Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mNNGhy93AhOt1Cg20b3WkFAUvMc.roa
File: mNNGhy93AhOt1Cg20b3WkFAUvMc.roa (raw, json)
Hash identifier: 2eYwfH3KpJ8fpqXGKZLq5cB6H/nJmchAdgnJx712fpY=
Subject key identifier: 98:D3:46:87:2F:77:02:13:AD:D4:28:36:D1:BD:D6:90:50:14:BC:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 303D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mNNGhy93AhOt1Cg20b3WkFAUvMc.roa
Signing time: Mon 26 Aug 2024 05:29:17 +0000
ROA not before: Mon 26 Aug 2024 05:29:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12349 (0x303d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:17 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=98D346872F770213ADD42836D1BDD6905014BCC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:37:45:4d:b1:cd:50:d0:03:86:7b:f9:cc:
5b:4a:91:36:71:08:b0:a2:81:f6:d6:d5:ff:5e:ee:
10:67:b0:31:5d:f5:26:dc:84:e1:34:1d:b0:bd:f1:
50:ce:e8:2e:ac:a0:70:21:ae:aa:4f:7d:4b:d2:47:
0b:7e:91:d8:4e:34:30:99:6b:9b:a4:36:03:cc:fa:
1d:72:2c:63:f8:47:fa:14:be:25:3a:3f:51:25:81:
63:0e:21:08:3b:4f:d1:0e:22:c9:1e:6b:a0:24:ec:
f8:39:17:f2:fe:64:73:e7:41:f7:e6:35:18:5b:73:
9d:3a:06:57:78:5c:af:43:2c:ef:f2:69:ff:bd:d9:
18:de:6f:0d:c8:65:bb:77:37:98:1f:82:61:03:b4:
3a:b6:5a:bd:77:23:27:54:6d:df:3d:57:0b:ee:e0:
5a:56:5d:f3:1f:6d:9a:23:57:d2:dd:3b:da:b1:2f:
50:5e:90:a8:08:cd:3a:e0:e3:bc:6a:4c:60:bc:d2:
1f:d2:a2:84:a3:c5:17:a2:06:7e:6b:5f:ab:8f:df:
b3:45:ac:9e:c1:99:3f:ff:76:28:44:1a:7f:ec:f3:
c7:e7:f8:72:4b:d7:a1:17:6f:ae:ba:a3:b8:8b:32:
44:56:c1:c7:4d:11:fd:2e:66:be:e9:4b:ba:95:a0:
38:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D3:46:87:2F:77:02:13:AD:D4:28:36:D1:BD:D6:90:50:14:BC:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mNNGhy93AhOt1Cg20b3WkFAUvMc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.72.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:c5:28:5d:86:ae:9c:64:0f:a1:f2:0c:20:d5:3f:6c:6f:c4:
2f:ce:6b:5d:03:e0:7f:68:b4:2f:ae:ca:a9:4d:40:8c:9b:b6:
62:1a:43:4b:ff:32:e0:80:d0:cd:34:64:ad:12:b1:f2:21:be:
6c:ed:b6:5a:7c:90:39:67:b9:19:13:8f:79:c0:8b:de:f5:5b:
7c:14:86:9b:23:a3:39:b4:fc:4c:23:8e:3a:fb:e5:af:88:da:
eb:7c:61:82:70:43:42:d7:6a:62:4f:12:ef:79:c9:c0:a7:65:
ad:bb:99:4a:a6:14:93:d9:7e:cd:4d:84:b3:a1:ed:df:90:ad:
f7:3e:10:8a:2d:d8:bd:88:14:bb:63:d4:35:e2:93:39:aa:96:
44:af:f1:e4:60:e4:f0:06:81:cf:1c:16:35:6d:aa:12:36:18:
e2:05:fa:fe:ab:09:07:4e:34:35:b2:63:09:65:16:18:2e:64:
66:f4:af:82:f9:65:03:11:45:9c:2c:53:ea:be:ee:01:76:5d:
32:d8:07:a9:94:1c:c8:96:8e:e3:ec:51:57:5b:66:af:16:75:
a4:ab:0a:dc:5e:cf:e9:7b:c7:98:59:12:e5:dd:a9:57:47:ab:
7d:32:b8:59:1c:f9:04:3e:fd:b9:d1:78:f9:13:dc:9d:e0:bf:
18:f3:30:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:43:02 2025 by rpki-client