Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jfOYfFRCgS-VdgCyhxDXCpLwsho.roa
File: jfOYfFRCgS-VdgCyhxDXCpLwsho.roa (raw, json)
Hash identifier: cOc6zg2u/qd4fD/jzIWghlnGpvqqtSw/B2oF3URRHGk=
Subject key identifier: 8D:F3:98:7C:54:42:81:2F:95:76:00:B2:87:10:D7:0A:92:F0:B2:1A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33D1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jfOYfFRCgS-VdgCyhxDXCpLwsho.roa
Signing time: Mon 10 Feb 2025 13:51:48 +0000
ROA not before: Mon 10 Feb 2025 13:51:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13265 (0x33d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8DF3987C5442812F957600B28710D70A92F0B21A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:91:84:36:03:c1:21:43:2d:65:8b:54:27:3f:
6a:1d:ec:53:39:19:28:a7:88:a2:ba:de:de:75:2e:
98:1f:d1:0e:4f:69:cf:0c:da:b5:8f:35:fe:1f:a6:
92:f9:bb:7c:19:56:77:b4:83:f4:8f:68:0f:0f:ae:
9f:8c:d1:25:bb:3a:79:d7:83:9f:33:d5:fe:d1:69:
ef:3e:21:33:cb:22:d8:39:55:34:18:b1:b3:06:86:
10:38:2c:eb:32:16:b6:21:ac:52:c6:82:3a:ef:fc:
29:cb:c3:6f:08:4e:22:6f:d0:cc:0e:a0:70:e1:b0:
b2:7f:c1:d7:78:d9:2e:9c:32:49:32:a9:e3:dd:01:
7d:ab:e2:e5:76:b5:bd:17:10:31:24:9d:f4:8c:8f:
89:a1:6c:d3:2e:62:aa:22:81:b9:8d:da:a1:b8:cb:
56:72:d5:06:72:09:26:44:ed:39:1c:82:d4:24:64:
87:93:9b:3b:1e:0a:83:ee:b9:2a:2a:2f:7b:d3:0b:
0d:97:21:f0:d1:29:7b:ab:de:80:be:23:fd:4d:6a:
a6:78:79:c4:2b:97:d9:4b:de:d5:74:52:00:de:0a:
41:86:d8:7b:b7:19:2f:c4:2e:07:07:ed:fe:6e:26:
13:cd:56:af:49:ea:1e:8e:93:53:d8:2d:39:d2:bd:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F3:98:7C:54:42:81:2F:95:76:00:B2:87:10:D7:0A:92:F0:B2:1A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jfOYfFRCgS-VdgCyhxDXCpLwsho.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.248.0/22
Signature Algorithm: sha256WithRSAEncryption
69:76:8b:83:17:32:93:25:c4:af:e6:79:e9:60:27:15:b2:b3:
ef:4f:71:96:29:44:bb:a5:77:61:b5:42:35:5d:0a:df:ee:a9:
37:59:4a:b2:93:5b:8b:73:cd:5c:6b:04:f3:3e:20:47:57:43:
c3:13:42:35:bd:61:89:4f:fa:2c:53:72:c7:07:95:5e:51:ac:
6d:3a:88:6a:d1:12:7a:73:30:f7:ba:6b:7a:c3:1a:b0:57:a2:
8f:a3:de:8a:92:d0:1c:18:cb:31:1b:5f:2e:82:54:aa:c8:22:
78:05:bf:f6:b2:bf:62:38:0f:11:c6:93:72:cc:e3:e4:b6:24:
98:b6:ba:3b:c1:bb:af:29:6b:35:75:8c:2c:c2:13:d6:e2:65:
b4:e8:11:67:64:c8:e1:2a:66:8d:d3:41:80:fa:24:4a:55:d5:
66:1d:53:87:06:28:62:36:1b:dd:51:08:de:87:35:8b:8f:6b:
74:9f:c7:d8:82:63:3b:8a:40:b9:fc:cc:53:7c:b0:6e:01:70:
00:cf:b9:12:d5:b3:ab:49:cb:3e:a1:b5:26:e2:fd:e2:f2:d4:
79:04:8c:97:34:a5:81:19:2f:19:c0:95:85:30:33:7c:ad:cf:
84:f3:9c:ee:7e:8a:22:8d:29:0e:5c:b1:05:2c:7a:b5:96:5d:
1f:3a:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:48 2025 by rpki-client