Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z8C5ySGib81X21QxDvArPyCBq5g.roa
File: z8C5ySGib81X21QxDvArPyCBq5g.roa (raw, json)
Hash identifier: iZP3e96p9HkqtDhbogWY9Tosii5xwVnv3raAmYS6ekQ=
Subject key identifier: CF:C0:B9:C9:21:A2:6F:CD:57:DB:54:31:0E:F0:2B:3F:20:81:AB:98
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3378
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z8C5ySGib81X21QxDvArPyCBq5g.roa
Signing time: Mon 10 Feb 2025 13:51:27 +0000
ROA not before: Mon 10 Feb 2025 13:51:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13176 (0x3378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CFC0B9C921A26FCD57DB54310EF02B3F2081AB98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:1e:8d:3d:ad:70:de:be:f4:01:9e:2e:a6:
0d:bd:83:1b:cd:bc:b0:06:41:ab:28:94:43:d9:52:
8a:e0:50:34:d9:0b:1d:dd:60:ec:66:11:7e:4f:c9:
c6:08:08:19:e2:ba:c5:3f:eb:f4:77:20:e0:c3:8d:
3f:3a:49:3f:d1:57:c0:74:c4:f4:5d:3a:0d:6c:8f:
1a:18:98:c1:30:a0:40:d8:17:c1:98:4b:41:1c:e6:
b8:83:7f:98:a2:17:ad:e4:8d:34:88:56:00:0b:fa:
f8:4d:36:0c:44:9f:b3:9e:87:35:06:76:b3:78:9c:
6c:5c:e9:a2:d6:d6:8a:4d:a0:92:b4:f6:fd:83:ee:
e4:5e:66:55:52:52:6b:60:10:3e:ae:6f:67:44:23:
05:11:7c:4d:f5:9d:ee:96:17:b0:9e:42:77:94:8a:
c9:b8:7f:40:2e:0b:91:e0:1d:b4:92:df:12:09:39:
82:64:9f:eb:5e:c5:10:8e:c1:78:cc:c5:54:b2:6a:
ef:29:91:28:c6:d4:de:4b:4d:50:26:08:a9:4e:54:
44:7c:a5:72:c6:c4:69:02:58:3c:7a:6b:eb:a4:1e:
43:b0:7f:46:a5:cf:0d:89:20:47:54:ff:7f:69:e2:
3e:3d:44:96:b9:21:75:5b:26:3b:f4:3c:fb:6d:e3:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C0:B9:C9:21:A2:6F:CD:57:DB:54:31:0E:F0:2B:3F:20:81:AB:98
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z8C5ySGib81X21QxDvArPyCBq5g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.200.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:6f:b5:5c:3d:6c:bc:4c:97:60:71:4f:fc:9d:bb:c5:9e:ee:
ad:ab:16:19:9b:68:fb:50:cf:bf:a6:8d:3d:56:38:5f:b5:18:
9e:b2:85:f7:1f:84:26:1a:8d:af:f2:54:15:3a:b1:55:37:95:
af:9e:80:b4:3c:fb:ce:51:2c:3e:ad:a9:36:23:94:4a:ec:4c:
c6:08:bd:55:81:6c:31:69:d6:02:be:c0:04:11:96:f7:16:cb:
41:a8:46:fa:57:80:37:e8:f1:22:86:64:1a:29:70:a6:27:b9:
d9:62:59:4b:70:bd:ea:37:af:c5:3c:5a:c6:ea:96:7b:e8:2a:
eb:62:b2:8b:fc:3f:da:3b:3e:74:dd:47:17:84:2b:85:3b:f4:
1e:d6:a8:9e:53:3a:7f:f3:b8:27:e8:fa:c0:9a:1b:36:7f:e2:
e4:ca:82:f9:ed:8c:2e:67:aa:b3:01:50:4a:2f:cc:9e:db:10:
a8:35:bb:aa:1f:b9:95:a1:b4:53:44:63:fe:ee:f4:25:b9:b7:
30:86:b7:65:d3:ec:5c:69:2f:ff:bb:9d:f2:ca:b9:ac:91:de:
1c:4a:bf:57:33:99:1e:a0:95:2d:0f:5e:47:1a:29:ef:a1:97:
d3:af:f8:6b:51:8f:c3:c1:2c:62:16:1a:93:34:c6:94:a5:f8:
d9:29:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:58 2025 by rpki-client