Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qhJYCXX727WjXwUxUaN6_vNyhtA.roa
File: qhJYCXX727WjXwUxUaN6_vNyhtA.roa (raw, json)
Hash identifier: GvaqAbUwzqTvdUSKZTn23U3FeDjSWtlOGZqdGZBxTpo=
Subject key identifier: AA:12:58:09:75:FB:DB:B5:A3:5F:05:31:51:A3:7A:FE:F3:72:86:D0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3527
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qhJYCXX727WjXwUxUaN6_vNyhtA.roa
Signing time: Mon 10 Feb 2025 13:53:04 +0000
ROA not before: Mon 10 Feb 2025 13:53:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13607 (0x3527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:04 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AA12580975FBDBB5A35F053151A37AFEF37286D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:f3:8b:24:53:fb:8d:93:e7:2a:73:2d:ed:
e6:e8:f1:a9:53:6b:7a:ce:40:59:55:10:30:df:12:
59:cf:08:eb:5a:b3:d3:0a:e7:ed:a9:65:68:54:5f:
b3:7b:08:25:4c:81:26:f3:d3:0e:bb:12:a7:10:02:
52:46:51:d9:83:7d:90:ae:9e:a3:96:49:16:e2:27:
f0:fd:a7:cd:ac:cd:c1:19:ec:12:4d:e2:4e:e5:89:
95:7b:41:8b:a4:5d:60:92:69:c9:d3:fc:28:8f:c9:
c6:e2:90:84:91:b0:a4:b9:82:16:5f:83:65:64:2a:
86:6e:11:01:7d:d5:03:89:ac:79:b5:75:32:b6:d9:
ff:ec:3a:67:15:03:10:84:f0:c2:67:61:0c:c5:2a:
2d:b6:7d:a2:c7:75:46:44:7b:36:a9:10:93:44:95:
15:5c:36:c9:44:93:d5:98:31:66:d3:8a:5d:e0:d6:
fe:e7:7d:cc:f4:c6:18:95:ab:aa:42:76:e7:4e:ab:
de:8a:7c:91:29:16:4d:6f:ad:6f:cb:ee:0d:83:4b:
18:2a:28:7a:04:aa:a7:3f:9d:b1:5d:ea:dd:a5:b5:
4b:01:f2:ad:53:94:5f:b5:67:6e:88:a1:73:2e:cc:
43:49:56:ce:60:5d:ec:aa:33:91:8f:49:81:61:4d:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:12:58:09:75:FB:DB:B5:A3:5F:05:31:51:A3:7A:FE:F3:72:86:D0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qhJYCXX727WjXwUxUaN6_vNyhtA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.106.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:fe:c7:d8:8f:c7:ad:2f:4f:9e:33:fe:a1:b0:05:0a:6d:23:
d3:39:ca:35:d3:99:73:33:81:93:ad:1d:bf:e1:13:b8:69:12:
ef:a8:8b:9b:b1:87:1e:55:d5:8b:25:1b:58:b1:2f:b9:2d:89:
9e:81:ab:d0:c8:17:ef:ae:80:8f:6b:82:29:f7:0a:94:e5:4d:
74:32:8a:f5:1d:bd:70:d9:6f:2b:aa:dd:34:ac:73:0a:49:ab:
af:6e:14:e2:37:33:5f:9f:07:e9:46:6e:6f:b3:95:21:a0:10:
5c:f0:c9:7d:46:a5:0c:0d:68:e3:6a:cd:47:72:42:e2:08:39:
8d:27:6f:63:21:c1:52:9a:d6:33:2b:27:d3:a1:84:ba:7e:ea:
9c:8b:f4:76:d6:26:4e:48:f5:16:60:37:15:41:4b:ef:37:c5:
bd:b2:ce:2f:fc:c2:26:fc:5c:03:1c:ae:74:4d:1c:43:23:cf:
5e:e6:87:22:c4:d8:8d:e1:54:bb:06:7b:c4:2c:ec:1a:d0:b9:
12:1b:1f:5a:7c:0a:bb:65:2c:91:e7:e1:e6:f7:1e:56:10:83:
29:a1:8b:29:1c:0e:2d:29:03:e9:67:67:2d:c0:51:53:96:96:
3f:d6:e5:31:d4:53:ad:91:a0:7e:1d:6c:8b:b7:b7:e7:2b:e7:
37:87:7b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:59:13 2025 by rpki-client