Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z-d2Roaag_55hpSbU_6VzNdWvRE.roa
File: Z-d2Roaag_55hpSbU_6VzNdWvRE.roa (raw, json)
Hash identifier: nvlV1fIEUj07p6CHtk0GxWtSkPDiHpAOB6QZU/ncFJU=
Subject key identifier: 67:E7:76:46:86:9A:83:FE:79:86:94:9B:53:FE:95:CC:D7:56:BD:11
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34B5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z-d2Roaag_55hpSbU_6VzNdWvRE.roa
Signing time: Mon 10 Feb 2025 13:52:38 +0000
ROA not before: Mon 10 Feb 2025 13:52:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13493 (0x34b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:38 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=67E77646869A83FE7986949B53FE95CCD756BD11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:cc:39:eb:30:e8:74:43:48:09:c7:d0:0a:
d3:53:73:43:7b:2c:d6:e3:b3:6c:13:38:9b:d2:9e:
ac:94:b9:38:79:fd:ba:10:20:7f:f6:03:52:6d:cc:
26:7e:04:54:6a:75:0a:db:94:21:48:de:46:9b:11:
9d:e4:9c:68:96:21:ce:57:c7:e4:e8:21:99:a9:37:
77:1f:6f:5b:3f:cb:24:88:4d:0a:22:eb:e6:ea:cd:
ac:d3:76:66:0b:f2:2c:7b:a2:7a:56:84:ec:06:b3:
f1:e5:05:f0:5e:33:66:99:85:49:39:fa:3c:ac:8d:
0e:36:20:e5:0a:7d:c0:e8:b9:ff:9f:a7:8f:34:3d:
bd:3f:4b:0b:92:5a:04:13:ad:c0:a6:64:7d:15:b0:
8f:c7:d2:b4:f9:e1:70:98:c3:63:66:c8:1a:92:99:
02:31:e4:ee:ab:61:f3:55:cc:5d:7f:f7:e8:2c:f4:
05:98:8b:99:b1:8c:c0:64:3d:7d:bc:05:c2:7c:1e:
86:16:68:62:85:c5:fb:81:c9:a0:6a:d4:3d:8e:cc:
87:51:b1:af:90:b6:91:c5:9e:10:dc:23:2e:28:5f:
84:29:be:d5:86:2e:06:33:1a:fa:5c:d2:0b:f6:96:
1d:25:ee:27:5b:d9:86:0e:a6:83:38:15:8c:98:c0:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E7:76:46:86:9A:83:FE:79:86:94:9B:53:FE:95:CC:D7:56:BD:11
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z-d2Roaag_55hpSbU_6VzNdWvRE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.205.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:14:a2:81:ef:2f:b8:ef:92:43:ef:58:5c:7f:f6:4a:d6:57:
3e:14:b2:a8:e5:14:29:b0:62:39:9b:5f:10:cb:01:f1:dc:e3:
16:d4:4e:da:75:b6:6e:86:35:5c:5c:a7:11:ed:9c:de:74:86:
07:ed:af:a1:14:22:61:ff:5c:e1:28:4c:0e:0b:21:77:ac:85:
7a:07:a3:9b:f6:95:14:8d:e4:78:6f:62:5e:54:dd:03:fc:fd:
24:b5:eb:7d:92:a3:05:fc:13:f5:da:84:d3:18:c3:91:8b:ed:
0a:d6:a9:06:a7:1a:5e:d0:e2:e8:d4:a4:9f:85:bf:4b:08:97:
d9:c9:da:59:72:21:4c:68:3f:4c:3b:d7:a2:6d:bd:48:b2:6b:
5e:91:98:89:21:a9:86:f1:9f:c9:36:4f:3f:35:6f:b4:d9:43:
cd:5e:1c:a0:f6:0b:52:27:00:36:42:36:f7:1a:c9:25:e5:e4:
94:fe:38:09:ff:6e:d1:b7:af:cf:74:c8:1f:58:11:95:cb:c6:
c9:9c:7c:a9:91:a1:32:ec:24:89:ba:83:3d:10:fc:94:81:03:
af:c8:6a:10:6d:eb:18:71:a0:2a:2b:9e:83:cd:98:43:45:af:
ab:13:9f:52:e1:b7:8f:50:de:c1:29:2a:3b:9f:e9:c0:e2:ae:
aa:54:93:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:50 2025 by rpki-client