Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hL9XuYsEdJ1gzYXVl0h8KHfac8A.roa
File: hL9XuYsEdJ1gzYXVl0h8KHfac8A.roa (raw, json)
Hash identifier: 8j42wzoPGq6+lse3R/gBeEeMz6d7ScxFWQHKddRZ824=
Subject key identifier: 84:BF:57:B9:8B:04:74:9D:60:CD:85:D5:97:48:7C:28:77:DA:73:C0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34EF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hL9XuYsEdJ1gzYXVl0h8KHfac8A.roa
Signing time: Mon 10 Feb 2025 13:52:50 +0000
ROA not before: Mon 10 Feb 2025 13:52:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13551 (0x34ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:50 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=84BF57B98B04749D60CD85D597487C2877DA73C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:b5:0e:1a:89:39:4f:ba:ab:cd:9c:63:3d:
a6:2d:4e:12:0e:06:d3:b2:59:5f:ee:d5:39:d8:55:
68:ea:ce:52:99:23:fd:6e:93:cb:28:bd:0f:31:7d:
06:f6:0f:c6:26:47:45:24:93:4e:cf:74:e6:02:8b:
67:c1:10:c9:5b:f2:81:24:6e:9d:0f:08:94:20:bb:
96:2a:9d:2c:01:7e:36:2a:b0:d5:e4:80:8f:dd:87:
a8:1d:94:cc:a0:7b:ec:dd:98:1a:fa:19:6f:a6:ee:
5b:61:8b:9a:81:b9:97:d7:ff:e9:47:1f:ab:32:44:
7b:ea:5b:85:08:64:34:3e:d8:31:5e:9a:54:1b:56:
cd:fe:f9:df:74:ea:02:d7:c4:20:81:c5:4a:91:ac:
35:e7:c0:64:ee:b4:63:0e:2e:13:e1:2c:c6:23:41:
77:1e:2a:9c:00:b1:88:db:ad:cd:6a:81:1b:b0:d7:
37:c2:76:ae:a9:30:83:0b:14:e7:07:74:2f:65:63:
87:2d:59:d9:4c:54:ff:72:b0:b8:bf:5b:c6:b5:ce:
b8:d1:e0:3e:f2:6f:4b:dc:6c:3d:35:5c:af:b8:68:
44:ab:b9:9c:fd:5f:a4:57:5e:36:3e:b9:ab:f0:96:
8f:da:59:a7:47:06:f2:63:30:53:7f:3c:81:f7:0d:
b4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BF:57:B9:8B:04:74:9D:60:CD:85:D5:97:48:7C:28:77:DA:73:C0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hL9XuYsEdJ1gzYXVl0h8KHfac8A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.14.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ed:75:fb:15:49:6e:3a:55:ee:f5:1c:b4:09:92:7e:62:82:
72:48:c4:bd:4e:d3:68:9c:86:d5:04:f1:d8:b5:82:44:18:fd:
c2:96:96:2d:17:9f:c5:5b:44:85:ce:75:47:d7:74:31:5a:14:
1a:5f:5a:8c:b0:60:54:b6:68:b4:56:06:42:f5:45:3f:44:c0:
7f:e7:a7:d1:73:43:c7:2e:3f:c2:1c:de:0a:7d:81:90:68:03:
a5:34:d1:55:62:d8:45:00:bc:7a:39:6f:7b:50:cd:85:42:03:
5a:f0:d5:56:7e:a7:fd:83:19:0f:6c:0a:bd:55:66:47:ba:02:
e5:35:22:9d:3f:11:29:b9:b9:02:9d:1a:17:9a:70:1c:8e:04:
2d:27:65:44:0d:d7:cd:90:30:fa:0a:31:3d:8f:dc:11:ff:be:
f1:6d:22:af:7d:b1:b0:fd:78:dd:7f:97:c1:1b:fd:6c:68:d3:
5b:31:d9:8b:81:a1:69:45:8d:01:09:61:f6:ce:ca:1e:10:f2:
d0:df:7d:de:63:31:63:73:aa:cc:44:56:83:d9:1f:de:14:2b:
94:3d:17:24:f0:e1:b6:ff:dd:0a:dc:4a:14:ae:c5:63:e0:ac:
58:e4:71:14:65:5d:0d:1a:26:ef:67:ad:a9:5d:65:dd:61:7d:
c1:64:a3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:12 2025 by rpki-client