Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qcELtnbWTyuFLJRWbIWWMXxmg9U.roa
File: qcELtnbWTyuFLJRWbIWWMXxmg9U.roa (raw, json)
Hash identifier: WRwd3oaj6PGgIXvEeiTmFai3JeXGcc4VPOEKhyOWe/0=
Subject key identifier: A9:C1:0B:B6:76:D6:4F:2B:85:2C:94:56:6C:85:96:31:7C:66:83:D5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 337D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qcELtnbWTyuFLJRWbIWWMXxmg9U.roa
Signing time: Mon 10 Feb 2025 13:51:29 +0000
ROA not before: Mon 10 Feb 2025 13:51:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13181 (0x337d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A9C10BB676D64F2B852C94566C8596317C6683D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:1f:aa:cd:fd:c7:9c:3f:34:d8:f6:c7:bd:
77:3f:e1:dd:58:e0:c6:8d:f7:66:36:55:73:ec:ce:
7d:27:eb:f4:01:6c:d6:ac:88:9a:30:6d:f8:9c:b8:
37:a7:6f:93:d6:fa:a5:63:0e:7b:ad:fa:93:eb:30:
f8:cd:62:bd:d5:6e:17:1f:17:8e:ce:6a:8c:fc:21:
37:24:b8:4e:b2:94:c8:f6:e6:b8:a3:9a:9f:b2:1d:
1c:62:8e:32:e8:99:53:77:57:f1:e4:5b:50:ad:8d:
4f:aa:f3:a7:33:65:c3:4d:51:50:4a:38:fc:6f:91:
9a:3f:8a:6f:31:9d:9b:5a:5f:c8:47:e6:b9:2d:b4:
4b:ef:84:52:a6:04:50:04:c8:b1:6e:88:58:a2:6f:
9f:69:b2:0e:5b:84:37:1e:20:a8:38:c7:1e:a6:dc:
e6:6a:23:58:68:62:46:2f:c3:6f:ce:e0:7e:0f:59:
4e:c5:fe:a0:44:a3:07:42:81:f0:4f:b0:36:d3:0f:
42:ef:28:f9:5b:18:00:b8:69:e6:58:f0:09:85:58:
76:bb:a6:a0:11:25:e5:d8:dc:0a:71:5b:dc:82:df:
92:2d:12:13:5a:56:b0:e2:a8:89:33:df:48:1f:86:
27:05:bc:83:2d:7e:b4:c3:d6:32:79:9e:e3:e3:eb:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C1:0B:B6:76:D6:4F:2B:85:2C:94:56:6C:85:96:31:7C:66:83:D5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qcELtnbWTyuFLJRWbIWWMXxmg9U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.168.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:fc:2c:27:9d:4c:5f:a1:99:bd:ef:36:12:3b:35:a8:cf:d9:
d5:b2:38:39:a9:f7:b4:8d:e5:45:63:03:a7:25:91:36:42:1a:
5b:d8:00:3e:af:69:2e:09:c0:77:31:69:5b:1f:c1:33:a1:ba:
f9:5a:43:99:8b:1b:57:c7:c4:46:d1:7c:21:cc:59:b4:3d:56:
a3:5b:c9:6b:27:df:60:81:7f:19:e7:48:9f:64:fa:44:9b:80:
1a:d8:d0:0b:23:f6:4c:91:91:0b:ca:52:76:e4:3a:d2:72:57:
58:bb:55:40:1e:df:25:2b:77:ff:ed:f4:f9:ba:b6:ff:4d:2f:
d0:bf:38:df:97:1c:7d:8a:cc:52:cd:99:84:cf:64:71:24:36:
72:2f:ae:0a:da:41:06:06:98:fe:36:c1:88:25:f2:25:4c:9e:
c2:08:2b:3c:30:d4:86:be:8a:94:96:3e:05:15:ca:d8:c5:9a:
15:ca:2b:75:5b:4e:e9:c8:ae:68:a4:16:4a:4b:50:db:97:7b:
98:86:1f:19:5d:83:0c:cf:eb:58:2c:04:72:14:27:22:a5:59:
81:08:0f:50:a2:5e:55:c7:a0:6a:d3:42:e8:17:57:77:70:26:
25:c6:0d:18:07:14:0f:13:8a:bd:5e:09:34:c2:a7:21:40:5a:
35:aa:f3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:19 2025 by rpki-client