Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1kheNL34tIcamO8B6kA71gKq7Mc.roa
File: 1kheNL34tIcamO8B6kA71gKq7Mc.roa (raw, json)
Hash identifier: KDpYkFqmwKWGKWwiLobr3HnasD4YZNKFh8U5eZ6O5IQ=
Subject key identifier: D6:48:5E:34:BD:F8:B4:87:1A:98:EF:01:EA:40:3B:D6:02:AA:EC:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 354E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1kheNL34tIcamO8B6kA71gKq7Mc.roa
Signing time: Mon 10 Feb 2025 13:53:13 +0000
ROA not before: Mon 10 Feb 2025 13:53:13 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13646 (0x354e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:13 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D6485E34BDF8B4871A98EF01EA403BD602AAECC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:46:39:a8:4a:b2:2d:f9:9e:ef:b7:27:ee:84:
3a:a0:05:ca:c6:db:88:44:c5:5a:9d:c3:d3:85:5b:
a8:8c:1a:33:98:91:f7:27:5b:f6:55:f4:81:24:85:
e0:b3:b5:04:2e:cd:0b:50:85:46:37:6b:60:e4:d8:
49:67:d4:50:70:77:87:53:fb:06:ba:a9:85:da:a9:
1a:c7:95:66:81:bc:67:dc:42:1f:0e:bf:f4:c9:8b:
f1:33:0e:9f:e1:0e:91:01:d1:52:df:2a:bb:8d:14:
d3:e1:0a:35:03:5d:8c:c6:cb:13:39:a5:ea:72:ea:
ad:ef:7f:86:b6:9e:77:6f:bf:7b:a9:8b:34:18:11:
24:62:d8:e6:db:71:9c:cc:04:6d:37:39:e6:e5:bc:
36:84:a2:ef:a3:c7:2e:fe:2a:61:27:f2:14:b0:23:
4a:a4:3a:e3:27:8c:27:c4:b7:d5:8f:7a:a0:27:7d:
4c:a4:81:55:9c:06:a1:08:f9:07:3d:29:34:db:7c:
ed:e8:5c:72:78:37:ee:1b:bf:f0:ff:35:fc:c2:be:
c9:69:a4:a8:6a:04:3f:a5:7a:27:3a:75:f5:1e:d4:
64:16:2d:c7:d7:a6:64:8d:4a:e8:62:aa:55:76:6e:
0f:a1:b4:14:39:9d:8f:bb:f8:db:5c:73:ee:ff:fa:
6b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:48:5E:34:BD:F8:B4:87:1A:98:EF:01:EA:40:3B:D6:02:AA:EC:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1kheNL34tIcamO8B6kA71gKq7Mc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.165.0/24
Signature Algorithm: sha256WithRSAEncryption
96:26:95:62:63:41:57:0a:75:80:4a:20:eb:d4:89:15:6e:7c:
d3:a5:c8:1b:af:92:83:1f:d8:35:43:9e:db:f8:5d:5b:ca:a2:
45:ba:51:e2:fb:47:e1:29:1e:67:0b:63:28:fa:a0:c1:21:7c:
62:40:eb:82:7c:de:8a:ac:3d:9f:a9:22:ff:27:32:14:1f:7f:
b3:4d:06:72:00:cb:87:36:d9:36:a5:48:a2:67:c9:d3:a9:35:
b5:b5:da:d9:27:1b:79:e2:cb:1a:cc:56:00:f9:ea:94:d9:63:
1a:b0:eb:0b:23:64:21:2d:25:3f:c8:2c:1f:34:01:70:72:6b:
11:d6:53:06:16:e3:1e:b3:fc:e2:1f:a6:db:fd:b2:19:39:93:
e1:32:3c:53:57:12:44:8f:cf:64:32:12:ab:57:7f:21:14:47:
04:c9:34:57:15:23:37:7e:dd:dc:41:bc:f6:67:45:1a:44:81:
7f:90:39:31:22:37:0d:e9:75:b0:4b:22:8f:4a:66:f1:ca:a5:
82:6e:4c:5e:80:fa:2f:47:23:8b:f4:6e:1a:73:b8:81:fe:85:
86:0a:a2:f5:25:a3:3e:63:60:c3:eb:26:9a:92:79:6a:6f:64:
43:bb:95:2b:89:75:6f:02:b8:1a:04:ce:fc:f6:6a:cf:2f:cd:
44:5d:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:33 2025 by rpki-client