Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8DPg0c4NqatPySbf0wRqdJzEtgI.roa
File: 8DPg0c4NqatPySbf0wRqdJzEtgI.roa (raw, json)
Hash identifier: H9vgIvzTDTUgnJj38Kk8Myhnz1MRVrhATtOBvP7W+P8=
Subject key identifier: F0:33:E0:D1:CE:0D:A9:AB:4F:C9:26:DF:D3:04:6A:74:9C:C4:B6:02
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 352F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8DPg0c4NqatPySbf0wRqdJzEtgI.roa
Signing time: Mon 10 Feb 2025 13:53:06 +0000
ROA not before: Mon 10 Feb 2025 13:53:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13615 (0x352f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F033E0D1CE0DA9AB4FC926DFD3046A749CC4B602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:bb:95:25:a8:12:ea:88:68:06:f4:22:e8:
05:60:a9:03:87:0f:48:72:d6:52:83:22:15:7d:aa:
b2:2d:7a:25:b2:0e:10:5d:aa:5a:9d:72:db:e2:43:
01:9c:33:4c:b0:6b:03:5d:4b:99:c8:34:1f:a7:b4:
66:a8:c0:44:16:44:95:32:5a:8d:10:b5:78:c7:e4:
84:cb:a0:78:82:c8:c5:4f:1b:fe:35:66:ec:c6:d3:
8b:c7:05:32:f7:0e:c9:8d:a5:79:c2:aa:7f:a6:a8:
40:86:81:99:6a:0f:31:73:6d:d4:f7:7a:7d:2f:19:
f3:e4:95:17:51:c6:d7:03:14:61:f9:35:92:57:f8:
88:f7:85:85:9b:6a:e8:ee:f4:e8:aa:72:2f:8f:4a:
f4:6f:06:48:bb:12:cb:84:f2:53:2d:21:23:ca:61:
64:a5:d4:30:a7:28:3b:88:9c:db:bc:38:a0:8e:d6:
e9:b2:e2:a4:bc:0d:1b:5d:7f:ca:b2:5c:2e:3b:13:
a8:f2:2a:11:e4:40:9b:0b:39:de:91:42:bf:58:ee:
c3:b4:51:e3:a9:47:15:18:4e:b9:98:0d:97:9b:d2:
05:da:c3:ee:02:4d:16:c5:fa:18:85:69:63:7c:5c:
6b:1c:82:67:b8:ae:e0:7d:8d:ee:1f:f9:b4:cb:16:
a5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:33:E0:D1:CE:0D:A9:AB:4F:C9:26:DF:D3:04:6A:74:9C:C4:B6:02
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8DPg0c4NqatPySbf0wRqdJzEtgI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f2:50:23:28:8a:3d:11:45:70:15:c5:57:4b:be:89:fd:50:
f4:8c:01:62:2f:69:37:79:94:5c:79:79:a7:c3:0d:8f:a0:a9:
db:c0:71:c4:e7:4d:ec:c7:b9:d6:8c:f6:37:eb:a8:c8:e6:67:
b9:63:9e:fa:b1:06:24:6c:f3:7a:11:b7:be:e5:bb:2d:b9:17:
9d:91:88:fa:06:c6:f2:d6:18:6d:05:b3:74:1c:cb:5c:87:a3:
5d:1c:b4:46:83:92:e3:da:92:d0:ac:12:92:06:78:45:1d:67:
bc:fa:84:24:f6:65:17:68:e8:6c:f3:bc:33:f6:68:82:4e:ab:
71:52:f5:77:f9:e8:97:bb:10:98:62:35:bb:f3:09:ec:a1:47:
37:d5:b6:8c:ee:5a:0f:09:af:15:08:51:b2:69:45:78:be:5a:
f2:bd:e9:88:0e:e8:0f:82:0f:60:02:a7:b7:94:9e:1e:ea:7f:
86:46:8b:ba:f8:9f:c8:1f:4b:29:8f:13:86:71:68:17:fa:53:
0e:d0:73:15:89:d3:2f:2b:bb:d9:78:8a:54:37:82:d4:63:a1:
b3:47:c4:90:40:66:6b:9d:34:1b:da:29:d1:dd:91:03:a3:24:
8d:3c:be:6e:1b:be:e7:8a:fe:a3:8e:3e:a3:ad:31:14:e1:ea:
29:4e:cb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:58 2025 by rpki-client