Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sfiosefNpJ0tJh1EeXMH6-kcaPA.roa
File: sfiosefNpJ0tJh1EeXMH6-kcaPA.roa (raw, json)
Hash identifier: Kf+I/JO1RzXN1nzLEq6Xb0U+qIGaTJGSE0Zr8aOVNCY=
Subject key identifier: B1:F8:A8:B1:E7:CD:A4:9D:2D:26:1D:44:79:73:07:EB:E9:1C:68:F0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3494
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sfiosefNpJ0tJh1EeXMH6-kcaPA.roa
Signing time: Mon 10 Feb 2025 13:52:31 +0000
ROA not before: Mon 10 Feb 2025 13:52:31 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13460 (0x3494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:31 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B1F8A8B1E7CDA49D2D261D44797307EBE91C68F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:af:73:55:a6:90:57:80:1a:96:e8:30:3b:7d:
7d:43:67:b4:d0:ed:4a:de:61:55:d9:ab:c8:51:4f:
f5:91:bb:4d:01:6f:e3:71:07:f6:9f:f8:51:22:8e:
44:0e:6e:d9:6f:a4:90:ec:e3:e8:e3:01:1b:7c:06:
15:29:0e:3b:f7:97:43:9a:fc:ba:ce:85:8a:67:57:
4c:9b:a8:f6:a8:ac:70:34:38:f0:00:c9:09:ae:a2:
e8:f3:c4:c1:49:39:aa:ec:b8:29:65:7a:92:d0:f3:
14:c7:03:9f:af:d3:f1:0f:f1:b4:79:8b:a9:7b:81:
df:01:dc:a6:01:1b:93:f2:ef:19:b0:1c:c1:71:f3:
1e:01:5f:52:1b:57:b9:0c:20:04:af:fb:67:41:b2:
7b:5c:b8:c8:63:32:60:cc:35:2a:49:e5:fc:49:d9:
bf:ba:cf:63:75:47:46:56:9c:40:66:49:68:a6:98:
62:dc:97:93:4a:4d:6c:81:02:63:41:77:3c:86:76:
8e:75:cb:26:70:14:b3:75:7b:16:33:72:04:ab:db:
ce:cc:31:2c:3e:b7:c1:0f:a1:88:3d:76:7e:74:29:
39:52:a4:55:8c:56:e8:53:c6:dd:63:59:3e:9c:35:
d5:27:fc:56:40:68:7b:2d:e4:70:5f:2b:60:e1:36:
24:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F8:A8:B1:E7:CD:A4:9D:2D:26:1D:44:79:73:07:EB:E9:1C:68:F0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sfiosefNpJ0tJh1EeXMH6-kcaPA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.156.0/22
Signature Algorithm: sha256WithRSAEncryption
65:c9:a3:09:c9:0e:21:15:4b:53:32:bb:1c:43:62:52:83:47:
31:65:ff:4b:4e:1e:72:4b:3c:f8:2e:22:47:b0:b0:30:a7:f3:
40:df:7c:63:fa:45:4b:f5:7b:c7:01:dc:0d:c2:1e:f0:bd:a6:
8b:cd:37:47:fb:3b:71:95:c6:6b:25:f2:96:7e:f9:e5:97:22:
e6:de:56:6f:9f:86:ae:1c:36:ac:c4:d5:18:6c:ca:13:99:80:
a6:c6:84:f7:6e:e1:c3:f6:9c:63:a6:60:5e:0e:3a:a9:16:b2:
d0:10:fb:a0:f4:1b:a9:a4:e1:30:bc:41:64:59:e7:99:d1:13:
77:ea:1d:e0:68:0e:2c:6f:7f:ab:bc:0c:58:5b:88:8f:bf:4f:
b4:63:52:9f:0c:d6:b4:97:44:dd:59:6a:d7:dd:ae:e7:ab:02:
d2:70:e4:f5:26:57:f0:f3:01:67:d5:18:7b:f4:89:6c:69:b3:
71:65:41:8c:0e:3f:8d:2a:8e:d3:7d:55:3c:e1:39:58:4b:41:
ce:a9:df:0b:b9:d0:35:26:7b:30:a5:6d:93:61:67:fa:b0:5e:
ea:b1:82:e0:7f:91:5d:8a:47:7d:58:de:09:b1:19:da:95:8e:
ce:35:b1:d5:e0:75:58:f7:70:cf:b7:2f:9f:44:69:78:8a:e4:
2d:37:55:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:51 2025 by rpki-client