Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uj1McfG0R9lyysRmlpLouHaHCCI.roa
File: uj1McfG0R9lyysRmlpLouHaHCCI.roa (raw, json)
Hash identifier: ywYTiuPDCKKs1Zj+eIYMErPXWNng3IyAPL0FgplEurI=
Subject key identifier: BA:3D:4C:71:F1:B4:47:D9:72:CA:C4:66:96:92:E8:B8:76:87:08:22
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35DB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uj1McfG0R9lyysRmlpLouHaHCCI.roa
Signing time: Mon 10 Feb 2025 13:53:45 +0000
ROA not before: Mon 10 Feb 2025 13:53:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13787 (0x35db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BA3D4C71F1B447D972CAC4669692E8B876870822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:17:ac:12:64:94:cd:a0:66:01:5b:2c:fb:
24:9e:b1:92:dc:76:ec:6b:d9:53:04:82:cc:84:42:
cc:ea:e6:fb:78:36:d0:6f:51:99:02:59:b4:51:67:
59:c7:29:25:7d:da:0a:32:4c:f2:a9:a8:21:c6:ef:
77:81:d0:eb:26:e7:80:34:57:d9:43:f8:7e:78:ac:
5e:a6:da:b1:cf:8e:96:8b:22:f6:14:52:7c:60:8a:
0f:17:f9:de:21:52:16:7d:d6:e6:9f:e3:32:45:2b:
7b:50:4b:84:d5:d3:ee:d6:a7:1f:51:d8:db:15:7d:
7d:d8:b6:9d:f9:0e:71:72:42:9a:2d:ee:f5:04:8b:
da:26:cf:d8:1b:5a:e5:ab:44:ad:72:62:33:de:6e:
07:a2:c4:99:14:7e:51:98:0f:78:3c:df:50:5f:cb:
db:fe:5f:e5:96:56:7d:86:4f:2e:15:6e:3b:e5:64:
e3:d4:43:09:6c:0b:39:d1:1d:50:df:54:b5:d5:57:
a0:75:a3:88:bb:a5:26:f9:7e:83:c9:a9:20:92:01:
8b:ce:01:5c:6e:75:f3:20:b4:3d:a6:56:97:1f:9c:
5e:cc:7b:58:32:83:25:fb:12:3a:0b:42:a0:16:81:
5b:81:af:07:29:92:65:15:a6:7c:ba:43:ed:51:77:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3D:4C:71:F1:B4:47:D9:72:CA:C4:66:96:92:E8:B8:76:87:08:22
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uj1McfG0R9lyysRmlpLouHaHCCI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.224.0/21
Signature Algorithm: sha256WithRSAEncryption
51:11:21:b0:39:6d:d0:a3:85:0a:2e:8e:38:5f:dd:56:98:7f:
da:7d:34:a4:32:a7:2b:65:7c:86:d1:c7:42:8a:b2:42:03:04:
a3:d7:90:87:62:57:2d:6c:a8:30:06:ad:95:13:bd:82:9e:7d:
24:91:fe:c5:dc:76:56:13:a0:fa:14:a7:41:e3:23:7b:fd:43:
37:99:62:a1:f6:07:e8:5c:d0:22:ec:2d:e8:38:4a:98:fa:12:
15:2e:59:d7:bf:3c:32:60:25:61:fe:35:59:75:ad:33:af:43:
bd:da:be:bc:4a:86:e2:88:a5:44:2a:01:89:c0:ea:86:d3:f6:
0b:12:9f:58:2a:dc:f4:25:87:a8:62:55:5d:a8:c1:95:e5:d9:
61:b3:8b:31:59:9b:64:4b:80:89:de:c5:47:21:eb:e4:bb:d0:
3a:d0:fb:14:98:4c:55:62:02:a3:10:13:a8:34:96:61:43:4f:
80:d2:ef:4f:e5:62:17:8b:ee:dd:23:6f:a7:b6:d7:f7:48:5e:
f8:07:5d:bc:9c:1f:66:84:38:ce:ea:83:9d:20:cd:b1:bd:c9:
46:a2:b8:89:7e:81:f1:84:d5:d5:93:a0:e7:4b:ea:8f:58:1a:
31:0d:6b:0e:d5:98:a4:62:1f:a8:7b:ab:96:ac:8c:61:83:0b:
32:a5:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:24 2025 by rpki-client