Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SBlcVyxIRnRC0aU2A7LQ2FzVu1A.roa
File: SBlcVyxIRnRC0aU2A7LQ2FzVu1A.roa (raw, json)
Hash identifier: NilErZ6gvYZLGFpyydfLkv6k4mcjOJl6Hx1zwD3Ihr4=
Subject key identifier: 48:19:5C:57:2C:48:46:74:42:D1:A5:36:03:B2:D0:D8:5C:D5:BB:50
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36E1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SBlcVyxIRnRC0aU2A7LQ2FzVu1A.roa
Signing time: Mon 10 Feb 2025 13:54:46 +0000
ROA not before: Mon 10 Feb 2025 13:54:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14049 (0x36e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=48195C572C48467442D1A53603B2D0D85CD5BB50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1e:64:fd:55:83:a9:86:c7:a3:37:ab:da:8e:
4a:8a:bf:b4:0e:11:86:37:ef:d5:22:1b:4d:c5:a7:
5b:91:a4:9a:a8:86:ef:8d:a6:5d:17:25:85:ef:c7:
7c:06:22:c0:54:6d:0e:cf:1e:74:a7:86:a1:4e:20:
b9:94:d3:d0:87:c5:07:ac:e6:03:03:42:d9:12:83:
d1:1a:41:8c:35:71:28:b9:2d:8a:c5:eb:8e:af:24:
cc:6c:2a:75:9b:5e:bb:9f:1f:ea:0b:2d:55:41:ab:
50:33:b5:7c:f2:54:68:88:b2:2c:36:77:d0:47:e3:
c3:df:10:2d:44:ca:46:25:63:6d:2b:df:da:43:89:
ef:03:97:08:c0:29:9d:f3:9c:92:77:b7:b3:4d:03:
61:9f:25:9d:10:eb:4a:dc:44:02:7f:48:7d:17:54:
c1:66:40:3b:39:43:55:d3:7e:75:e4:04:94:4d:c9:
2e:7e:15:db:e6:af:eb:01:a8:7a:f0:78:6f:06:02:
0d:a3:8a:8c:90:c9:bd:16:6f:dd:79:3c:6b:73:63:
f9:a2:c8:30:d0:d2:31:6c:60:19:c1:fb:6f:73:af:
fe:64:7f:68:c4:e0:ad:8c:3e:54:c7:48:ed:90:d7:
60:8f:fd:66:03:84:57:85:91:21:5a:06:b5:d9:47:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:19:5C:57:2C:48:46:74:42:D1:A5:36:03:B2:D0:D8:5C:D5:BB:50
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SBlcVyxIRnRC0aU2A7LQ2FzVu1A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.152.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:39:c0:6f:e1:d4:1a:c5:d6:75:5a:1b:f9:a8:02:96:cc:3a:
2f:fa:cd:a6:db:d6:75:fa:a9:9a:b5:c5:e8:9e:87:40:e6:63:
cb:5d:a1:31:7a:ce:55:86:e8:79:de:34:83:3a:68:64:3d:22:
6f:d1:2d:21:b4:de:1d:f7:71:8b:01:38:d9:99:84:2d:34:e6:
ba:c8:49:70:a7:e7:d0:f8:57:1c:b1:fc:19:0c:87:ea:f4:a9:
56:4d:28:b6:d8:9b:8f:a8:80:6e:2e:6a:24:ac:c2:18:4f:9d:
e3:65:6a:6d:24:c2:13:1d:0e:02:5c:68:a8:26:e5:e0:6b:7e:
20:d7:90:8b:b4:e4:37:17:45:0b:d1:31:5e:79:f7:3a:35:c1:
6d:6c:b7:c0:4e:76:e3:f0:e7:b7:90:61:02:17:24:c8:d4:1c:
8f:b7:05:58:9c:91:89:8e:0b:d6:cb:9d:90:5f:28:de:1e:51:
dd:28:e1:d3:c6:be:4d:4a:e3:74:9a:64:4f:d6:87:70:fe:98:
51:e1:f6:6c:f4:e5:2d:64:90:c4:72:9d:3b:fb:a7:c2:9c:d3:
f1:6c:e4:c7:85:8b:30:c9:f5:10:06:5d:52:ad:c7:5e:81:80:
7f:f9:56:2e:71:fb:9e:12:ae:79:39:7c:46:46:ae:da:be:ca:
99:24:25:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:26 2025 by rpki-client