Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PYLsRiQmwYnUBaIMJ8b3ruQK5p0.roa
File: PYLsRiQmwYnUBaIMJ8b3ruQK5p0.roa (raw, json)
Hash identifier: ImRYPvf7ksz0YXPiy4nPo91qNNgkW5hDqgx69TJy7LA=
Subject key identifier: 3D:82:EC:46:24:26:C1:89:D4:05:A2:0C:27:C6:F7:AE:E4:0A:E6:9D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3692
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PYLsRiQmwYnUBaIMJ8b3ruQK5p0.roa
Signing time: Mon 10 Feb 2025 13:54:26 +0000
ROA not before: Mon 10 Feb 2025 13:54:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13970 (0x3692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:26 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3D82EC462426C189D405A20C27C6F7AEE40AE69D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c0:20:58:bc:15:57:0c:ab:74:43:d3:b2:27:
a7:74:cd:c7:ce:3d:47:9e:75:8d:70:bd:25:f2:49:
3c:61:75:8d:77:65:2c:1a:59:95:12:7a:45:99:37:
08:5a:2f:99:eb:9a:c2:f3:6b:18:29:a7:51:96:49:
a6:34:bc:64:eb:db:9a:50:60:b9:e5:6f:d0:be:0d:
dd:7f:c8:99:82:4e:9e:67:46:cf:59:29:4b:5c:f2:
a9:bb:3c:79:47:21:85:f3:b8:5b:73:2e:0a:28:b5:
de:49:2f:84:38:57:bb:c1:85:d8:83:38:21:54:54:
b8:8b:32:13:9f:c7:18:11:f9:c0:07:36:10:2d:4e:
66:ba:64:1b:94:72:98:67:d3:e7:1d:05:15:31:38:
87:9f:f9:1a:29:78:62:10:96:d4:be:a3:6a:a5:4c:
cb:67:a4:38:38:25:45:9b:a0:d1:3b:c5:48:40:ad:
61:c0:15:e1:b4:4e:80:06:e8:16:ac:d3:e7:b9:73:
a2:5d:25:b9:62:f5:93:d1:8b:f3:40:42:e5:e6:cb:
ae:e6:9e:a9:c6:8e:1c:55:55:0a:06:d8:68:a3:cd:
4f:51:b3:8d:49:c9:08:f9:52:15:eb:b3:15:cc:78:
5a:56:02:ca:89:e7:b8:8b:11:25:2c:31:c7:4b:9c:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:82:EC:46:24:26:C1:89:D4:05:A2:0C:27:C6:F7:AE:E4:0A:E6:9D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PYLsRiQmwYnUBaIMJ8b3ruQK5p0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.60.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:7a:bf:f2:7d:2c:d6:c0:2f:4f:11:ec:1c:65:07:c3:fc:87:
1d:4d:1a:e6:e9:11:75:c5:7e:89:b6:02:d6:56:9c:8d:b4:be:
74:fe:4b:c9:b4:70:eb:5d:d8:2a:4c:78:68:4f:6c:a3:99:79:
35:15:42:0e:6d:65:9e:73:7b:79:01:4d:e2:44:a7:3c:2e:6a:
6e:55:70:d8:fc:6e:68:52:f5:84:23:03:d9:00:f6:d0:18:68:
14:88:e0:c5:6a:41:07:7f:04:18:3d:a2:2b:60:ac:a1:da:3c:
83:d1:b4:9c:d7:37:33:c9:4a:8c:ca:ca:5d:86:95:8f:3d:47:
07:23:cc:75:51:98:1d:7e:2d:78:95:b1:4b:b2:9e:13:f4:8e:
67:2f:3d:1a:48:d9:bd:0e:4f:7f:ea:92:c6:f9:40:7e:1c:58:
be:be:a8:1b:00:3c:3b:e7:3d:48:98:3e:29:7a:59:f5:e5:a9:
4d:54:b8:2a:07:07:85:b9:67:25:bc:ee:84:8c:31:7b:c2:4c:
74:f4:7a:d9:3c:df:6c:06:67:56:a9:7d:95:95:a4:8e:04:1d:
2d:21:3d:bc:f1:a6:5d:cf:46:c5:29:99:bb:e6:9b:5d:5a:1f:
c8:97:42:63:c6:8a:a2:86:98:ed:ab:b8:62:a6:54:1b:32:e5:
77:de:64:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:15 2025 by rpki-client