Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hJCWoJlA1IstYmU-pnDFcAwcZd8.roa
File: hJCWoJlA1IstYmU-pnDFcAwcZd8.roa (raw, json)
Hash identifier: YMcXO+hk5iPuWpfk+19i7hFWPx0ocMBqCCZmGwh/8+s=
Subject key identifier: 84:90:96:A0:99:40:D4:8B:2D:62:65:3E:A6:70:C5:70:0C:1C:65:DF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3138
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hJCWoJlA1IstYmU-pnDFcAwcZd8.roa
Signing time: Mon 26 Aug 2024 05:30:14 +0000
ROA not before: Mon 26 Aug 2024 05:30:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12600 (0x3138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:14 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=849096A09940D48B2D62653EA670C5700C1C65DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:e8:cd:2e:69:fd:98:3b:a5:09:c3:fa:bd:
7e:56:59:8c:cf:f4:d6:e5:75:ab:d1:69:9b:4c:42:
fb:89:a5:48:3c:62:b8:4b:69:4f:c7:83:d7:e7:7e:
25:e0:11:ab:ec:fc:80:e7:ac:f4:3a:0e:59:98:76:
b0:cb:7f:9e:62:02:f1:17:5b:00:81:80:3a:74:65:
b2:9e:d5:97:9a:5d:bd:65:41:e8:9c:4d:d7:8c:fb:
81:b4:4a:2d:f7:6b:5b:5d:52:13:87:1c:7f:6c:d3:
e1:62:71:21:0d:fb:75:a7:2c:62:83:f6:1a:ea:e3:
16:d4:ad:bd:3c:c2:83:cb:66:d4:94:47:ef:39:bd:
52:41:10:b6:be:af:25:fd:91:c1:ed:a0:92:25:2c:
f0:9b:63:d4:00:05:16:71:60:b9:8b:70:68:d5:dd:
ac:a9:6e:29:fd:b3:f8:cf:04:14:eb:79:06:04:fa:
4f:b3:63:3d:1f:8f:9e:f5:75:51:6b:4a:ec:7d:28:
e2:c2:41:c8:e4:4f:d3:ef:25:26:a4:af:1b:dc:3a:
e7:77:17:6c:88:54:c3:8f:b9:cf:df:1f:c4:6e:a4:
48:36:fe:85:2c:47:73:93:5c:d2:05:a1:58:a2:48:
70:32:ee:73:fa:86:69:2f:54:06:ce:f0:01:c5:d6:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:90:96:A0:99:40:D4:8B:2D:62:65:3E:A6:70:C5:70:0C:1C:65:DF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hJCWoJlA1IstYmU-pnDFcAwcZd8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.188.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:e8:d5:a8:6a:3a:11:c0:c8:fb:fa:1c:3b:3b:60:7c:10:3c:
cf:e8:92:67:15:42:e1:f5:e7:5d:77:de:96:c0:86:ba:7f:0e:
cf:49:02:2d:a0:ab:80:91:60:a1:1a:a6:1b:7c:08:55:a3:10:
79:ec:7f:48:53:6d:cb:4d:21:80:5c:ce:f5:c8:6c:a2:b6:1e:
b8:e4:a7:8d:16:a0:85:27:cb:a8:9d:c6:ba:3e:e1:92:38:bd:
6a:eb:3d:bc:92:77:70:9b:37:4c:6a:1a:b3:c2:54:cd:22:8c:
56:34:58:f4:d3:90:30:dd:4f:34:37:dd:4c:8e:a1:63:a3:93:
55:0c:5d:87:2d:a9:0d:e8:97:98:4b:fd:27:96:8b:40:e7:2f:
7d:db:a1:25:49:aa:58:0c:0d:a5:3e:d4:ab:90:2a:cb:0a:58:
8c:3b:36:58:8a:c9:0e:ce:e8:64:52:1b:15:4d:ca:6f:19:1c:
7c:b6:1b:65:ca:df:f1:59:24:a0:6f:75:63:24:4f:02:90:1c:
2d:89:0a:76:67:50:57:3c:dc:ee:03:f0:20:bc:48:2c:e8:9a:
08:23:4f:e2:05:64:1c:37:80:d4:eb:de:16:7f:b0:51:03:4f:
d6:22:f6:fc:c7:83:26:3d:a3:fa:65:1f:5f:35:9b:a9:2f:31:
a0:0a:91:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:47:46 2025 by rpki-client