Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yMXpKgmTxDGYTA6aqPbTtqS0rx4.roa
File: yMXpKgmTxDGYTA6aqPbTtqS0rx4.roa (raw, json)
Hash identifier: veCKcMCd+Xv8hJvE+h4kXE2HVQlpfNoWgzMGvngI5TU=
Subject key identifier: C8:C5:E9:2A:09:93:C4:31:98:4C:0E:9A:A8:F6:D3:B6:A4:B4:AF:1E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34F8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yMXpKgmTxDGYTA6aqPbTtqS0rx4.roa
Signing time: Mon 10 Feb 2025 13:52:52 +0000
ROA not before: Mon 10 Feb 2025 13:52:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.204.96/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13560 (0x34f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C8C5E92A0993C431984C0E9AA8F6D3B6A4B4AF1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:37:f1:2d:c5:7e:d5:1c:3a:51:98:a8:b4:
53:0f:6a:a8:76:7b:59:60:ab:9d:9b:a0:06:0e:aa:
ac:77:b9:c2:bd:f5:91:92:dd:29:06:76:57:8e:54:
fd:0f:ea:73:f5:97:fd:2f:82:94:be:85:09:bf:04:
d1:f2:7e:c7:e5:93:a5:3c:50:04:f7:f5:b6:2b:0c:
31:f0:bf:fa:a0:10:93:b9:d1:09:df:d6:fc:a0:e7:
c0:d3:18:31:19:d4:39:fd:ec:3d:c8:9a:c9:99:89:
3e:fd:9d:6f:7b:5b:85:3b:99:6d:7c:31:ae:e9:da:
54:15:ac:b1:92:ce:fb:db:43:0d:58:ed:c5:fa:5b:
7c:53:37:0c:d3:49:d4:a7:a7:0b:82:88:49:a0:ea:
e0:82:b5:0d:bd:f6:c3:b4:f4:01:d5:3e:0a:f8:1d:
d6:0f:cd:79:a6:5a:4f:2d:38:a8:fa:dd:69:45:d3:
5c:2f:71:59:e6:46:c2:6e:8e:9f:f3:d6:6b:f4:54:
27:82:79:08:63:01:fe:89:7b:42:3c:d8:83:4c:6c:
4f:94:11:2d:db:ae:eb:20:c6:32:0d:21:f9:37:14:
50:d8:54:f8:d3:ee:6d:bd:97:0d:19:a0:82:4a:ee:
a0:eb:c8:4a:00:ff:1c:43:58:7c:99:53:a2:8e:f8:
f3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C5:E9:2A:09:93:C4:31:98:4C:0E:9A:A8:F6:D3:B6:A4:B4:AF:1E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yMXpKgmTxDGYTA6aqPbTtqS0rx4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.96/29
Signature Algorithm: sha256WithRSAEncryption
02:e9:48:27:1f:a8:6d:63:72:59:6d:70:ef:e0:52:d0:98:0d:
17:45:d9:23:ee:0d:d1:a9:4c:b2:38:7e:cb:d6:1a:37:86:57:
cd:64:7a:55:5b:67:15:fd:91:0d:24:de:99:d7:b8:11:20:92:
c4:05:25:36:e2:f3:62:ca:d3:ad:f6:7e:9f:30:52:49:da:ad:
34:42:ca:f1:0c:53:e1:1d:ba:3f:ff:5d:10:00:1a:de:02:2e:
33:60:1c:91:82:0d:d0:1e:59:09:cc:d3:7f:c9:10:1b:e7:78:
c4:52:c4:0e:d7:f4:b8:88:98:61:12:40:9e:7d:fa:84:e0:df:
57:01:79:06:08:78:60:8c:04:82:21:36:ed:15:2a:a5:1e:da:
02:63:e8:4a:7c:c9:0c:0a:56:f9:6b:f3:c4:b1:54:1e:c0:d4:
e6:54:52:bb:e4:b6:b5:b8:5c:23:3a:b6:f7:22:91:51:f6:52:
5f:a1:ac:df:13:1e:37:ff:c7:f4:17:1d:81:7e:fc:01:a9:93:
1c:28:dd:81:49:bb:b8:b8:2e:4c:39:11:6f:50:c1:b6:e7:42:
b8:c6:11:76:84:16:a2:2f:22:f2:6b:65:f1:b9:36:32:01:46:
fb:80:94:28:97:f8:f9:ca:ab:d6:74:4b:df:95:86:39:f2:f7:
04:7d:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:37 2025 by rpki-client