Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TbzkjH5OEfsVXZ3WbmUgabeK8nk.roa
File: TbzkjH5OEfsVXZ3WbmUgabeK8nk.roa (raw, json)
Hash identifier: eGrc+PNmTF3H8ZenWtepnur/4DFTbANHKFjQh76g1KM=
Subject key identifier: 4D:BC:E4:8C:7E:4E:11:FB:15:5D:9D:D6:6E:65:20:69:B7:8A:F2:79
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 30CE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TbzkjH5OEfsVXZ3WbmUgabeK8nk.roa
Signing time: Mon 26 Aug 2024 05:29:50 +0000
ROA not before: Mon 26 Aug 2024 05:29:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.192.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12494 (0x30ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:50 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4DBCE48C7E4E11FB155D9DD66E652069B78AF279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:b6:b6:2d:6e:dd:1d:f3:84:27:43:ed:f6:
fe:72:6c:3d:ef:8c:d7:f0:94:a0:ba:84:fc:a2:9c:
56:83:7d:5c:fc:f8:ba:60:43:72:41:f0:0f:2a:61:
a9:5f:8b:9c:af:28:19:02:83:b6:e0:6c:5f:f3:8f:
69:0f:65:36:00:2e:41:73:98:77:67:4a:a7:47:01:
86:0a:d9:53:99:1c:27:fa:06:ba:3d:15:25:2a:2c:
95:4b:41:8d:3f:85:30:24:a8:56:be:95:d9:6e:30:
41:6f:f1:24:af:71:44:e4:90:c9:5d:c8:b1:2b:bf:
cc:25:af:08:9f:82:75:6d:ac:7c:20:bc:db:30:d9:
8f:d2:8e:d7:3d:e6:2c:36:1c:dd:93:3d:c2:d5:27:
2f:70:50:8f:4c:b1:5b:eb:67:14:39:fa:ee:9e:d4:
e7:9c:17:11:3c:01:aa:d2:42:a2:dd:ef:4a:3a:b9:
cc:3c:25:04:df:14:be:fc:f2:97:3c:ec:98:28:cf:
2e:41:6f:9c:6a:fe:ed:0b:b1:30:04:4e:1e:ac:a6:
a6:c2:93:15:a3:4a:60:0a:5b:fe:3c:17:3b:ee:cd:
92:ce:92:00:c0:10:18:31:46:6e:89:cb:3e:bd:80:
99:ba:f2:18:9a:4f:68:e3:3d:0f:f6:5f:0f:26:ad:
28:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BC:E4:8C:7E:4E:11:FB:15:5D:9D:D6:6E:65:20:69:B7:8A:F2:79
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TbzkjH5OEfsVXZ3WbmUgabeK8nk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:bd:16:67:43:f3:db:d2:31:09:f0:28:34:30:8f:15:28:3d:
74:b0:7d:eb:0a:15:fc:5b:a8:67:72:b3:6e:8f:11:09:a1:ec:
f0:f5:29:4a:65:6b:b9:41:ed:d1:dd:1b:a8:70:bf:4e:6b:d8:
37:f8:73:93:01:3b:4e:1b:43:9c:b0:5d:2b:60:b4:3e:53:4c:
b2:90:f6:79:ec:d8:e7:9e:c0:04:2f:fb:49:ee:a3:ff:a0:69:
b5:98:95:ab:fd:77:c8:01:40:67:ac:60:ee:c1:9a:63:ec:9e:
5c:4b:c1:ac:08:b1:6e:19:42:be:52:a0:14:23:2f:f5:69:a0:
19:b4:07:f7:80:4f:61:f5:e9:d1:47:30:90:24:96:16:c1:53:
a2:c5:4e:22:e8:23:03:3b:f3:04:7b:04:36:ca:48:42:4b:7d:
5e:e0:e9:0c:46:fa:ca:10:00:5f:3e:c9:22:4e:6f:e1:4a:62:
ba:bb:0b:c4:0b:80:71:47:c7:71:b0:5f:a1:7c:f8:ad:a3:9f:
b6:25:52:b4:72:80:76:71:74:ce:5b:b7:2e:a4:85:93:0a:1f:
7d:71:c2:0d:77:76:30:39:b1:e2:11:d2:19:ed:db:05:01:a8:
77:93:4d:5d:d4:49:9d:90:95:03:5c:32:12:11:b0:df:44:8b:
59:8d:c0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:13:49 2025 by rpki-client