Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H36HxhVg9vPMy_q9AzSyoZYLA04.roa
File: H36HxhVg9vPMy_q9AzSyoZYLA04.roa (raw, json)
Hash identifier: iI8LbApU273J+qNYM5CrjcbY7Bp3H1s/unweGC9qpZk=
Subject key identifier: 1F:7E:87:C6:15:60:F6:F3:CC:CB:FA:BD:03:34:B2:A1:96:0B:03:4E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35DA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H36HxhVg9vPMy_q9AzSyoZYLA04.roa
Signing time: Mon 10 Feb 2025 13:53:45 +0000
ROA not before: Mon 10 Feb 2025 13:53:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.212.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13786 (0x35da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1F7E87C61560F6F3CCCBFABD0334B2A1960B034E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:77:7e:90:b0:7a:d1:36:25:fa:d8:ff:27:
ba:82:5d:6e:6c:c4:e8:d3:02:a7:23:0e:0c:ff:c3:
74:7f:97:a8:ff:c2:26:44:90:a0:c8:70:35:3e:80:
57:73:40:21:84:e5:a2:04:4a:94:75:af:43:9c:ee:
53:fa:b6:24:d0:6e:c8:27:b3:13:31:7c:ec:ce:ac:
53:47:02:43:10:3f:df:08:ca:d3:a5:6d:83:79:62:
0c:d8:52:9d:c7:91:a2:5f:b4:0b:20:f2:28:88:c4:
b8:fd:c8:bc:b0:9e:64:9b:ac:63:9e:18:30:30:38:
90:83:78:96:d4:32:11:ff:37:5c:0e:16:46:9a:30:
fe:f5:6f:78:e3:2a:22:15:32:d1:92:dc:73:65:17:
9f:f6:75:6b:35:8b:67:9a:5c:a2:e7:9b:74:1d:34:
ac:09:d1:89:c8:a7:44:3b:25:7e:fc:da:64:60:56:
ea:34:b9:12:95:c3:7f:10:a1:5f:ce:25:2e:b0:6c:
f7:0e:26:c2:aa:ea:eb:92:f1:42:ce:08:1c:f2:35:
84:ef:01:c9:64:f4:74:0a:0e:a8:96:e6:2a:a7:ca:
02:78:7c:b6:2f:54:6b:7a:5f:5f:e6:d7:e9:95:2e:
7e:49:83:0c:a8:85:1a:9b:9d:56:e6:ad:18:36:2b:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7E:87:C6:15:60:F6:F3:CC:CB:FA:BD:03:34:B2:A1:96:0B:03:4E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H36HxhVg9vPMy_q9AzSyoZYLA04.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.212.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:bc:2a:77:da:41:e3:2f:3d:8b:8f:bf:cb:a1:86:13:bc:f1:
60:c2:11:6e:8e:31:6a:f9:d7:b3:5e:56:2a:c7:8e:a7:e7:38:
ba:be:d8:9f:a4:bc:86:6a:af:f0:a2:db:2b:52:78:33:bf:f4:
39:0b:3b:a8:f3:90:ac:42:15:de:52:87:ab:89:2a:61:89:55:
1c:87:46:40:c6:41:b5:40:68:69:bd:eb:77:22:6b:cc:53:37:
8a:6f:19:51:05:f0:11:f1:89:d0:bc:f2:6b:58:e0:e5:04:70:
56:d1:cf:0f:ef:2d:46:87:4a:40:d6:d5:30:27:11:72:0f:4a:
21:68:f3:58:9e:b4:a9:31:8e:ff:f8:af:11:8a:c5:21:04:3e:
a2:4a:89:24:4f:f4:8c:70:bf:37:d3:55:66:07:e7:2d:1f:da:
d4:ae:05:55:87:40:2e:50:3b:43:c1:e4:5c:a6:d6:72:0e:71:
3f:07:93:38:69:cb:01:89:25:6c:b1:44:63:0b:47:6d:52:3c:
7f:fa:1f:7f:fc:8f:c0:94:a9:b8:86:f8:c4:cc:46:5f:aa:c5:
82:42:2e:e3:79:40:db:41:ab:75:2d:2c:4f:1f:df:7d:27:8f:
ed:de:0b:2d:bc:f2:f3:13:bf:79:5c:ce:0c:07:a1:43:67:64:
72:b6:d3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:41 2025 by rpki-client