Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pBDolA5ugTz9STymP0a4tYAgbOM.roa
File: pBDolA5ugTz9STymP0a4tYAgbOM.roa (raw, json)
Hash identifier: m9l6noTBTiwIyjSBgj830q17Ws/awUFSE6lNZBCFITs=
Subject key identifier: A4:10:E8:94:0E:6E:81:3C:FD:49:3C:A6:3F:46:B8:B5:80:20:6C:E3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 361F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pBDolA5ugTz9STymP0a4tYAgbOM.roa
Signing time: Mon 10 Feb 2025 13:53:59 +0000
ROA not before: Mon 10 Feb 2025 13:53:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13855 (0x361f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:59 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A410E8940E6E813CFD493CA63F46B8B580206CE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:89:5c:06:57:eb:ec:3c:43:0a:4d:b2:92:
b2:5d:ff:b0:95:b1:bf:45:a7:6f:c1:e9:34:88:0d:
02:1f:5d:0b:ee:14:4c:62:a1:0e:bb:36:e5:3a:88:
21:ca:b2:71:7c:a5:26:85:6b:49:2a:3a:e1:7e:7a:
94:f5:47:b6:bb:82:17:5e:4e:4d:fa:55:df:b7:0b:
a9:ae:83:01:2e:2a:c2:9a:1c:ac:f4:d7:3b:e9:34:
61:8e:87:4e:85:a9:43:a8:6c:b3:e4:4f:24:d8:8e:
73:4b:ca:6a:14:41:36:aa:f5:f3:0b:a1:9e:b0:e6:
7f:99:b4:b0:a2:4f:30:e0:e5:c4:b1:25:55:29:2b:
a8:ed:d9:4a:fa:a3:26:1e:7d:4b:fd:96:86:9f:0e:
47:c6:34:78:62:db:97:3c:6e:dd:a5:cb:ad:0c:2e:
45:58:33:9b:f4:a7:db:39:82:ea:e5:71:ce:fe:2f:
a3:66:32:7f:64:e9:49:38:bd:f7:b4:a9:99:0b:7f:
56:69:52:26:97:c6:11:38:05:f4:31:e2:f6:07:30:
dc:92:44:aa:8b:8a:24:63:34:21:25:da:a2:17:d6:
b0:02:43:d8:55:77:0b:aa:51:64:e3:8d:a3:ef:fe:
4b:e1:4a:b5:c8:1a:59:a9:62:0e:a0:7b:39:48:a9:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:10:E8:94:0E:6E:81:3C:FD:49:3C:A6:3F:46:B8:B5:80:20:6C:E3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pBDolA5ugTz9STymP0a4tYAgbOM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.200.0/22
Signature Algorithm: sha256WithRSAEncryption
59:f4:79:9f:a7:b2:3a:bf:fa:1a:d5:fd:9c:bb:99:54:fd:49:
47:48:22:a8:ed:88:5b:7e:88:b4:c6:2f:77:44:79:de:ab:1e:
85:b5:44:81:ad:a6:97:0b:c7:a1:a6:82:b4:b8:bf:33:f5:0c:
ee:65:34:b0:1d:cd:cb:3d:86:15:bd:32:93:df:51:20:d4:8e:
58:96:de:22:28:46:52:1a:a4:d8:85:c8:de:c6:ec:2f:b0:da:
1b:90:7f:18:9b:12:73:e4:ee:90:7b:d7:01:04:9e:be:ac:3d:
ee:8a:10:8e:b0:c0:92:d3:f9:c6:6b:6b:5b:2e:c3:77:38:54:
2b:de:8a:16:98:e2:b3:90:aa:32:85:e2:4b:56:06:bc:66:83:
71:b3:49:f6:90:5c:61:e3:27:10:21:04:cb:99:9d:dd:8c:84:
e8:53:36:42:45:55:df:60:06:87:95:2d:84:18:9d:a0:28:3c:
8b:2b:40:61:ee:1d:71:55:4f:81:a8:0c:74:35:31:43:44:75:
9c:78:b1:8b:bd:34:7f:1c:f7:16:20:c2:17:eb:86:ae:7e:fe:
b4:bd:c8:0d:5e:ea:7a:8e:1e:fe:01:a8:59:e1:ab:1c:bc:17:
37:2f:2d:ea:f5:be:48:b8:df:1f:7a:e7:03:c6:e0:da:ef:32:
6f:ab:c0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:50:07 2025 by rpki-client