Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kjRgLCsxaFG8rKRwzumgA0len6A.roa
File: kjRgLCsxaFG8rKRwzumgA0len6A.roa (raw, json)
Hash identifier: 2fdUxjzOj9B6I47aed7+dZbYNogAlmM+iybHcdGMm6I=
Subject key identifier: 92:34:60:2C:2B:31:68:51:BC:AC:A4:70:CE:E9:A0:03:49:5E:9F:A0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3298
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kjRgLCsxaFG8rKRwzumgA0len6A.roa
Signing time: Mon 26 Aug 2024 05:31:48 +0000
ROA not before: Mon 26 Aug 2024 05:31:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.194.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12952 (0x3298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:48 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9234602C2B316851BCACA470CEE9A003495E9FA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:a1:50:ec:b3:c4:58:e0:93:18:57:96:6e:
85:34:0a:11:65:42:6d:7a:fc:d3:f2:16:2f:7e:bd:
3d:f3:43:81:07:53:be:82:05:8e:8c:6a:36:97:60:
f1:c3:ef:f2:67:35:4c:be:1a:f9:8e:85:5f:14:4a:
05:7c:4f:0a:6d:53:11:4a:53:1d:6d:18:25:0c:fa:
13:8f:90:8b:86:24:6c:c6:3b:b1:1b:93:88:42:ed:
22:31:63:1e:8b:8b:ca:42:67:d2:59:40:33:f4:eb:
1f:4c:cb:c2:b2:32:f1:5d:d1:9b:14:ce:a8:70:80:
1d:e2:60:29:b1:77:53:13:c7:dd:f5:50:33:c3:9d:
da:a1:09:48:83:e3:7f:a6:bc:ad:df:6f:73:5c:09:
eb:39:fe:9c:e3:58:18:8d:c3:b0:ee:35:45:ce:bb:
f1:8f:42:64:25:c8:f9:28:ea:5e:18:0d:f9:ff:89:
b8:ef:d6:36:0b:9b:24:83:11:1b:19:45:b0:c6:15:
76:37:4c:87:77:af:53:51:df:01:91:1e:59:ee:01:
cd:fb:aa:b5:e1:40:9a:39:a8:03:21:eb:14:8c:65:
1e:1f:ec:18:87:c4:48:8c:b9:a6:22:4f:76:19:1e:
b2:07:ce:10:e9:32:e9:1a:e8:e3:80:4d:15:15:6a:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:34:60:2C:2B:31:68:51:BC:AC:A4:70:CE:E9:A0:03:49:5E:9F:A0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kjRgLCsxaFG8rKRwzumgA0len6A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.253.0/24
Signature Algorithm: sha256WithRSAEncryption
27:5a:c7:07:5d:fe:74:c3:f1:7c:39:47:a7:0a:d4:93:f3:5b:
bb:99:7b:77:11:5b:31:14:0d:80:4a:54:4d:5d:82:60:5b:bf:
ee:84:fb:92:37:34:65:51:c7:ba:66:c6:5d:eb:45:8c:06:a0:
cc:1c:3b:1c:6d:f2:94:46:3b:b2:f8:a2:57:c9:1f:a8:d9:86:
f9:9d:31:09:04:57:d1:65:ae:05:d0:a6:aa:4b:db:da:81:08:
a0:7c:fd:69:77:95:0f:f0:ee:0a:72:09:53:10:39:5e:0d:41:
cb:b6:02:9b:ed:15:2f:d8:ef:88:29:da:a3:4e:ec:57:f3:e8:
10:b7:6b:13:3e:33:1f:c1:27:63:f8:ec:0b:56:29:85:3f:c7:
df:3b:d7:e7:b1:82:a3:b2:aa:65:9e:e0:9c:15:9e:bd:47:81:
22:70:e4:0a:1e:09:de:dc:ce:8c:dd:9f:7f:f5:00:c1:30:7b:
9a:9f:66:56:ff:11:6a:83:4f:66:69:c2:e9:4c:47:21:b0:d6:
cb:73:40:a5:e5:06:26:57:37:b2:a5:3e:99:cb:6f:6f:c4:50:
dc:51:93:14:78:6b:33:e9:0f:93:65:98:f2:a8:33:34:67:12:
2e:63:57:ba:b5:68:37:7a:c4:67:d3:27:9e:07:13:06:2d:5f:
50:df:88:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:35:25 2025 by rpki-client