Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wpNVbzuzdGSboFgO302XqCeIGFw.roa
File: wpNVbzuzdGSboFgO302XqCeIGFw.roa (raw, json)
Hash identifier: UtUlOO9l7200NbO0LK/kS6M6qIiOehWzz13EOL7tWY0=
Subject key identifier: C2:93:55:6F:3B:B3:74:64:9B:A0:58:0E:DF:4D:97:A8:27:88:18:5C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36C6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wpNVbzuzdGSboFgO302XqCeIGFw.roa
Signing time: Mon 10 Feb 2025 13:54:40 +0000
ROA not before: Mon 10 Feb 2025 13:54:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.248.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14022 (0x36c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:40 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C293556F3BB374649BA0580EDF4D97A82788185C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:fc:20:56:9f:b4:5c:7a:2d:48:4a:88:c7:
61:08:b6:d7:f4:ec:c3:80:eb:fe:d6:9a:af:e7:54:
82:20:9f:16:23:ae:cb:fe:32:f2:3c:1a:09:94:e5:
32:c5:0e:a9:b1:58:46:17:9e:2d:6e:00:7d:8e:b3:
d3:37:9d:75:79:f5:c0:b7:95:9b:cc:d6:18:46:0d:
e6:54:b7:7c:d4:46:65:62:73:02:05:36:1e:fb:14:
b7:ef:ab:6c:c2:ad:6e:74:5b:50:9f:fb:99:bc:90:
73:3a:e4:64:8a:82:1a:2b:76:97:ff:c1:7b:06:41:
6b:b0:e3:30:5b:2f:0f:10:0b:19:5d:4d:81:f7:d2:
c0:d0:01:8b:12:b4:1e:7e:ca:e6:c7:14:c3:7d:1f:
9f:af:60:51:71:52:6f:d8:c0:8c:37:0e:94:49:8d:
69:73:53:ce:32:57:9d:a2:c6:b2:62:c5:7c:17:eb:
89:f0:cd:63:d0:03:99:d0:a2:c5:55:f4:17:48:49:
b0:6c:b9:4b:0a:2a:33:de:55:51:1e:a3:dd:32:3c:
a1:24:f0:a0:53:01:ec:b3:51:63:c5:9c:36:d1:27:
04:71:07:b5:e2:18:29:06:0b:a4:37:ba:9c:d3:7e:
ca:c4:16:27:4f:7a:09:9e:cc:60:2b:bb:0f:e6:0a:
97:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:93:55:6F:3B:B3:74:64:9B:A0:58:0E:DF:4D:97:A8:27:88:18:5C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wpNVbzuzdGSboFgO302XqCeIGFw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.248.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:ff:ce:90:47:bd:d8:2b:c6:bc:82:d5:37:26:ea:69:3c:cf:
4a:8b:22:40:39:39:ad:f8:5c:38:9a:c7:f4:81:34:d1:e8:26:
7a:a1:8d:0f:79:2d:0a:0b:f5:0c:7c:8c:76:6a:85:5d:7e:8e:
54:cc:28:98:a5:7b:f5:93:a5:2c:44:17:a2:9f:f8:65:e5:7e:
53:60:1d:ba:3e:22:4d:01:0f:68:ea:1b:b8:be:0e:6a:c5:34:
53:ac:9a:8a:65:ec:09:b8:08:4c:ea:a5:71:92:8c:b2:34:aa:
00:bd:f5:0d:fa:9d:0f:2f:e8:e6:ec:fd:d4:0b:81:65:9f:59:
7d:70:24:fd:45:e5:3f:cb:97:80:df:08:d8:7c:e9:a2:b5:f0:
bb:b3:30:56:e7:26:bc:dc:3d:55:c0:78:d2:e9:bb:84:bc:1a:
7d:15:4f:12:a9:e6:f4:65:19:42:5c:b3:e1:5f:7c:7c:ed:b5:
42:7e:62:aa:f3:d0:b3:dd:5c:22:54:c5:21:9e:f9:fc:d5:ec:
50:15:8a:61:eb:2d:2d:69:7e:9c:a0:89:98:83:fb:9f:53:59:
cd:21:0c:ad:42:7c:4e:d1:48:ba:9d:f4:d9:ba:2e:65:4c:12:
be:5f:8d:53:9b:b3:91:5d:92:3c:ed:75:c5:8e:cc:51:6c:e7:
66:7c:57:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:46 2025 by rpki-client