Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-aHfyu88qy_TvqN-lN_S_9nLbLk.roa
File: -aHfyu88qy_TvqN-lN_S_9nLbLk.roa (raw, json)
Hash identifier: E/Wy0rKGRBmwJv/mYkR+QDU8bvyaDIGJf+NomufhpHc=
Subject key identifier: F9:A1:DF:CA:EF:3C:AB:2F:D3:BE:A3:7E:94:DF:D2:FF:D9:CB:6C:B9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35D7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-aHfyu88qy_TvqN-lN_S_9nLbLk.roa
Signing time: Mon 10 Feb 2025 13:53:44 +0000
ROA not before: Mon 10 Feb 2025 13:53:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13783 (0x35d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F9A1DFCAEF3CAB2FD3BEA37E94DFD2FFD9CB6CB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:a6:b0:ce:7b:88:77:ab:47:1f:15:1d:12:
be:bc:65:30:f2:be:8a:5d:94:c3:43:e1:ca:1d:2c:
2f:71:bc:b8:54:f1:82:3d:c2:5b:a7:49:1e:b4:f2:
d5:54:85:bd:a4:a2:71:06:6c:29:81:29:db:21:ee:
86:03:20:06:00:0b:ed:fe:ea:61:ee:db:c3:40:b8:
5c:7b:2e:79:e3:42:9d:5a:e9:cb:08:f0:df:f9:d1:
3a:b7:02:af:8f:3f:9f:8c:ce:af:4d:37:92:9b:dd:
61:6a:8c:40:d5:02:b7:6d:7f:0a:b5:8d:a8:87:eb:
e0:c2:77:2a:e9:1f:b5:90:37:71:a7:4a:2a:10:9c:
a8:54:20:48:a2:01:55:87:3f:fd:7e:ed:ab:68:8a:
33:e4:68:84:a2:17:e5:37:26:ea:b3:b8:c4:12:a9:
26:17:4d:40:db:cf:3d:74:65:5f:f8:8c:5e:57:fd:
52:29:f7:17:61:5d:ee:b4:4f:27:91:78:b4:52:be:
9c:ac:07:88:f7:e0:fa:14:2b:24:c1:0f:e4:24:03:
28:1c:f9:ec:2d:e4:de:bb:0a:c2:57:70:0d:fb:87:
70:6a:4a:7a:12:38:cd:c2:b0:b1:74:36:44:9c:43:
6d:83:a5:ba:27:40:a7:fc:8e:3f:c3:e1:8d:42:70:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A1:DF:CA:EF:3C:AB:2F:D3:BE:A3:7E:94:DF:D2:FF:D9:CB:6C:B9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-aHfyu88qy_TvqN-lN_S_9nLbLk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.12.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:93:15:63:61:b7:c3:d1:3f:66:1e:cc:f4:33:5f:4b:16:cc:
86:33:8c:c8:b8:87:e2:8a:78:b4:12:c6:81:ff:ce:b7:c4:a9:
79:85:99:c2:8a:0d:04:12:29:50:6d:60:9a:8c:6c:ac:07:c4:
83:b7:55:25:8c:db:e8:a7:d4:af:e5:a6:f7:0f:77:0b:05:35:
ee:cf:52:35:cf:ad:42:cc:cc:a6:39:b0:ab:fb:61:27:d0:62:
d8:ab:af:ef:a7:13:ff:b5:90:46:cf:d1:98:5f:8c:21:17:ba:
be:06:32:ee:c7:93:6d:f7:34:0a:a4:85:fc:f9:9c:c0:29:5c:
af:b7:ff:de:48:93:09:d9:8e:29:91:d8:18:f8:1a:54:13:87:
90:16:d8:9d:35:ab:cb:93:2a:a6:d3:5d:03:e4:93:35:2c:9a:
2e:8d:ba:87:1b:24:17:8b:d6:86:aa:9e:8d:41:05:0d:6d:4c:
da:d1:18:c7:95:1a:8d:b4:ea:84:53:f5:19:26:03:7c:a9:69:
be:f6:56:ed:50:76:92:bd:d3:3f:4b:b5:f9:13:df:b9:7d:dd:
bf:f7:cd:78:0d:1a:ed:4c:c5:3f:71:39:cf:8d:2a:32:b1:80:
b1:57:ce:de:fb:c2:fc:8e:fc:77:ae:6c:29:4c:31:16:b3:75:
62:30:75:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:07 2025 by rpki-client