Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ulHcTMK-EgLFeWlkRsw2DMiGXEA.roa
File: ulHcTMK-EgLFeWlkRsw2DMiGXEA.roa (raw, json)
Hash identifier: Y9dtjxjzsL5FrP4NizPHTQy4uIjzcvcLJi8RluNw2gs=
Subject key identifier: BA:51:DC:4C:C2:BE:12:02:C5:79:69:64:46:CC:36:0C:C8:86:5C:40
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3589
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ulHcTMK-EgLFeWlkRsw2DMiGXEA.roa
Signing time: Mon 10 Feb 2025 13:53:27 +0000
ROA not before: Mon 10 Feb 2025 13:53:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.238.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13705 (0x3589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BA51DC4CC2BE1202C579696446CC360CC8865C40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:fc:0c:95:a5:20:24:4d:45:bf:17:d4:f4:
ed:44:a0:9d:9a:0b:46:d6:fa:d6:1c:95:2b:79:bd:
24:19:d5:4e:fe:8a:49:db:6e:93:48:e1:c0:28:15:
8f:10:c3:37:1a:c2:fb:25:c5:56:aa:52:b5:c5:cc:
84:85:3e:e7:b5:f9:f3:ba:bb:9c:3d:99:03:08:ef:
e3:cf:ca:2c:4d:5d:5d:3a:b8:52:7a:e7:cf:bc:df:
b0:52:16:73:3f:13:7f:1f:66:98:a6:a5:09:3f:86:
d9:a8:d7:ff:bf:c4:28:8f:be:0d:8e:d8:b2:5e:ab:
77:82:70:70:2d:71:33:a9:c1:db:37:62:31:92:0f:
ff:a0:4a:b9:9d:76:41:6d:17:f7:8d:8f:a6:30:a2:
05:64:e3:8c:1d:fc:d8:8a:fb:2c:c6:be:31:84:7b:
42:69:d3:17:aa:63:6d:42:60:33:fd:c9:fa:2b:f3:
57:ab:09:94:ec:25:44:40:62:ed:c1:64:9e:3d:d2:
15:7b:e5:54:d0:05:46:60:5b:32:6b:09:f4:4b:5f:
2e:0c:22:cb:5a:51:84:a3:16:14:71:73:60:73:2d:
c7:a4:b4:1a:4b:ff:c3:f0:1b:a8:24:17:8f:d7:25:
b2:4a:eb:b8:e6:db:c0:db:0c:8d:af:69:d8:e6:ac:
ba:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:51:DC:4C:C2:BE:12:02:C5:79:69:64:46:CC:36:0C:C8:86:5C:40
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ulHcTMK-EgLFeWlkRsw2DMiGXEA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.238.0/25
Signature Algorithm: sha256WithRSAEncryption
19:b9:b4:ed:92:dd:84:78:f7:4f:22:c0:2b:83:8d:87:7d:9c:
45:0a:3f:98:83:b0:13:eb:d6:a0:32:81:a0:70:c2:b7:1f:40:
1a:62:5d:cc:5d:f8:d8:96:2a:02:05:4b:31:30:a0:2f:21:92:
36:4a:d4:fd:a0:32:df:9c:a3:bb:c1:91:b8:4a:2b:aa:8a:9b:
e5:a8:d3:e7:cd:a8:c7:be:55:4c:ef:b8:a4:a1:95:ab:42:f5:
21:06:3f:9f:f9:51:c4:b9:08:0b:f5:6e:d3:a7:2b:9c:4f:f0:
8f:cb:51:e6:c7:69:6f:e0:4a:de:2f:2e:75:1e:e7:ef:aa:b7:
4c:e6:8e:d8:be:a7:51:59:2b:05:55:ff:4d:1a:77:1f:1c:eb:
3f:73:68:b6:26:6e:14:61:ab:f3:4e:6d:b7:78:be:46:79:9a:
83:fc:6c:6d:e2:cc:d8:96:94:c1:a8:39:b3:91:cf:df:14:b6:
6b:6b:6a:80:cd:b2:fb:2c:49:f3:92:54:49:31:a1:f9:21:e4:
9a:07:8e:64:32:28:5b:d4:42:56:6c:ce:6b:0b:87:2b:a0:75:
59:60:c2:b8:cb:c7:6c:64:4a:fd:72:b0:59:3d:51:ad:05:92:
08:4d:72:48:9b:eb:3f:03:a0:0a:37:7e:bf:b9:84:1d:c9:d3:
0f:fa:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:26 2025 by rpki-client