Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DyLnwMhGcVlCN5LT3A_VvplqC94.roa
File: DyLnwMhGcVlCN5LT3A_VvplqC94.roa (raw, json)
Hash identifier: 10AcW3bkFGYJ7irIEH5TffBn/eWVPrBZGbM65Rh8bmU=
Subject key identifier: 0F:22:E7:C0:C8:46:71:59:42:37:92:D3:DC:0F:D5:BE:99:6A:0B:DE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 358B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DyLnwMhGcVlCN5LT3A_VvplqC94.roa
Signing time: Mon 10 Feb 2025 13:53:27 +0000
ROA not before: Mon 10 Feb 2025 13:53:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13707 (0x358b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0F22E7C0C8467159423792D3DC0FD5BE996A0BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:e9:f4:db:13:c4:b2:2f:c3:cb:26:95:df:
2a:cf:1a:5b:d7:36:0b:c5:a2:df:a4:87:ba:5d:0d:
17:84:4a:80:3e:f0:c0:d3:59:fe:dc:b2:59:0a:f1:
30:96:b5:a3:e6:5a:c8:fc:b6:98:a7:ae:34:16:0f:
68:ed:22:7f:93:1c:b5:2d:79:60:f6:6d:22:12:01:
92:1d:51:f9:31:3a:fb:96:a3:aa:c6:0d:05:0e:9e:
a2:b6:ab:41:18:47:b8:7c:db:97:75:67:da:7e:5e:
62:5b:74:d2:1d:d0:1c:f7:a3:73:94:5e:b2:b2:f3:
15:9f:05:e3:66:19:2b:65:bd:1e:d1:ac:e0:02:b2:
81:ed:20:29:33:c5:53:a7:5c:21:59:69:6a:e7:eb:
92:f1:97:4d:e8:9b:c8:95:7c:bc:22:6b:87:a8:f7:
98:e2:a2:3e:31:40:88:c5:54:a6:e5:23:97:69:4b:
a5:b1:95:1f:38:7d:4f:2d:53:11:2e:b1:95:67:35:
6e:7c:7e:49:75:7c:a3:9a:cb:a9:4c:36:36:03:fb:
47:47:87:ba:97:b7:b3:9b:98:a5:12:a1:8b:a5:9f:
81:20:da:2c:8a:45:35:df:22:e9:5b:09:a5:65:9d:
a6:e6:05:6b:83:29:06:21:2c:e5:19:c6:61:21:ae:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:22:E7:C0:C8:46:71:59:42:37:92:D3:DC:0F:D5:BE:99:6A:0B:DE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DyLnwMhGcVlCN5LT3A_VvplqC94.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.232.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:af:bb:86:38:fc:06:ef:f5:e3:4e:c4:b2:80:8d:3c:9a:af:
19:f0:61:0e:18:97:9a:a9:70:2e:5d:e9:97:81:16:84:90:af:
dd:cc:f6:10:bb:35:da:74:0d:95:de:9f:4d:ba:5c:72:dd:83:
cd:8d:36:a1:9a:e8:c1:24:f8:f6:86:17:b5:5d:c9:4f:a3:d0:
d9:33:68:9d:40:41:9f:ad:2f:b9:e6:cf:c9:da:d7:4d:8c:c1:
6d:e0:db:f6:bf:a5:de:1b:6e:07:50:b2:90:3f:c2:95:36:5b:
4c:8f:a7:94:35:3d:9c:10:c1:08:e0:35:22:be:66:29:be:12:
f0:a3:3f:2c:89:33:d0:94:e3:d5:28:d5:cd:11:f2:10:db:74:
a0:8d:fb:e4:11:28:1d:cd:60:57:0e:a0:b6:4f:4a:f3:ce:e1:
c1:e1:c7:c3:39:08:be:27:e0:b7:63:75:a7:d5:6a:41:d1:0d:
ce:9e:2f:f4:1d:a8:d2:03:c1:fa:5d:53:c6:be:a8:42:b9:bc:
27:28:0b:d0:88:a2:f6:ef:7a:49:06:05:31:4c:22:bd:21:15:
96:b3:50:ff:fd:64:02:16:04:88:68:9d:e6:3c:a8:c5:e9:6c:
83:fa:00:b4:3d:7a:32:09:73:b4:e6:8a:4c:e7:fe:87:90:e2:
dc:22:55:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:33:33 2025 by rpki-client