Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxEVCF7AAPwF2mwUQAMKubZ1lUw.roa
File: uxEVCF7AAPwF2mwUQAMKubZ1lUw.roa (raw, json)
Hash identifier: qQqjEZBOsoft5xHMQ9r270+/0KuUTI9ocMEy9tzRhic=
Subject key identifier: BB:11:15:08:5E:C0:00:FC:05:DA:6C:14:40:03:0A:B9:B6:75:95:4C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35EB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxEVCF7AAPwF2mwUQAMKubZ1lUw.roa
Signing time: Mon 10 Feb 2025 13:53:49 +0000
ROA not before: Mon 10 Feb 2025 13:53:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13803 (0x35eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:49 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BB1115085EC000FC05DA6C1440030AB9B675954C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:07:47:f5:b2:c8:11:b0:4b:87:cf:5c:29:
d3:1e:19:90:ce:5d:81:e3:32:37:b0:a4:d9:e8:78:
5c:4f:e8:b7:83:ed:76:74:fe:e1:b9:30:4d:c7:eb:
0b:ec:a3:e1:38:09:75:02:c1:11:e3:a3:41:d9:5a:
fb:34:f1:ea:10:42:04:57:b7:40:47:26:25:09:a1:
7f:d8:e3:85:d2:b8:fc:57:70:ee:e8:8a:42:db:d1:
1c:5b:b4:a3:79:e7:20:25:af:86:74:78:03:69:40:
30:6a:35:d4:e8:e6:d3:1e:c6:28:d8:2a:16:e6:b4:
96:7a:dc:a8:97:08:c8:f9:f9:1b:8e:a8:ab:6b:2b:
c5:21:06:14:6d:ef:b9:2a:0a:98:26:b8:6b:94:0f:
f4:89:05:ff:85:10:be:e4:fa:96:db:b9:36:15:c4:
09:ff:4f:72:01:26:6f:32:4c:75:cf:49:bb:0c:7a:
f5:84:95:b7:0d:5b:2f:9e:60:86:75:b7:c9:ee:fa:
d0:2f:cb:0a:b5:ff:d7:11:8b:ad:e7:a5:65:f9:44:
76:92:c7:37:46:ab:0f:66:66:f4:9a:1c:96:23:21:
4f:a3:d6:06:b5:7c:f4:b3:1c:ce:7d:64:77:c6:6c:
47:97:3d:af:88:e8:87:3b:a4:1d:9c:6f:63:4f:fc:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:11:15:08:5E:C0:00:FC:05:DA:6C:14:40:03:0A:B9:B6:75:95:4C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxEVCF7AAPwF2mwUQAMKubZ1lUw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/17
Signature Algorithm: sha256WithRSAEncryption
2c:4c:c1:6c:8e:c7:df:cb:c6:09:cf:07:37:b4:c9:ad:48:3b:
94:3c:35:ab:ff:49:cd:29:93:9d:60:21:97:ec:08:1c:b0:61:
21:90:10:0f:d1:d5:84:2f:e6:ef:b5:c5:48:f6:d3:b7:f8:72:
9e:26:e2:e3:1f:40:aa:c6:a5:d1:b9:13:3b:86:ab:5c:37:3a:
05:70:cb:02:c8:d3:9a:c6:7a:ce:c1:86:cb:da:df:9e:86:5b:
4f:b9:9c:30:c2:40:3f:ce:78:d6:b7:29:2d:e3:84:bd:f6:27:
86:4c:e9:27:6b:95:5b:cc:99:f2:2f:d0:74:07:a3:d8:4d:2c:
b7:75:3a:00:32:6d:71:40:92:06:fd:85:d6:00:04:93:6d:7a:
e1:15:a1:1d:73:5d:d7:ca:49:cb:cb:30:f0:4f:a0:54:2c:95:
5d:e2:f1:f7:0d:6a:33:f5:c0:94:ca:9c:25:c3:ce:cb:03:40:
3a:61:b1:c0:30:cd:13:b6:72:a1:f0:ab:b1:b0:32:59:8f:bd:
a0:9b:27:1d:8a:da:4f:76:14:26:8b:ea:87:cb:d1:e5:f1:4e:
d1:3d:5b:ad:ee:01:13:46:b1:c4:82:3c:3b:1c:f0:39:e1:f7:
4f:19:a6:00:9d:f6:53:3c:76:7c:60:7c:09:a0:a6:07:8c:d7:
37:49:c8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:12 2025 by rpki-client