Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MMGSNd2VUN_mQeoYiSFppbjjk-M.roa
File: MMGSNd2VUN_mQeoYiSFppbjjk-M.roa (raw, json)
Hash identifier: TWS4RmfXtcE4GecWtI3+PzYqgS2q5X+6vnGdpXV1EFI=
Subject key identifier: 30:C1:92:35:DD:95:50:DF:E6:41:EA:18:89:21:69:A5:B8:E3:93:E3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 337B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MMGSNd2VUN_mQeoYiSFppbjjk-M.roa
Signing time: Mon 10 Feb 2025 13:51:28 +0000
ROA not before: Mon 10 Feb 2025 13:51:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13179 (0x337b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=30C19235DD9550DFE641EA18892169A5B8E393E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ec:0c:88:cb:d6:93:1a:b1:96:0d:c8:b7:6b:
95:7d:a3:41:44:99:56:33:43:9a:65:cc:d3:18:7a:
f7:bb:5c:71:a7:b8:1c:06:47:51:5f:c4:b4:b0:df:
e9:1e:40:60:5e:48:fa:82:e1:8d:aa:cd:52:53:a0:
12:7f:b8:5a:1a:47:75:0c:15:21:46:15:8e:e7:f0:
88:c6:64:e5:57:e1:22:67:e6:c9:2a:00:82:16:0a:
f1:cb:e4:99:45:76:83:5e:da:be:7d:2a:6f:a9:d3:
5c:cd:87:0b:17:a0:33:c1:80:6d:cd:f7:e0:50:84:
4a:11:6d:c4:9a:bc:33:f4:de:4c:99:c3:a0:50:4d:
3d:99:c0:47:ab:42:8d:1e:0d:d1:25:f6:81:70:bc:
9d:3b:d5:31:3b:73:8c:57:82:e5:25:2f:50:a3:e9:
b4:37:50:82:49:6d:28:3f:d8:af:2a:40:c3:71:e3:
f7:4c:8a:c3:93:0a:74:8f:6d:8f:67:ac:b8:a9:e2:
82:85:38:db:f2:bd:5f:c1:36:07:6a:b7:94:57:96:
dd:db:cd:6f:ec:f1:e6:06:b2:f1:b2:82:e4:a2:8e:
f1:01:32:7d:5c:dc:fe:75:42:ca:08:e9:21:d6:8c:
82:da:4a:cd:95:3b:8e:62:58:df:8e:df:82:b9:03:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C1:92:35:DD:95:50:DF:E6:41:EA:18:89:21:69:A5:B8:E3:93:E3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MMGSNd2VUN_mQeoYiSFppbjjk-M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:9e:22:38:06:d0:6d:5e:54:e0:e2:7c:41:d6:15:a1:1a:ac:
04:72:09:ea:c7:32:df:5d:c6:88:2b:d9:b0:44:87:ee:0d:98:
48:26:14:b7:48:f5:52:b3:5a:a7:46:2e:60:7f:2b:b4:33:c9:
e8:94:a3:89:43:c6:f6:49:cc:1a:db:09:7f:9f:cb:57:15:04:
04:02:0e:ca:e4:15:34:1a:c0:fe:66:aa:9d:63:7a:52:1b:13:
30:e2:c2:30:14:6e:80:b8:cb:77:63:b8:20:a8:0f:9b:32:40:
d7:8d:a4:04:f3:c8:21:8d:74:71:ff:97:8e:d8:56:67:f6:67:
67:9d:10:42:d4:3e:a6:3a:f0:15:43:87:d9:d3:ee:e9:22:ed:
6e:98:1c:f6:42:70:0b:96:09:2d:c9:7d:e1:55:f1:51:f8:8e:
74:b7:92:34:1d:6d:6c:be:19:46:5d:b8:3d:68:f6:e1:b7:10:
d0:b4:38:7a:44:2f:b8:6d:0f:b1:57:c8:f3:92:fb:01:c0:60:
74:bf:21:be:b2:dd:60:34:4c:49:27:74:38:93:f5:30:a9:5e:
7f:0c:57:92:0f:b1:3c:c8:cc:33:d7:a3:5c:b7:ef:94:ca:48:
92:fe:ab:86:bf:35:93:be:36:ed:de:57:3d:ad:04:fd:49:28:
b2:55:42:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:25 2025 by rpki-client