Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A778zPHLDwJggXSDgQ9X75Y_Uks.roa
File: A778zPHLDwJggXSDgQ9X75Y_Uks.roa (raw, json)
Hash identifier: BqKhaadqfsbjGhMiUW/jYyadY6VPn05cJtKUfy3xP1s=
Subject key identifier: 03:BE:FC:CC:F1:CB:0F:02:60:81:74:83:81:0F:57:EF:96:3F:52:4B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 311F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A778zPHLDwJggXSDgQ9X75Y_Uks.roa
Signing time: Mon 26 Aug 2024 05:30:07 +0000
ROA not before: Mon 26 Aug 2024 05:30:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12575 (0x311f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:07 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=03BEFCCCF1CB0F0260817483810F57EF963F524B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:18:2c:e1:da:91:6f:63:34:b1:0b:87:c6:
a3:a0:43:55:ed:70:14:2a:c8:31:60:f9:7b:ef:d3:
8c:13:c5:11:43:10:75:8b:3a:ca:11:fa:9e:4c:b3:
be:f9:76:8b:05:1b:6c:fa:45:7a:5a:c3:14:9a:70:
5d:de:c2:db:79:90:76:b5:ad:61:06:73:7e:f2:e3:
61:1b:02:c6:a3:3e:09:0e:df:10:1c:e8:0a:03:c0:
d0:db:a6:da:73:a6:21:ad:01:74:83:dd:63:9d:12:
a5:ef:bb:d4:9f:40:31:73:a3:e0:2c:c7:cd:29:81:
7f:f7:43:1c:a6:ba:05:a7:80:7d:e5:dc:c5:d9:50:
0b:47:47:bc:68:dd:55:62:cb:2b:04:25:93:f1:10:
94:b6:6c:be:cb:e0:fe:be:3a:68:9f:2a:a2:31:45:
d2:0a:db:fa:5b:bb:ff:2a:41:55:c8:24:d9:48:32:
7c:ce:40:ce:b9:11:4d:a2:95:ed:cf:24:97:50:d7:
fa:45:1f:a7:f8:0b:66:05:14:50:cc:4a:d6:9c:d6:
b4:c8:47:54:4a:42:db:5d:3f:2c:ae:11:1a:67:c5:
95:3f:89:18:b7:af:1d:2a:77:00:e2:46:e2:3d:a9:
d5:ad:30:3b:5c:c4:81:a3:57:84:2a:24:d9:24:02:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BE:FC:CC:F1:CB:0F:02:60:81:74:83:81:0F:57:EF:96:3F:52:4B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A778zPHLDwJggXSDgQ9X75Y_Uks.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.216.0/22
Signature Algorithm: sha256WithRSAEncryption
15:1f:5a:e9:00:40:2f:94:96:dd:f6:6a:20:19:a6:89:d3:0a:
51:de:6c:f9:09:e0:11:66:ad:30:1b:12:83:64:df:a1:63:bd:
76:40:f7:70:ad:76:c1:f8:e0:3a:eb:a2:68:84:eb:bb:8b:11:
69:ac:9c:e5:fa:d9:0b:1f:5e:d0:7d:36:0a:a7:f2:8e:40:fd:
7e:b3:4f:80:a6:60:a6:a3:44:eb:b2:28:ff:2b:01:e1:63:b3:
e3:15:f6:5d:93:10:7a:f0:ad:9c:af:64:b3:28:e9:e8:ad:21:
9d:2f:1d:ce:0e:de:33:4e:32:f6:3d:99:ed:89:6f:45:8e:34:
97:9e:c0:c8:2e:70:a3:5c:74:9f:30:32:da:8d:54:b2:32:f3:
6e:06:30:b5:46:9b:fe:dc:41:f1:c5:2d:8c:67:ad:7c:8f:fb:
81:3e:f4:79:60:c5:51:51:cc:c5:64:dd:3c:27:0a:96:e3:0d:
68:7b:a9:72:47:df:7e:ca:84:53:63:3f:45:2f:83:d9:ea:ca:
58:ec:65:fb:12:6b:ff:3b:a8:0b:67:58:e7:cd:40:97:e7:ad:
95:a1:ab:7f:0d:eb:e1:ef:cf:58:d7:3c:9c:c7:93:9f:23:48:
a3:43:be:14:7f:e1:3f:67:7b:a5:a2:fb:55:aa:42:aa:e8:47:
de:40:dd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:56:41 2025 by rpki-client