Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x7IVcz5QZSJugJ9yCs4gQB_I6ms.roa
File: x7IVcz5QZSJugJ9yCs4gQB_I6ms.roa (raw, json)
Hash identifier: Y69uANA1ZuSFTpHJ13FvbA8tfguYo6PZ3oD/MKtXimA=
Subject key identifier: C7:B2:15:73:3E:50:65:22:6E:80:9F:72:0A:CE:20:40:1F:C8:EA:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3110
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x7IVcz5QZSJugJ9yCs4gQB_I6ms.roa
Signing time: Mon 26 Aug 2024 05:30:04 +0000
ROA not before: Mon 26 Aug 2024 05:30:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 2407:4d00:fd02::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12560 (0x3110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:04 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C7B215733E5065226E809F720ACE20401FC8EA6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:dc:30:2a:fc:fb:39:e0:1f:f0:0b:26:fc:
5b:cc:a4:db:7d:e5:85:a2:60:8d:37:47:5d:08:a1:
9a:54:d5:6d:17:d5:10:68:76:af:05:6f:69:4b:3e:
2f:79:04:3c:c2:91:85:6d:a8:f0:1f:38:0c:46:51:
0b:3e:dc:48:7a:21:7a:e5:b0:03:f9:44:93:89:72:
d6:56:20:fe:0c:e8:c5:28:b2:b2:6b:f7:44:ef:8b:
57:84:84:92:b9:e5:d7:f5:25:77:6e:1d:22:82:03:
f4:8a:a3:ff:b1:0c:19:5f:c0:89:e3:f9:7c:07:04:
a8:cb:2d:00:9d:c4:71:67:4c:ca:01:cc:26:b7:8f:
d6:f6:85:79:ca:20:89:92:78:c8:cc:58:ed:22:f8:
48:12:55:e7:17:8b:4f:f6:89:76:88:15:2c:ea:83:
3a:2a:eb:62:f0:ff:e1:71:cb:08:df:b3:48:dd:ef:
14:8d:78:cf:6b:98:f7:08:5d:33:af:eb:da:82:2f:
8d:a8:74:66:12:11:9d:9e:ae:3d:93:28:a6:be:fd:
3a:57:ce:88:52:87:fa:6f:4b:f4:2b:4a:55:d3:46:
a3:7b:94:a8:ab:e6:68:22:99:ae:ca:a5:21:47:56:
96:96:dd:74:5b:9a:f9:3e:8d:97:19:1b:f3:26:76:
98:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B2:15:73:3E:50:65:22:6E:80:9F:72:0A:CE:20:40:1F:C8:EA:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x7IVcz5QZSJugJ9yCs4gQB_I6ms.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:fd02::/48
Signature Algorithm: sha256WithRSAEncryption
b6:13:ef:0e:66:80:5a:a8:50:f6:e1:27:99:99:56:a0:8e:03:
e4:e2:3a:0e:50:45:49:0b:6b:e7:de:ce:ca:51:59:32:2c:7e:
7a:b2:e8:84:b2:ec:a7:4c:fa:d5:cc:15:d1:a9:41:3c:22:08:
d9:e7:bd:07:8d:8a:62:78:31:2e:12:d5:24:a2:ad:2e:5f:36:
11:7b:d3:1b:d0:d5:73:0b:e4:51:4e:89:07:c4:6b:6e:b4:6b:
fa:32:c1:42:0f:13:11:3d:82:d9:fe:48:83:01:69:8d:5f:55:
2b:e9:b7:72:21:a9:54:67:49:76:1d:47:88:f5:70:03:4d:89:
b1:7b:fd:c8:56:51:5e:2f:43:c2:71:b0:e7:74:94:0e:7a:38:
53:c9:59:14:42:f9:26:3e:50:fd:4b:26:dd:ba:a8:25:61:90:
64:d9:b3:c4:15:17:45:db:70:c3:7c:17:eb:ca:6f:f4:98:ec:
cc:ee:26:85:81:a8:0b:b5:3a:09:fa:a9:07:1f:8d:4e:25:a2:
ab:80:1b:4f:23:ea:1c:e4:3d:f0:e7:c6:45:f5:04:2c:70:41:
9b:9f:aa:0e:69:7a:cc:2b:b0:44:af:87:00:02:40:15:1d:84:
74:51:fd:3e:48:d8:6a:d4:e9:ab:9b:2a:7b:a7:7b:ea:73:8b:
7b:21:f6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:10:35 2025 by rpki-client