Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MhjZtg5V0mD_LQElO9MnFYzVZVY.roa
File: MhjZtg5V0mD_LQElO9MnFYzVZVY.roa (raw, json)
Hash identifier: p3Epk19HqdYJvDlmzC55v1ImNKg+wf3jmPZFE5IRGqA=
Subject key identifier: 32:18:D9:B6:0E:55:D2:60:FF:2D:01:25:3B:D3:27:15:8C:D5:65:56
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 344C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MhjZtg5V0mD_LQElO9MnFYzVZVY.roa
Signing time: Mon 10 Feb 2025 13:52:15 +0000
ROA not before: Mon 10 Feb 2025 13:52:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13388 (0x344c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3218D9B60E55D260FF2D01253BD327158CD56556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:7e:aa:df:18:dd:ab:af:4d:fa:bf:4b:c8:
d3:44:63:90:ce:93:e1:29:0d:3d:5e:75:89:38:23:
ea:dd:ce:08:df:d5:6c:6a:67:18:f8:49:83:8b:96:
0c:1b:26:22:bd:1e:c9:77:17:59:a4:fc:1e:d5:4c:
3b:98:eb:38:b2:c1:2b:25:0b:95:0e:60:8d:de:8c:
65:a1:43:9b:c7:1a:70:7a:19:76:f6:7f:1d:60:eb:
23:13:24:2f:78:7b:25:a6:2a:76:f4:df:41:b2:96:
41:7a:4b:55:52:3c:cf:63:48:31:77:cb:68:f0:fe:
18:91:fb:23:f5:90:cc:0e:76:e0:9d:4f:7d:28:47:
2d:3a:c0:b4:d6:04:33:e7:c5:b9:58:c5:d5:38:c5:
8c:43:8d:11:6e:c2:08:57:7f:3a:67:e9:d5:fc:0a:
5a:ec:58:4a:72:10:4e:66:cb:30:24:76:ab:3b:f1:
7c:09:48:18:88:a5:87:6b:3c:dd:b2:cb:b9:03:57:
48:99:c0:e2:54:ae:e9:e0:77:9d:06:75:90:ef:c9:
17:30:88:8c:3a:cd:d1:75:76:d8:e1:b9:74:5c:ed:
73:d5:f3:49:80:15:09:c8:44:b1:b3:19:3e:0f:9a:
6f:02:b2:1d:45:46:6d:26:e8:eb:f2:16:eb:34:ba:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:18:D9:B6:0E:55:D2:60:FF:2D:01:25:3B:D3:27:15:8C:D5:65:56
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MhjZtg5V0mD_LQElO9MnFYzVZVY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:56:4c:97:d7:37:b1:f5:fa:72:83:1e:12:cd:71:90:b0:a1:
e5:3a:62:04:67:16:0d:19:57:ed:ea:2e:90:7f:36:53:ea:96:
29:7e:ed:9d:e2:25:0d:ca:b9:9f:a3:df:12:34:e6:90:54:35:
91:e8:69:d7:5b:22:3c:b1:56:d5:90:82:4e:00:6b:1c:1a:da:
85:b9:c8:42:9a:67:80:b2:b9:1a:d4:44:c3:c7:aa:81:7f:ef:
60:f9:82:cd:57:d9:ed:80:2a:31:2c:43:ed:53:a3:ff:aa:71:
c3:c1:5d:30:21:51:38:22:c1:2f:17:28:2a:35:a0:20:ea:36:
0a:c9:c1:6b:15:87:34:28:82:a4:73:48:4f:24:4c:86:49:20:
ea:36:10:4c:b4:20:de:a1:13:51:a7:ac:7a:9d:79:da:5a:6f:
74:ea:3c:40:ac:93:99:49:ab:1b:d6:7d:95:06:be:99:2b:af:
82:89:64:dd:31:9e:d6:4d:31:55:eb:fe:ca:23:f2:f3:dd:07:
eb:26:f3:c9:8c:b6:dd:9c:cf:45:10:e2:9a:d1:de:c4:d3:c0:
6f:fd:f1:d3:0e:fa:fb:91:fc:af:9d:83:4f:28:33:bb:2c:10:
a1:e5:7b:82:af:8f:b5:4d:63:0a:33:35:11:4a:60:69:3c:15:
22:3f:c8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:14 2025 by rpki-client