Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PbQNxoTMLQrmujy4lWp_ISgDjWU.roa
File: PbQNxoTMLQrmujy4lWp_ISgDjWU.roa (raw, json)
Hash identifier: nr0j5VR1EgzePhE7xG10voHCsMUAz2QMGUH8TXeK+Mk=
Subject key identifier: 3D:B4:0D:C6:84:CC:2D:0A:E6:BA:3C:B8:95:6A:7F:21:28:03:8D:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 32C5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PbQNxoTMLQrmujy4lWp_ISgDjWU.roa
Signing time: Mon 26 Aug 2024 05:32:00 +0000
ROA not before: Mon 26 Aug 2024 05:32:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.192.0/19 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12997 (0x32c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:32:00 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3DB40DC684CC2D0AE6BA3CB8956A7F2128038D65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:dc:fe:d0:33:71:5b:33:ed:1b:36:d0:16:
43:21:3d:e3:b0:1c:fc:92:78:97:42:90:29:4a:59:
b7:8f:81:f2:cf:28:e7:af:4e:59:d0:98:32:58:2b:
0e:65:33:ec:c9:d1:9d:c1:03:17:ff:5c:c7:bf:a5:
d9:b8:4e:07:2f:9a:c2:a0:54:22:cb:11:38:59:fd:
e0:95:8e:bd:14:69:f5:3f:bd:69:67:ea:cd:92:35:
11:aa:34:be:12:26:11:ca:bf:67:38:2e:c6:49:07:
3a:12:69:fd:45:0e:6f:be:7e:9e:b8:9a:e3:01:d4:
d5:c4:e2:28:74:74:da:55:9d:56:f9:e8:af:02:b9:
86:8c:8c:ce:e6:02:ab:1b:3a:3f:6b:e9:6c:f0:af:
dc:de:c7:dc:e8:de:f3:6f:2a:59:4a:52:2b:dd:77:
2d:fc:ee:0b:92:ef:f4:7c:ae:d0:3f:2d:90:c6:a2:
84:7a:0a:6c:94:45:ca:fc:70:60:c9:99:5e:95:13:
4f:bf:c0:c0:91:64:51:6f:70:1b:8d:ef:35:84:44:
14:9e:e5:b4:29:85:ac:c4:4b:6c:af:9f:88:ec:f9:
8b:ed:f3:e7:a1:0c:5e:40:82:ba:b2:2f:3f:4e:88:
e7:b3:3a:7a:c3:3d:0d:8f:24:ea:c7:1c:69:35:9a:
88:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B4:0D:C6:84:CC:2D:0A:E6:BA:3C:B8:95:6A:7F:21:28:03:8D:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PbQNxoTMLQrmujy4lWp_ISgDjWU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:55:d7:ed:b3:d0:b3:f7:54:38:27:9d:81:43:40:1c:61:75:
ce:96:3b:39:e6:1f:3e:50:7f:73:35:58:aa:0e:df:1f:6f:d9:
a8:b4:86:cd:a7:c4:f2:6d:25:f8:36:cc:8e:00:3b:3d:ab:92:
fa:94:b1:0b:53:15:ee:3b:e6:8a:56:16:44:4e:42:28:f4:75:
d1:2e:e5:a8:c6:8e:4a:84:95:53:57:b6:49:66:1b:84:85:af:
64:a0:fe:f5:82:0a:18:70:78:aa:d6:f0:d7:13:2b:7f:c6:15:
15:e0:88:ee:54:1c:6c:2c:03:bc:60:b7:d6:e5:40:f6:3a:2b:
8a:cf:77:34:4d:df:a8:90:76:ff:d4:e6:cb:b4:20:85:58:a1:
6e:87:07:f3:ec:3d:27:26:84:54:6e:fe:da:1a:de:4a:6d:cc:
a0:30:db:f3:a0:46:a1:86:b5:85:06:86:35:0d:f3:c9:bd:42:
6a:d7:a9:7d:b7:07:2b:53:bf:41:89:5b:b3:de:48:25:66:1d:
3e:38:2c:3d:2d:bf:6a:70:ed:f7:0b:a1:37:e5:a9:e7:15:8a:
4c:3f:dd:71:73:8e:25:89:74:ba:a6:10:65:35:c8:b1:74:86:
75:2a:58:73:16:c7:7c:cf:9a:b3:c5:bb:72:fe:87:b1:90:4e:
8c:e9:f0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:21:02 2025 by rpki-client