Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8wUzbhhF1FuIWIoJeL8wPDjbyxc.roa
File: 8wUzbhhF1FuIWIoJeL8wPDjbyxc.roa (raw, json)
Hash identifier: cTMhfcTryFtA5ryYPs9eR4E18bbo+T3iAjt9spauS0g=
Subject key identifier: F3:05:33:6E:18:45:D4:5B:88:58:8A:09:78:BF:30:3C:38:DB:CB:17
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3669
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8wUzbhhF1FuIWIoJeL8wPDjbyxc.roa
Signing time: Mon 10 Feb 2025 13:54:18 +0000
ROA not before: Mon 10 Feb 2025 13:54:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13929 (0x3669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:18 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F305336E1845D45B88588A0978BF303C38DBCB17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:64:c8:8f:2c:6b:49:6a:05:18:83:59:e0:
0e:67:51:1b:10:1c:2d:09:7f:a0:8b:37:0e:4b:00:
da:90:e5:fc:d9:2f:ef:21:ee:77:57:77:3a:e8:86:
52:b8:23:c0:2c:de:11:3e:b9:16:4d:4f:a2:79:d4:
69:30:7f:1d:55:de:12:46:87:a2:67:05:42:22:47:
64:e6:66:e1:00:14:b2:a4:90:28:8a:42:bd:d7:ff:
89:51:40:14:c1:47:a7:ee:29:87:25:18:19:22:b5:
d6:15:d3:47:4a:ff:0f:50:6e:70:fe:13:42:52:cf:
50:7b:2b:42:29:b9:53:0a:9a:67:5d:23:01:1a:e0:
be:11:32:77:04:61:a9:b9:5a:31:f5:09:96:d8:a1:
db:21:66:1b:90:f3:5e:50:e8:7b:30:73:36:d6:86:
97:68:ae:f5:32:b7:ea:c9:c3:74:a3:8e:6a:4d:0f:
e6:09:30:53:07:a4:fd:91:de:78:83:1b:a1:e4:e8:
7b:a7:cf:c7:fc:09:64:48:56:3b:2b:4c:49:da:3b:
7a:af:58:1b:1b:f4:ab:1c:08:d9:51:d5:c4:cd:77:
98:0b:4f:57:fe:ab:1c:03:40:bd:62:92:d9:88:ae:
ef:ff:a5:ab:82:89:29:d9:73:6f:e7:a2:27:85:a3:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:05:33:6E:18:45:D4:5B:88:58:8A:09:78:BF:30:3C:38:DB:CB:17
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8wUzbhhF1FuIWIoJeL8wPDjbyxc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.224.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:df:46:5a:0f:c4:0d:6b:ab:9d:b7:d7:dd:58:b7:7b:22:54:
d5:d1:6e:4e:79:79:ec:52:7f:d5:d3:5c:30:90:f5:1a:3e:b2:
62:d8:62:4e:d5:42:17:d3:62:ad:94:2a:48:46:5f:d0:7a:88:
ae:35:48:67:d3:21:1d:9a:67:d4:86:ae:07:87:e0:98:ed:e0:
77:34:38:f5:85:09:5e:75:ad:5b:c5:97:37:1a:cc:41:8b:33:
7e:bc:29:f3:d0:a6:1f:13:16:88:5a:e0:f1:f3:d5:fa:c0:dd:
a3:56:fc:6b:b2:c5:f3:12:58:05:12:ae:c3:32:00:45:79:6a:
3b:9c:1e:19:c3:1c:f4:2c:ae:bb:ad:e4:8f:fb:38:ce:db:55:
fa:aa:68:c9:44:9e:fe:5c:c6:0c:70:2f:61:6e:14:1e:8c:38:
54:0d:fd:9a:62:02:ed:fc:03:63:03:5f:ad:5d:e4:1c:37:96:
49:a6:4b:b0:4b:ba:55:ac:57:43:2b:6c:5d:72:d9:39:89:8f:
4b:fe:b8:aa:ea:fb:f3:94:a2:c7:1c:eb:c2:ce:c0:dc:2a:06:
b8:1b:d1:1a:b7:2f:b6:43:c6:97:6a:14:90:2e:57:54:5e:4e:
8f:ab:a7:2c:a4:d3:89:51:a1:85:fe:ae:63:fe:74:eb:54:51:
80:b3:dd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:13 2025 by rpki-client