Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JeDnsynvSNgPIRLRiud28imDI0I.roa
File: JeDnsynvSNgPIRLRiud28imDI0I.roa (raw, json)
Hash identifier: 5soRj2QFWNKv67XWZEfcISqHjfHz0BInauWQs6HoduY=
Subject key identifier: 25:E0:E7:B3:29:EF:48:D8:0F:21:12:D1:8A:E7:76:F2:29:83:23:42
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35D9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JeDnsynvSNgPIRLRiud28imDI0I.roa
Signing time: Mon 10 Feb 2025 13:53:44 +0000
ROA not before: Mon 10 Feb 2025 13:53:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13785 (0x35d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=25E0E7B329EF48D80F2112D18AE776F229832342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:f3:85:ec:a4:d2:9c:52:9f:79:a9:7e:2f:
07:ba:ef:e5:dc:32:9c:8c:02:94:d7:21:22:5e:ca:
e6:64:06:60:0c:f8:aa:20:dd:cd:47:c1:dd:39:82:
50:2e:de:cc:55:4c:7c:62:9b:48:2a:5b:ce:9b:ea:
12:c1:2e:28:76:42:a7:92:09:e7:22:95:33:39:3f:
51:cf:88:b0:a6:16:49:d3:c1:4f:e1:2a:bf:f0:a3:
70:a8:da:22:47:bb:16:0b:79:58:fc:40:e2:5a:eb:
33:85:59:fa:2c:69:0e:81:66:4c:28:80:96:c4:8c:
5e:5e:af:28:b0:d5:c7:2e:0b:3a:23:61:2c:2c:bf:
24:8e:74:50:6b:40:5f:7e:c6:40:07:bd:2b:a8:e4:
6c:a2:a2:79:48:80:ec:04:48:ab:82:c8:90:0b:31:
4b:99:29:e7:07:6a:af:b4:2a:e5:6d:f6:b7:77:c1:
4d:d9:0f:b8:a7:e9:b1:df:1a:b9:e4:f0:b8:52:14:
2f:b3:de:5e:95:bf:56:f7:88:cf:f2:ec:3e:a9:48:
97:f0:8b:78:9f:00:af:bd:c8:8f:f8:3b:2d:0f:97:
9c:db:49:6e:c8:9c:60:5a:6b:ec:20:0d:7a:66:d5:
49:ac:e1:65:0f:0d:7b:cc:c2:80:dc:2d:c1:71:94:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E0:E7:B3:29:EF:48:D8:0F:21:12:D1:8A:E7:76:F2:29:83:23:42
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JeDnsynvSNgPIRLRiud28imDI0I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/21
Signature Algorithm: sha256WithRSAEncryption
85:76:b7:66:67:7d:8d:7c:db:71:a5:34:22:c2:3f:db:ff:f2:
85:94:86:7b:3a:31:4d:5e:30:ac:e9:c3:89:e3:9c:33:66:97:
12:58:c0:00:7b:b5:e3:82:d8:90:ff:99:2e:77:94:f3:b1:13:
9c:56:a5:8f:f3:dc:5f:c5:d5:34:70:a2:11:39:39:d2:5f:fb:
be:f1:1c:05:7e:d6:7b:e5:55:18:1d:6e:ba:24:f6:32:2b:b6:
0a:16:87:f5:7f:28:71:3c:eb:29:7e:98:a1:2e:79:0c:7b:5c:
37:49:c9:70:ca:be:31:b5:7b:c0:51:a4:bc:a3:81:90:2a:5c:
78:25:1f:cb:68:d0:b3:6c:50:b1:20:50:50:05:54:80:67:d1:
bd:3c:09:86:09:d3:9f:8d:44:33:68:7a:e5:4c:4a:19:a9:bc:
cf:48:c4:f4:93:d9:2a:d5:38:de:00:e9:31:21:87:40:3d:b4:
81:4d:10:eb:2a:d3:5c:35:7f:50:b3:9c:a0:2d:8d:18:9c:0f:
2b:37:41:67:1c:ad:2e:53:2c:9c:e2:09:dd:d0:c8:ab:62:43:
4a:a3:d3:52:96:af:83:ea:cc:96:77:f3:01:a8:e6:62:58:22:
09:ed:d6:7b:4a:df:64:91:d6:c5:4d:2b:46:5c:bb:26:9a:a2:
cd:d5:57:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:24:49 2025 by rpki-client