Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ob__XUVz2aKAvji81z3zCgnOSAs.roa
File: Ob__XUVz2aKAvji81z3zCgnOSAs.roa (raw, json)
Hash identifier: hCuXc2pJs3HsO9w13GpjkMDT0VA4aYDvC+YKhktoy+E=
Subject key identifier: 39:BF:FF:5D:45:73:D9:A2:80:BE:38:BC:D7:3D:F3:0A:09:CE:48:0B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33C4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ob__XUVz2aKAvji81z3zCgnOSAs.roa
Signing time: Mon 10 Feb 2025 13:51:45 +0000
ROA not before: Mon 10 Feb 2025 13:51:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13252 (0x33c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=39BFFF5D4573D9A280BE38BCD73DF30A09CE480B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:f5:38:ab:1c:35:73:7c:a5:a5:d7:fd:56:
06:c6:7e:03:6a:2d:d8:26:56:77:d5:20:f0:2d:01:
59:da:de:c1:a3:58:e5:78:f3:b3:62:0d:c3:25:47:
34:2a:18:9d:32:1e:05:26:ef:0b:21:3f:b2:8d:30:
10:0e:a8:dd:84:d0:d5:28:f5:13:76:99:25:c8:0c:
b5:5e:39:e4:be:44:10:3c:e1:a5:7d:d4:fe:5f:ec:
47:c4:12:af:1b:03:dd:63:37:e3:02:4f:19:f3:f6:
ec:f1:28:4a:7a:22:da:9f:22:47:ee:20:79:8b:9c:
6d:bd:86:02:5c:29:cc:02:9a:c9:5c:40:11:77:45:
c3:05:36:f5:91:32:26:85:15:0a:3c:6d:e0:3c:32:
8f:96:26:e9:2b:d7:77:46:5f:32:67:67:ab:e1:10:
76:30:07:41:94:8f:bf:72:14:bb:05:96:5f:01:b1:
1c:e2:b3:3c:bd:59:4a:bb:af:5a:84:8c:04:84:b1:
d5:aa:3d:be:ef:aa:8d:c4:27:a4:76:bf:ee:cc:04:
86:d0:73:b8:eb:78:00:f2:10:a1:d0:2a:33:f0:7c:
90:46:1c:93:9b:88:fc:ec:a7:34:b9:d8:65:26:bc:
cd:00:c6:98:6e:4e:39:f1:6b:33:cb:ec:37:88:7e:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BF:FF:5D:45:73:D9:A2:80:BE:38:BC:D7:3D:F3:0A:09:CE:48:0B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ob__XUVz2aKAvji81z3zCgnOSAs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.140.0/22
Signature Algorithm: sha256WithRSAEncryption
97:4e:b3:91:56:4b:5e:e7:16:39:c3:b9:6e:26:2b:03:50:8f:
43:e8:dc:d8:3b:99:a9:70:b0:0f:8a:d0:a3:a7:a7:b6:db:13:
98:11:fd:20:61:c0:0c:ac:05:95:a6:0e:21:1d:4c:36:80:de:
7d:dd:5a:56:4b:50:26:18:97:8e:c1:27:e4:b7:e6:79:c1:f6:
40:5d:a4:98:a8:1a:65:9e:f4:51:e0:97:72:b4:31:ba:3c:e3:
ca:b3:9c:e5:29:3e:7a:a6:09:3a:09:9e:67:fd:fe:f1:bd:6c:
bd:d4:bd:9d:6b:e8:07:f4:bd:0f:6e:64:b0:4a:59:5d:38:31:
57:fd:93:91:14:45:10:12:f2:da:38:b7:2b:8b:9e:b8:4e:28:
c3:2a:f1:ae:2d:d0:0c:ed:8c:78:bd:49:12:28:b4:b1:8a:0f:
c4:0a:89:3e:3e:a2:63:77:bf:94:bc:d4:a5:41:df:2e:23:b9:
0b:75:89:6a:15:f6:63:9d:49:54:97:8a:ba:52:71:82:b4:6c:
58:09:f7:ee:a8:e5:c1:1f:89:18:4b:00:31:65:1c:b0:19:31:
dc:02:51:df:bc:44:97:34:24:3a:3d:03:d4:93:f3:07:f7:2e:
e4:a8:a9:a2:76:d7:59:76:be:4f:69:be:2d:6b:af:42:49:68:
01:52:2f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:26 2025 by rpki-client