dc:cc:0f:f6:8e:fd:13:ec:a9:77:57:
99:3b:9a:84:9a:51:76:ca:7f:65:97:07:d9:99:9b:4c:36:8e:
6b:db:e6:b2:4a:6e:93:3a:c3:69:70:5b:dc:96:2b:9b:b0:49:
87:3e:0d:90:ec:cd:15:74:55:99:15:1a:e1:ec:aa:55:56:2d:
84:0c:3e:c1:93:1a:7d:89:3d:5e:58:3f:58:89:5c:05:a6:6f:
29:c6:ee:30:1b:0d:4a:ab:4d:52:8c:82:5e:62:fb:5a:42:7d:
d5:97:6e:a0:16:86:77:e3:58:8b:15:c8:89:a9:7a:04:11:12:
a6:5b:11:42:15:c5:87:e9:0a:32:e0:6c:35:3c:ea:72:42:d4:
34:ff:57:c9:5e:6b:43:8a:89:32:81:36:b6:8e:69:77:b5:f4:
9b:0c:6b:2e:c4:09:79:56:5a:8c:ab:c3:2c:14:75:70:fb:0e:
ee:53:20:d8:0c:6c:c0:ba:ab:15:8c:c5:8b:b0:23:0f:71:e6:
04:46:aa:59:5e:2f:45:67:e9:0f:e3:4e:c8:f1:a5:7d:5a:c2:
47:8c:07:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:22 2025 by rpki-client