Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4__lb508IUEh9h1Zw3TglmoFDIw.roa
File: 4__lb508IUEh9h1Zw3TglmoFDIw.roa (raw, json)
Hash identifier: 9JBHv1ZzQPOTEjIZpjSKxR0HiLm+Q/z5GYpR10QqLJ8=
Subject key identifier: E3:FF:E5:6F:9D:3C:21:41:21:F6:1D:59:C3:74:E0:96:6A:05:0C:8C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34A4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4__lb508IUEh9h1Zw3TglmoFDIw.roa
Signing time: Mon 10 Feb 2025 13:52:35 +0000
ROA not before: Mon 10 Feb 2025 13:52:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13476 (0x34a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E3FFE56F9D3C214121F61D59C374E0966A050C8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:c7:0d:4f:75:49:ea:38:d3:3e:79:ce:a4:
5d:91:c1:50:7f:a0:08:39:ad:f3:94:30:01:f9:ea:
97:c6:58:9e:90:41:bb:bd:91:3b:12:8d:4b:48:41:
39:01:01:5c:33:5e:f2:a8:b1:60:6f:7d:07:1a:66:
b9:07:e3:dd:a1:a4:b8:fb:a5:76:4a:c6:da:0a:7c:
05:99:f7:7d:6d:04:0c:ce:68:bb:dc:d9:24:36:5c:
93:a5:c8:c2:55:bc:84:4d:49:23:26:cf:40:cd:fd:
96:12:5f:f5:53:f7:59:a3:42:1d:98:22:e5:c2:88:
d4:d6:41:9c:e8:9d:8a:dd:82:24:96:cc:72:4f:6e:
86:e6:cd:43:1d:d7:04:03:cf:df:28:07:51:05:42:
8f:a3:c8:94:7f:9e:70:db:9f:02:ab:b3:fa:68:7c:
30:50:b5:92:97:d5:07:80:cb:35:98:ab:b1:92:7e:
62:05:2b:b0:a7:af:87:8f:7f:0b:d4:07:4e:71:5a:
b1:ae:9a:fe:88:0d:0e:3c:a5:ea:f8:ca:4b:07:a2:
f0:89:cb:24:c6:76:65:42:9d:d0:75:6e:f9:e8:67:
a5:ba:54:66:4f:f1:f5:3e:51:3d:b7:2a:79:62:0c:
4a:68:2f:65:61:99:51:3c:e0:a5:c9:10:5d:7e:62:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FF:E5:6F:9D:3C:21:41:21:F6:1D:59:C3:74:E0:96:6A:05:0C:8C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4__lb508IUEh9h1Zw3TglmoFDIw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.188.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:2f:c8:2e:30:49:45:53:85:63:6a:78:36:04:00:4b:d9:de:
6f:61:c2:d0:9e:05:b7:af:69:ac:f9:63:98:b7:57:de:3a:00:
b3:dc:5c:09:df:67:87:2b:f8:c7:6c:01:fd:dc:03:ef:c1:ca:
86:f3:97:df:13:93:6d:36:12:1d:67:18:a4:56:a5:4b:49:7b:
91:ea:73:d9:a8:e4:f8:37:d4:70:7b:eb:3d:f1:8f:45:2c:31:
e6:23:02:ab:20:ec:24:ba:b0:23:e7:fd:7c:ee:13:9e:99:3f:
a3:e2:fc:61:cf:6a:be:a9:63:01:5c:1c:d5:1a:ba:f5:62:c3:
74:01:6d:90:c7:1f:d2:d4:95:c2:48:1a:74:33:fc:a7:6a:02:
ca:f4:85:f0:fc:87:f9:d9:71:2c:18:62:a6:96:48:b2:c8:8f:
1a:d9:0b:5e:14:2a:69:36:a7:c9:fe:76:84:53:c6:d2:ce:8d:
33:1e:2e:bf:35:05:73:ba:72:81:42:73:29:4c:8e:51:b1:04:
30:cb:cb:a4:c9:13:95:e2:89:1b:71:e8:08:d3:ad:ff:8a:94:
5c:3b:61:4e:7c:15:d0:5d:95:b4:39:83:e5:03:03:27:db:0e:
98:81:19:3c:a2:c0:82:32:fc:3a:dc:61:f3:41:88:28:4c:3d:
52:6f:e9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:52:26 2025 by rpki-client