Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JKYuEnosfdShPB0Kh7sZlaHwU44.roa
File: JKYuEnosfdShPB0Kh7sZlaHwU44.roa (raw, json)
Hash identifier: w381K/B2tN3PZwJbKso6NdAcKu6tpay7CD2ridsw8H4=
Subject key identifier: 24:A6:2E:12:7A:2C:7D:D4:A1:3C:1D:0A:87:BB:19:95:A1:F0:53:8E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 364C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JKYuEnosfdShPB0Kh7sZlaHwU44.roa
Signing time: Mon 10 Feb 2025 13:54:11 +0000
ROA not before: Mon 10 Feb 2025 13:54:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13900 (0x364c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=24A62E127A2C7DD4A13C1D0A87BB1995A1F0538E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:79:99:8f:4a:d4:b9:38:6c:f3:74:8d:1b:
ec:f5:13:5d:07:66:55:0e:1b:b1:7c:d7:c4:4f:a4:
c9:0c:18:c4:8c:cf:c4:03:d2:26:77:b4:b8:71:34:
5c:d7:6a:d2:b8:fd:f3:0c:d9:48:94:22:31:ba:59:
60:62:6d:8f:51:1a:3c:d0:91:d0:e0:1a:35:c3:f9:
f1:d5:8b:d5:61:dc:46:e7:be:54:c8:18:fc:16:f4:
05:c0:96:c5:9d:20:0c:5a:9b:bc:73:30:4e:7d:92:
b4:41:d8:ce:98:1e:5f:c8:a9:4b:b8:4c:01:6e:a7:
88:f4:b5:f4:82:0b:53:05:f0:d6:a8:da:49:c2:60:
bb:ac:af:f5:b7:91:09:f1:de:26:46:ca:57:f7:37:
a9:4f:47:44:75:cd:7d:ac:40:56:c5:4f:c9:c4:d8:
e1:c0:dd:92:36:4d:7c:80:12:f8:97:63:77:96:93:
0d:7c:4d:24:27:db:05:49:57:c3:36:cb:5d:b9:4c:
44:e9:c0:32:65:52:d4:54:84:8c:d5:24:cb:aa:7a:
d4:e1:e6:8b:5e:f3:3d:77:64:97:b0:58:00:f1:6c:
f8:1d:1e:99:69:36:14:45:61:9d:69:85:bf:0c:fd:
0e:4a:2c:3c:21:27:15:78:dc:5c:a4:ac:a9:23:43:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A6:2E:12:7A:2C:7D:D4:A1:3C:1D:0A:87:BB:19:95:A1:F0:53:8E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JKYuEnosfdShPB0Kh7sZlaHwU44.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:b6:27:c1:c9:8d:79:3c:c8:39:fe:16:69:76:27:02:70:38:
c7:e8:89:1d:f1:12:97:4b:af:66:59:8d:a5:d6:0a:7b:b2:84:
b8:6c:e9:67:de:25:33:0c:9c:dc:f7:b2:2e:2d:32:ad:66:ee:
5e:e9:17:c2:cf:f0:54:74:49:61:7a:be:aa:e8:ce:7d:91:35:
a2:db:0b:7d:11:ac:7e:8f:b9:aa:5a:9b:b6:ed:f1:0a:34:f3:
21:15:2c:fb:2b:ad:b7:95:13:02:33:cf:3a:f3:7e:c5:d5:5b:
1e:07:6f:01:54:d6:78:b2:ce:f0:6e:a7:91:48:cf:aa:31:9b:
8b:4a:d7:00:ff:a5:32:32:a9:0d:f5:25:a9:02:87:81:ac:34:
e7:0f:11:bd:4d:a3:dc:9e:17:58:34:d7:93:da:b2:0a:e9:bb:
07:c8:9f:da:62:55:aa:66:83:d4:9d:d5:43:56:c4:88:6f:80:
6c:fc:04:23:a2:7e:6b:5f:a8:f7:ab:54:ff:f9:d8:05:f2:e6:
6c:38:bc:b3:a6:68:06:9b:f5:44:92:25:95:0e:b2:16:89:42:
71:6e:a9:f5:23:67:cf:d3:b9:41:41:09:02:ad:67:a2:bb:21:
40:64:5d:1d:6a:7c:e9:78:9f:03:b7:54:55:99:23:a2:ee:33:
14:5b:e5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:58 2025 by rpki-client