Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Xt2MM4Y4-kAZ1_089FvAnz2oZE.roa
File: 2Xt2MM4Y4-kAZ1_089FvAnz2oZE.roa (raw, json)
Hash identifier: Cn7QlTfMivBkDkv4fN3GhPZE4yYeSknuXZJYBlU8k2o=
Subject key identifier: D9:7B:76:30:CE:18:E3:E9:00:67:5F:F4:F3:D1:6F:02:7C:F6:A1:91
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 316B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Xt2MM4Y4-kAZ1_089FvAnz2oZE.roa
Signing time: Mon 26 Aug 2024 05:30:26 +0000
ROA not before: Mon 26 Aug 2024 05:30:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12651 (0x316b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:26 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D97B7630CE18E3E900675FF4F3D16F027CF6A191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:2a:47:f1:1d:87:dc:69:0f:ad:7d:3a:19:
c2:5c:f7:7b:01:aa:b4:5b:80:2f:6c:e5:51:f9:b0:
66:72:18:ff:7b:b7:54:38:21:14:99:b7:af:fa:3e:
b1:c6:5e:ff:4d:3d:c7:a9:38:57:8f:24:2e:25:b2:
6a:61:e3:3c:c6:97:24:67:82:16:25:f6:44:e7:c6:
00:65:61:fb:0f:4f:a9:95:0c:cd:25:82:06:93:e1:
5f:17:fe:7e:77:f8:75:da:e4:9d:62:34:9f:86:92:
48:0a:36:66:97:19:e1:f7:e5:ff:e1:03:75:48:4a:
fd:0f:01:d2:b7:c8:6a:2a:59:87:c1:a8:62:1b:80:
c8:49:20:97:33:ce:b3:df:b2:e7:d8:7e:11:56:1f:
01:da:ca:0f:ab:1b:d5:48:cf:b4:7a:99:44:28:6a:
76:e6:90:18:87:99:6f:6e:8d:08:7c:bc:41:99:1a:
f8:04:1c:76:50:6e:96:da:83:49:e6:19:a0:45:c3:
35:95:47:6c:90:19:fb:5e:0a:40:19:ba:9f:5b:bf:
45:38:26:a0:bc:b5:2d:c7:5e:d3:50:65:3c:ae:31:
e8:81:52:57:21:8a:cc:a9:45:e1:77:d9:db:18:7c:
f9:cd:04:55:b4:f6:b4:34:06:6a:29:cf:6f:e1:a4:
d6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7B:76:30:CE:18:E3:E9:00:67:5F:F4:F3:D1:6F:02:7C:F6:A1:91
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Xt2MM4Y4-kAZ1_089FvAnz2oZE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.238.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:17:b7:e3:82:e5:84:c7:9b:26:44:86:dd:b6:d4:53:8b:e4:
f3:8f:dc:d1:2f:b9:e1:09:f1:4c:2d:ca:e8:3d:2a:0c:12:dd:
1c:60:19:16:f4:71:25:94:0f:37:42:48:1e:0f:ab:99:2a:b3:
70:c6:85:94:6e:54:1a:bb:9e:15:c0:91:c2:ed:d1:2e:ad:89:
8f:e6:da:9e:fc:bf:01:fe:be:c2:8c:3a:a6:25:67:20:d2:86:
3f:19:a0:69:0e:c0:b2:34:39:a3:e8:6e:12:10:61:91:5b:0d:
c9:76:5a:7f:8d:a9:70:87:23:10:84:a9:e2:05:a9:3a:e7:e3:
86:b9:3e:2c:68:04:ff:99:53:cb:5e:f2:e5:bb:a6:14:a1:6e:
ad:36:2c:8b:c0:da:60:60:8b:ea:4a:29:bb:16:0f:4a:f6:61:
19:47:6b:b9:4b:33:d7:5d:f5:04:b4:7d:64:da:f4:e1:7c:a4:
61:f5:59:83:24:51:ae:29:a9:ed:81:41:1a:a4:d5:d3:38:a3:
57:f4:9e:db:ad:47:e4:47:2f:6a:c3:d3:d2:19:51:01:4e:80:
d3:a2:f5:28:5f:2b:9e:c8:5b:99:4f:0b:91:6e:4b:ee:b2:2a:
68:4d:ee:1e:3a:ae:dd:5c:34:70:e1:20:68:9b:1e:a7:05:0a:
f6:b2:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:56:59 2025 by rpki-client