Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/spqkRC-Safr8ff7L9ZhkBMsT23M.roa
File: spqkRC-Safr8ff7L9ZhkBMsT23M.roa (raw, json)
Hash identifier: ZvVQMWCrCLgXOs9ibMV3Qsd3nSntB/uGseTtUTB9a8w=
Subject key identifier: B2:9A:A4:44:2F:92:69:FA:FC:7D:FE:CB:F5:98:64:04:CB:13:DB:73
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3535
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/spqkRC-Safr8ff7L9ZhkBMsT23M.roa
Signing time: Mon 10 Feb 2025 13:53:07 +0000
ROA not before: Mon 10 Feb 2025 13:53:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.193.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13621 (0x3535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:07 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B29AA4442F9269FAFC7DFECBF5986404CB13DB73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:22:40:b5:6c:26:ac:e1:60:de:d5:df:40:
f8:fb:a2:69:fe:09:75:fc:8a:3c:ef:27:10:e2:8d:
62:ce:0e:63:ec:8d:75:21:b6:f9:7e:2c:a1:8a:75:
72:bf:cc:ea:5f:11:95:8a:93:71:80:9c:b2:50:40:
55:0f:e7:1d:fa:d7:44:6d:35:67:11:59:c4:6e:1d:
b0:f2:9e:6a:78:03:8b:20:49:b5:c9:1a:00:1a:81:
44:fa:f7:49:25:72:af:16:18:68:fb:b0:c4:1d:72:
f9:2a:ca:8c:c9:a9:46:3e:67:75:6e:41:13:44:e9:
9d:94:c2:d0:29:99:67:7c:c7:70:e2:1d:e4:75:98:
c4:93:08:a6:87:7a:0b:7e:2c:ad:df:56:da:e5:1e:
b9:18:e3:0a:31:53:33:1e:2d:ff:99:2a:0f:0a:7b:
c8:b4:3e:05:33:c9:f0:60:60:3f:c0:c0:1f:f4:0e:
1d:c3:20:c6:45:54:ac:57:96:59:06:e8:ac:6d:aa:
6d:cf:6e:44:63:a1:86:22:cd:3e:f0:60:df:8a:11:
ed:17:9e:9d:92:21:37:59:40:66:cd:d6:16:48:bf:
89:d5:15:5f:df:06:b5:86:0e:15:f0:c5:df:eb:bc:
a6:d8:de:f1:4f:66:6f:52:14:63:1a:46:be:a0:60:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9A:A4:44:2F:92:69:FA:FC:7D:FE:CB:F5:98:64:04:CB:13:DB:73
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/spqkRC-Safr8ff7L9ZhkBMsT23M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:85:c3:30:16:03:7a:08:ee:b8:2d:b0:52:d6:7a:3a:57:a0:
d0:dd:87:f8:92:91:34:04:a3:44:7d:0c:6f:1a:b3:95:53:69:
76:6c:d4:c1:cd:e7:7b:4c:f8:86:4d:68:b3:92:f7:b9:01:b5:
8b:c9:8b:7e:62:71:cc:48:5b:cb:f3:39:39:ba:e4:ea:2f:cc:
31:1f:2a:da:82:d5:e2:64:85:ea:32:1b:31:a6:55:46:d9:45:
48:0a:25:21:07:01:f2:c9:46:ce:e6:6f:2d:d2:22:84:86:bb:
5d:55:14:4c:86:74:fb:4f:cd:88:d4:6a:b5:f6:76:74:3a:a1:
b6:63:16:1c:5c:74:9b:f0:d3:b2:b5:64:45:ed:e6:cb:d2:a7:
9c:e2:f8:7a:fe:71:b5:e4:e1:d2:83:e6:6f:3b:97:ce:2f:29:
a0:61:20:8d:03:a1:1e:48:03:43:33:06:53:e7:a0:a6:c8:21:
f0:1b:0e:b5:38:4a:a6:62:93:30:a9:e9:f6:44:18:a3:8c:d1:
f3:db:4c:b6:6f:20:5c:7d:37:29:68:45:d5:9d:38:98:d9:7e:
76:15:a2:1b:c0:e2:42:b7:a4:f0:37:7b:df:62:9e:58:1b:f2:
df:40:b3:3c:65:64:77:e2:7e:68:10:70:7c:3b:1c:7f:c5:47:
d8:b5:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:36:28 2025 by rpki-client