Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ythVEEQhP0kTJ9xBxbv16-OOeE8.roa
File: ythVEEQhP0kTJ9xBxbv16-OOeE8.roa (raw, json)
Hash identifier: gPTyzw/ef0OrHrKunFDQw76nCWutolQw5NVNsUJgEvo=
Subject key identifier: CA:D8:55:10:44:21:3F:49:13:27:DC:41:C5:BB:F5:EB:E3:8E:78:4F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34AA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ythVEEQhP0kTJ9xBxbv16-OOeE8.roa
Signing time: Mon 10 Feb 2025 13:52:36 +0000
ROA not before: Mon 10 Feb 2025 13:52:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13482 (0x34aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:36 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CAD8551044213F491327DC41C5BBF5EBE38E784F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:bf:4b:9f:6e:55:6c:da:52:7b:94:3e:31:
b8:37:8b:b3:bb:ea:87:db:0a:90:f4:20:9a:e8:e2:
12:9c:ee:3c:81:3c:f3:58:39:02:ab:c4:d9:66:09:
c1:8e:7b:e7:29:d3:cb:53:27:26:df:9d:09:82:81:
fc:a1:3b:40:b0:13:de:af:dd:b1:f0:1e:49:56:91:
8f:8e:da:9f:3e:c7:e8:e4:51:61:31:95:8d:44:85:
74:c9:42:69:8e:ab:9e:54:ca:76:bc:cd:8a:bd:a0:
34:ab:74:4c:92:23:1e:72:5c:b3:b9:b2:54:63:22:
e3:57:53:5d:07:bb:51:a2:1f:da:6b:8b:78:78:03:
03:0d:98:95:9c:ba:5d:ba:d3:99:32:75:be:07:93:
63:46:27:60:5e:7d:96:ae:18:3c:62:12:43:4e:9e:
ee:02:76:85:0e:a4:7e:01:a3:7a:85:6d:17:ba:87:
9a:ae:53:84:77:95:bb:32:98:8b:d0:6d:3a:2c:92:
af:6b:ff:01:7a:34:eb:8b:9e:bf:bd:c8:e1:dd:9a:
a5:52:3a:e2:c4:96:28:17:c6:e4:72:a5:3c:e7:b0:
2d:bf:c1:b7:e7:8e:3c:f4:35:c6:e6:3f:4e:1f:d8:
1d:45:69:87:a5:c5:ec:91:a1:0b:e0:c3:ca:33:28:
2d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D8:55:10:44:21:3F:49:13:27:DC:41:C5:BB:F5:EB:E3:8E:78:4F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ythVEEQhP0kTJ9xBxbv16-OOeE8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.252.0/22
Signature Algorithm: sha256WithRSAEncryption
52:a7:a3:77:f8:5a:71:22:b5:12:89:1f:ec:23:19:e0:30:83:
0f:c2:2d:4a:6a:4a:ed:89:f2:91:4a:f2:3a:de:fe:33:2e:88:
6f:05:51:86:c2:c1:33:5c:dc:4f:93:d8:6e:dd:a2:64:86:eb:
43:03:84:af:7a:eb:ef:4c:5c:de:3a:2c:dc:36:27:71:e9:bc:
cd:c2:be:f2:99:50:c4:47:38:9d:14:6e:fe:df:16:de:27:f4:
84:7f:d1:de:4d:6b:f3:60:12:23:83:96:ec:87:d7:e1:3c:f4:
87:55:26:1b:10:f4:be:c9:99:88:ad:de:fa:6f:33:9d:bb:24:
28:d7:33:bc:fe:80:32:57:87:eb:19:fc:41:79:35:12:96:06:
e4:ad:f9:70:fd:cc:eb:13:ce:38:e3:cd:c1:5d:d4:f0:94:ba:
b3:45:d3:28:93:15:12:d4:cc:f9:9b:7c:a0:fa:47:d7:c6:ce:
92:3b:5d:a8:f0:c7:be:9a:25:f2:f6:b6:95:6b:13:f3:3e:f1:
33:f1:32:57:d2:13:9a:c4:46:22:dd:9d:75:a4:50:94:e4:31:
ba:2b:f6:17:c7:81:91:29:b1:e4:d3:de:68:08:95:67:ef:47:
07:35:b0:f5:8e:b4:57:40:5e:96:d8:92:03:4f:35:5e:40:74:
6e:3d:d5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:13 2025 by rpki-client