Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tmVsakSYZU4XEJdFPfTqMKJHHsA.roa
File: tmVsakSYZU4XEJdFPfTqMKJHHsA.roa (raw, json)
Hash identifier: 0FUx6UeGk3z5Y2pn0izUosGa1Mi1tqQvtCUV/i0OO00=
Subject key identifier: B6:65:6C:6A:44:98:65:4E:17:10:97:45:3D:F4:EA:30:A2:47:1E:C0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 359C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tmVsakSYZU4XEJdFPfTqMKJHHsA.roa
Signing time: Mon 10 Feb 2025 13:53:31 +0000
ROA not before: Mon 10 Feb 2025 13:53:31 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.108.128/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13724 (0x359c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:31 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B6656C6A4498654E171097453DF4EA30A2471EC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e3:44:70:71:eb:40:92:be:f7:2d:cf:65:58:
fe:10:3d:1f:c9:3e:7d:1b:10:89:9a:57:9e:7e:6f:
c6:3f:e1:96:a3:2a:b4:78:ec:ce:de:9f:f1:79:65:
e5:ff:3a:00:3f:3b:4c:ef:ca:fc:aa:62:45:64:62:
cc:7f:f0:2e:80:19:75:3f:c3:d4:65:06:6c:f9:30:
24:9b:11:fb:dd:3d:ec:fd:a9:e5:5e:bb:14:66:e9:
f7:e0:be:f0:9d:cd:ae:ce:0b:ad:13:fd:1a:16:3b:
59:46:d6:b6:d9:c9:43:6b:71:93:55:00:fa:1a:66:
ba:25:bc:3d:10:55:da:ff:d3:3e:3d:91:0e:03:94:
32:26:e1:70:77:a5:22:ef:48:84:bd:93:45:0f:00:
43:32:65:ae:da:e8:c6:f6:64:a5:1a:f6:a5:02:2d:
90:20:59:e7:3e:06:d9:11:13:7c:37:12:09:03:1a:
7e:ad:d6:ec:21:40:e6:e4:49:2c:a7:4a:fa:79:b3:
7b:12:d2:9a:44:e5:9f:72:bb:38:c4:26:77:19:25:
47:c1:78:61:08:fc:47:af:78:8c:00:90:0e:2a:23:
f6:26:3c:85:9d:ec:a3:21:a1:2e:7c:63:50:d9:37:
43:85:61:2d:03:36:1d:a3:6c:5f:f5:a5:3d:d1:a9:
11:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:65:6C:6A:44:98:65:4E:17:10:97:45:3D:F4:EA:30:A2:47:1E:C0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tmVsakSYZU4XEJdFPfTqMKJHHsA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.108.128/30
Signature Algorithm: sha256WithRSAEncryption
14:4f:ad:21:47:17:77:3d:b2:f1:95:db:9d:fc:a9:47:b7:9a:
45:fe:58:cf:21:ed:22:ff:fd:c9:2e:5f:81:be:39:c4:11:cb:
0b:8c:e4:8c:f8:6e:3d:f4:37:cb:ab:ce:04:1e:bb:9e:ab:5f:
fa:53:c5:78:b3:3c:fa:af:8f:20:43:29:aa:87:6a:94:62:07:
9d:b4:b2:4e:f2:8b:83:61:be:de:d1:d9:64:0a:b0:14:d6:ca:
4b:e1:5d:ea:64:8f:da:07:84:dd:37:f8:c5:3b:46:21:2f:72:
8f:b5:96:97:a9:e4:9e:76:17:cc:62:60:72:f3:42:7c:91:d2:
80:83:bf:14:3a:eb:ad:ad:85:2d:20:eb:9a:93:b8:f0:58:eb:
e5:22:eb:ab:e7:67:b3:b6:1c:3f:67:7f:c4:91:51:42:74:b6:
e9:23:b4:15:3e:8d:91:e2:f5:c0:b2:1d:f2:a5:7e:24:bc:17:
f3:4c:2f:58:bf:6b:5d:fa:31:d6:a2:9b:1d:6b:b5:bb:6e:0c:
c5:74:f6:39:2b:7c:76:7c:58:4e:4f:1f:cf:cc:be:aa:39:3a:
46:61:88:85:67:62:96:df:e7:07:dc:b4:d9:da:a5:30:36:66:
76:27:03:ad:83:dc:82:1b:67:32:52:f8:bc:45:78:d1:a6:8a:
9c:e9:73:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:06 2025 by rpki-client