Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EKt4SGiBMyByg8F3XQZQauFKRTo.roa
File: EKt4SGiBMyByg8F3XQZQauFKRTo.roa (raw, json)
Hash identifier: UoEYhKe6wD+lISivmBfhwCTLeoUiYoEDLFqtlnF8ZgI=
Subject key identifier: 10:AB:78:48:68:81:33:20:72:83:C1:77:5D:06:50:6A:E1:4A:45:3A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 338E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EKt4SGiBMyByg8F3XQZQauFKRTo.roa
Signing time: Mon 10 Feb 2025 13:51:32 +0000
ROA not before: Mon 10 Feb 2025 13:51:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13198 (0x338e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:32 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=10AB7848688133207283C1775D06506AE14A453A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:6c:c7:f7:c7:6a:e6:6f:91:d2:67:c8:a0:
01:2f:5d:fe:35:48:ff:4e:b3:99:98:e7:83:4c:35:
8a:7b:d2:6d:6e:ff:34:3d:b7:1b:f0:6a:b9:f4:d7:
0c:96:94:06:92:8b:52:f8:b6:43:7c:88:a3:a0:c3:
b1:fb:eb:3c:32:f8:ab:3e:b7:b2:8b:bc:43:24:df:
5b:b3:77:9b:8d:72:88:9d:2b:80:66:83:16:21:05:
db:6a:84:59:63:85:e5:d6:25:74:d9:a2:f7:aa:85:
30:e4:8f:7d:b0:c3:ab:81:24:f0:dd:be:66:5d:4c:
44:6a:ed:b1:fa:9f:d1:7e:6d:bb:f7:1e:e0:f4:3a:
40:19:52:e7:68:74:63:00:c4:89:7d:c6:31:1b:f0:
29:28:23:36:77:9f:ca:1f:41:b5:4b:88:3d:c8:ba:
1a:f5:b6:3e:53:4d:09:c6:69:f2:c6:a7:64:a9:42:
a1:1b:d4:5a:80:92:6d:0a:5b:b0:1c:3d:55:6f:c5:
40:d9:91:a8:80:f5:20:d6:e5:7f:ac:14:a3:ba:01:
f8:ab:6a:16:3b:ff:05:9f:f3:d2:1f:47:3a:b5:16:
14:1b:58:e6:6f:e6:17:9b:10:f2:03:c4:5d:33:4f:
cf:4c:71:0b:96:ac:a0:6e:92:5f:51:ec:5a:04:c3:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AB:78:48:68:81:33:20:72:83:C1:77:5D:06:50:6A:E1:4A:45:3A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EKt4SGiBMyByg8F3XQZQauFKRTo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.40.0/22
Signature Algorithm: sha256WithRSAEncryption
35:91:c3:69:57:29:b9:f0:c1:38:d5:1c:56:1e:0a:52:94:fc:
29:85:7d:d2:91:c5:20:8b:6e:25:37:82:6e:8e:aa:8c:6d:bf:
d2:f6:73:95:92:10:a4:17:f3:ba:b3:a1:7a:ec:a3:b5:f3:da:
fc:e2:ca:37:d3:72:fc:4b:00:01:ba:04:d9:84:62:64:2e:55:
38:8d:2c:58:13:e8:32:07:83:b3:62:f8:c9:b1:8b:d7:17:31:
04:60:f3:aa:e7:92:b9:37:e6:8b:b4:62:ae:ff:3a:c9:fa:54:
ed:4d:e7:df:f1:35:09:b7:38:af:60:a7:50:c7:87:d8:32:da:
b9:ab:a4:5a:21:7f:66:81:98:67:b7:c8:44:b5:37:7d:24:be:
67:98:70:e5:4b:24:47:7d:20:40:5b:4e:3f:cf:d5:38:1e:1c:
14:8c:32:2c:9a:b2:e1:5d:3b:f2:a1:a4:6a:c9:42:90:29:43:
59:51:c6:e3:16:64:63:09:69:68:b9:12:01:75:11:ef:01:1b:
26:e3:02:52:21:03:1d:27:77:43:e4:c7:db:03:c3:b5:d3:64:
47:99:87:17:16:2b:74:d8:07:20:12:4b:e1:96:f1:fc:c3:94:
35:b5:66:21:00:70:9e:42:df:4c:e9:97:9a:71:12:d0:4c:7f:
3c:db:c4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:03 2025 by rpki-client