Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0MZD9BCSRZxnni8FaVNgnedJA1c.roa
File: 0MZD9BCSRZxnni8FaVNgnedJA1c.roa (raw, json)
Hash identifier: O43Ywtn4sIbd2mkO3Vfbp6yukpxaINcX8Y6N4Ne7Rck=
Subject key identifier: D0:C6:43:F4:10:92:45:9C:67:9E:2F:05:69:53:60:9D:E7:49:03:57
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3607
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0MZD9BCSRZxnni8FaVNgnedJA1c.roa
Signing time: Mon 10 Feb 2025 13:53:55 +0000
ROA not before: Mon 10 Feb 2025 13:53:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13831 (0x3607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:55 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D0C643F41092459C679E2F056953609DE7490357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:db:7c:a3:6c:16:e5:21:16:8e:84:f7:c4:
4d:be:98:98:18:d5:48:05:e7:eb:75:b6:ce:7e:67:
e4:da:b2:b5:97:10:76:e3:de:0d:fd:60:ef:43:6a:
36:02:03:dc:e0:45:09:60:3b:a8:6a:9e:2b:da:9a:
fe:98:bc:48:92:bb:0d:68:6d:93:45:e2:91:df:1a:
ff:24:3b:6a:f9:c3:ce:a9:ef:7e:97:08:04:0d:9d:
8a:86:68:ad:58:29:38:6c:89:ad:87:a1:9d:7e:77:
b0:03:78:5e:51:87:d3:5a:aa:b5:95:42:fa:89:1b:
b8:2d:93:14:eb:b8:3c:9c:9e:ee:b3:eb:a7:a8:48:
4b:b9:71:4e:48:8d:b7:95:8e:53:0f:20:5d:5e:15:
fd:1b:5d:07:00:b8:8a:e2:9f:84:ca:fc:07:67:2d:
60:af:18:d8:fe:c2:2d:76:b2:cd:7e:0e:12:7b:b6:
03:64:a0:38:c1:24:ad:3a:29:6a:1e:ce:2e:8e:3f:
fa:c3:15:8c:46:3f:2b:7a:89:13:6a:5f:39:a6:26:
cf:5e:c7:4e:d1:8c:f6:56:cf:11:99:1d:ea:82:4e:
3f:00:59:f2:ed:46:25:b3:05:96:84:42:8a:6d:a6:
f2:33:97:e5:d4:f1:30:c5:59:45:72:25:bb:f7:95:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C6:43:F4:10:92:45:9C:67:9E:2F:05:69:53:60:9D:E7:49:03:57
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0MZD9BCSRZxnni8FaVNgnedJA1c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.131.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d8:f9:b9:f6:8b:0a:aa:69:81:6f:8f:fe:eb:ba:99:1a:8a:
a4:a3:64:1d:95:ae:ef:38:24:4f:f5:94:f3:ea:c9:8a:4a:54:
bd:e4:d1:79:a8:db:62:42:9c:f1:23:5f:82:03:71:6b:a8:d6:
9b:b4:93:ca:70:9a:1f:76:99:b3:02:a8:a6:64:d2:32:16:d1:
a8:77:f4:7a:4c:6e:25:dd:50:35:54:f6:7c:49:f2:95:62:0d:
9b:48:b5:5d:d9:37:f0:31:52:dd:d5:a3:a1:79:68:33:4e:3e:
a6:6c:27:05:6c:2d:f7:27:16:13:5d:17:dc:73:f6:ea:f9:15:
4a:bd:e2:9f:ea:03:6e:3a:ab:dc:4c:56:73:fd:a9:ed:8a:ce:
ad:65:b3:9b:b6:17:70:50:84:6e:f4:05:78:3b:e5:86:0d:13:
09:23:7b:65:b3:a8:27:18:66:93:f2:e6:d9:63:dc:1d:e1:96:
76:2b:1d:47:cd:91:6a:9b:e1:8b:b6:e8:ef:96:90:59:6d:33:
6b:ed:48:ac:8b:4f:1d:a3:19:a2:38:9e:3c:92:62:52:11:f1:
31:36:97:5f:78:ed:43:ae:89:98:47:cb:d1:96:67:b9:fb:59:
bf:52:b5:02:1f:d1:de:af:a9:db:ca:ce:4b:22:9d:6d:ec:75:
06:c5:4a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:21 2025 by rpki-client