Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zEHTeBlKEjWNCsVaftPrd8hV4AE.roa
File: zEHTeBlKEjWNCsVaftPrd8hV4AE.roa (raw, json)
Hash identifier: pxkSiSe2whghF+WER3WT+DYuW7YDE4fv3V//n1bNC1g=
Subject key identifier: CC:41:D3:78:19:4A:12:35:8D:0A:C5:5A:7E:D3:EB:77:C8:55:E0:01
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2F93
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zEHTeBlKEjWNCsVaftPrd8hV4AE.roa
Signing time: Mon 26 Aug 2024 05:28:38 +0000
ROA not before: Mon 26 Aug 2024 05:28:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12179 (0x2f93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:28:38 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CC41D378194A12358D0AC55A7ED3EB77C855E001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:ad:d1:43:66:52:1e:2e:d2:34:e3:53:08:
31:dc:ed:28:4f:d0:ca:12:ce:bb:14:84:b0:92:9e:
ab:e4:28:61:a8:9b:ca:54:a0:2b:a2:98:c0:94:a6:
af:5a:d8:42:7f:80:b1:6c:63:00:74:2e:8c:be:16:
90:cd:03:12:a4:07:28:44:11:f8:e8:c7:25:5e:c1:
fa:f3:54:48:5f:9c:9d:99:de:a2:95:2c:d8:93:1e:
cb:3d:db:68:75:07:67:91:a7:50:e1:69:00:24:ab:
73:66:13:e0:fe:29:0d:94:97:f8:52:97:71:72:96:
be:e8:74:3b:50:1c:18:a0:da:fa:c8:38:c5:1a:62:
2e:65:bd:fa:9c:5a:a5:2a:be:55:5d:02:31:24:64:
9c:6b:14:3b:3c:2e:54:de:51:57:93:ac:40:9c:a8:
5d:d8:e7:92:39:50:24:6d:2e:fc:47:e4:16:c9:de:
6a:f1:67:1b:b9:26:79:d6:a2:97:2e:7b:82:f9:02:
33:23:0f:ab:7f:02:fe:8e:85:c3:12:97:e7:0a:61:
58:29:9f:e8:fe:aa:7f:47:30:9e:1f:7b:5d:cb:58:
17:17:ec:e2:cc:ed:8e:67:ce:a2:4f:ac:e3:a7:0a:
55:6b:2a:ef:ea:28:d4:d5:03:ac:f0:15:c9:0f:e9:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:41:D3:78:19:4A:12:35:8D:0A:C5:5A:7E:D3:EB:77:C8:55:E0:01
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zEHTeBlKEjWNCsVaftPrd8hV4AE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.164.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:78:66:f1:cc:80:02:e9:58:a7:21:be:71:50:9c:b7:d9:f9:
52:97:34:11:d1:60:6f:60:93:99:94:4d:ab:a0:9b:9f:96:12:
ba:ef:d5:ec:7a:fa:ef:b7:ac:d2:21:01:c3:55:9c:92:c8:12:
a2:89:ee:3d:a6:21:93:ad:cc:27:d4:cf:38:8f:b3:b7:76:c4:
27:06:30:68:ff:ca:75:82:25:3d:f9:e0:47:27:2e:55:c9:02:
43:63:c2:f9:88:57:fa:29:d5:95:b3:cc:26:b1:9a:7f:c8:ce:
c4:72:bf:66:4a:fb:0c:b7:3c:63:e9:7b:73:76:81:0c:d4:ec:
e4:15:39:30:48:36:59:a9:80:de:74:1b:af:b2:8e:d2:9a:72:
fd:0c:12:7a:4b:38:e6:2c:29:78:10:bc:18:6e:03:43:fa:e4:
7b:9a:3c:67:b1:0e:87:c0:a8:17:ad:3d:b6:2b:9e:d9:d9:ca:
7e:5f:09:09:58:80:17:c5:97:d1:cf:33:d8:67:00:20:5f:c0:
a4:c2:ee:3b:f6:7b:b0:1a:0b:1c:1e:80:a2:21:ad:d6:04:90:
bb:84:d9:83:7d:31:11:f5:6f:3f:58:cb:7e:da:e5:8d:63:bc:
7b:29:bd:1e:8a:25:ed:28:72:fb:9d:ad:89:09:fa:33:a1:93:
e4:36:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:26:26 2025 by rpki-client