Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z-ItcxQVM_CTxaweuhQwGkPEqJ0.roa
File: z-ItcxQVM_CTxaweuhQwGkPEqJ0.roa (raw, json)
Hash identifier: al/6W8U1WWTfo0maMAbZDe6EUX1HG3f+h5STp0cd1Vc=
Subject key identifier: CF:E2:2D:73:14:15:33:F0:93:C5:AC:1E:BA:14:30:1A:43:C4:A8:9D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3618
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z-ItcxQVM_CTxaweuhQwGkPEqJ0.roa
Signing time: Mon 10 Feb 2025 13:53:58 +0000
ROA not before: Mon 10 Feb 2025 13:53:58 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13848 (0x3618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:58 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CFE22D73141533F093C5AC1EBA14301A43C4A89D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:af:e6:75:24:6b:23:c5:d7:34:65:83:98:
7c:0b:ed:94:77:08:94:ea:0c:15:ad:89:63:94:a7:
a4:d3:9a:e9:47:8e:f9:20:38:63:69:16:4a:70:41:
96:53:c9:98:04:14:80:98:bc:84:fd:35:74:9f:18:
4b:a0:54:a4:b0:17:49:52:92:b8:e4:96:57:da:e5:
b1:10:74:8c:74:5c:47:66:69:55:31:6a:ad:fe:5e:
af:67:35:72:68:fd:78:9a:22:28:b2:a1:fd:ec:f4:
73:59:1b:25:3d:cd:58:fc:78:5f:bb:ca:73:ed:2c:
af:63:e1:77:a1:8e:27:64:fe:ea:5c:f8:63:bd:4f:
1a:ca:33:81:55:7b:a5:74:47:56:db:20:fc:46:8f:
0f:a6:69:65:a9:a4:7a:a7:69:20:cd:83:63:05:45:
74:a7:8d:65:11:f2:b2:d8:03:ca:5b:bc:b0:50:11:
b2:9a:30:28:b8:1d:de:27:d5:1b:d5:16:ca:39:2c:
b6:20:48:66:04:8b:0f:5d:69:05:2c:3e:9f:40:31:
cc:6a:d3:6c:e3:ea:95:90:57:eb:dc:5b:2b:c7:b0:
a1:db:5e:7d:ec:b0:a9:42:32:cb:fb:e7:32:fb:c1:
af:a8:01:85:37:f4:d2:f2:85:5b:0b:d1:6c:b4:ef:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E2:2D:73:14:15:33:F0:93:C5:AC:1E:BA:14:30:1A:43:C4:A8:9D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z-ItcxQVM_CTxaweuhQwGkPEqJ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.172.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:58:40:c3:ab:35:3d:cd:4b:50:8a:34:27:2a:21:45:70:47:
af:1c:e2:04:27:50:61:56:cf:f2:6f:86:35:72:91:d8:df:74:
ad:b2:15:00:87:86:cc:93:10:66:81:42:4b:a7:94:af:cf:69:
5b:45:0b:40:db:8f:bd:6a:79:3d:f6:e9:77:de:3d:41:0d:a7:
d0:cd:a1:8c:6a:75:3b:4a:47:09:11:5a:64:71:82:03:92:2f:
be:85:4d:43:0c:48:ea:46:99:ab:9b:fd:d0:b6:4c:54:09:90:
21:3b:58:58:70:a4:7d:a4:41:51:82:68:a8:99:b3:3c:e6:aa:
45:a5:1d:63:f0:23:9d:b9:12:80:d0:5e:53:ea:c0:c6:4e:04:
4e:e6:83:d1:35:18:dd:f0:04:34:1b:09:8a:e9:f4:0b:e7:3d:
e3:2a:e3:17:4f:f3:eb:80:94:36:0c:1a:85:32:22:f9:b6:20:
10:8a:3e:02:5e:16:3a:b1:de:9e:52:ce:f5:f1:d4:5e:2e:af:
c7:53:83:f0:80:a2:63:5a:7f:f6:7b:e3:37:80:ee:82:7d:9f:
2d:45:d7:08:58:53:ed:45:7f:91:45:0e:6f:aa:c1:6c:85:b2:
df:3a:7c:22:f7:3b:70:db:25:7f:41:31:83:8b:6c:7e:94:0b:
f8:f2:2a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:21 2025 by rpki-client