Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n6Tw1q1M_54p25XWUQT8CBjmUjk.roa
File: n6Tw1q1M_54p25XWUQT8CBjmUjk.roa (raw, json)
Hash identifier: y8Mxpu4I0OeQyZupWViWBmXOqGP3zHvcXvVX30jqsGI=
Subject key identifier: 9F:A4:F0:D6:AD:4C:FF:9E:29:DB:95:D6:51:04:FC:08:18:E6:52:39
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3677
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n6Tw1q1M_54p25XWUQT8CBjmUjk.roa
Signing time: Mon 10 Feb 2025 13:54:21 +0000
ROA not before: Mon 10 Feb 2025 13:54:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13943 (0x3677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:21 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9FA4F0D6AD4CFF9E29DB95D65104FC0818E65239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ca:f6:fd:13:3f:4b:2e:2c:ef:c2:ed:6d:1f:
fd:a6:21:25:09:a1:d6:9b:00:50:f4:d7:47:b7:bf:
6b:99:63:21:6b:e4:8a:28:b1:f6:f0:1b:9c:2d:c2:
16:84:72:de:0c:0d:cc:05:31:1b:c9:da:78:14:89:
54:8c:62:52:53:a0:dd:32:e3:11:24:0f:17:d4:e7:
81:16:3a:b7:01:ea:a7:0a:e8:b6:61:bc:ab:58:91:
7f:1d:72:c9:bd:d8:a8:42:34:e8:f9:1e:1e:aa:31:
fb:c4:dc:36:03:70:8e:75:ac:87:04:3d:2f:b8:51:
00:38:60:a4:6b:79:2e:5e:f4:2b:84:89:e9:e2:b6:
0a:95:18:d2:90:d8:6e:fa:8e:0f:78:cf:cb:4e:16:
47:9c:b9:28:2a:d9:93:c9:cb:61:6c:f1:37:0a:8a:
4b:ad:05:81:c2:37:24:89:46:3b:02:5b:b5:88:a9:
b1:ee:ba:d9:f1:0c:0f:ea:af:8f:40:76:22:b3:40:
e0:d5:2b:c4:ef:98:66:60:44:4b:6d:41:87:41:55:
70:02:80:07:36:65:f0:60:40:aa:fd:8a:2c:0a:9d:
35:c5:02:14:72:da:85:1a:cc:2a:3c:5f:1c:3b:c4:
48:73:49:6f:4b:99:5d:22:68:10:01:7b:6f:18:63:
67:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A4:F0:D6:AD:4C:FF:9E:29:DB:95:D6:51:04:FC:08:18:E6:52:39
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n6Tw1q1M_54p25XWUQT8CBjmUjk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.180.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:2a:10:a0:59:43:09:03:5d:6b:62:e4:4d:8c:7a:ce:18:c4:
76:5d:77:6f:97:4d:7c:d3:8f:e0:68:44:40:89:52:aa:29:43:
62:ce:ac:48:eb:52:7f:26:08:31:d5:bd:15:72:97:d6:23:9a:
88:6e:09:79:e2:47:90:f6:e3:48:64:04:08:9c:d1:e8:7f:a5:
78:10:32:10:78:06:88:26:2e:b4:27:a3:ce:e4:fe:07:e4:6a:
bb:88:8d:1c:e8:5e:59:cd:65:a4:5b:37:18:95:93:df:58:b7:
20:b7:7f:0b:4b:f5:e9:3c:e7:91:b9:e2:c6:50:04:4c:a9:14:
a7:67:3f:ba:f4:e0:d5:38:f6:f8:8e:c6:f2:ef:d0:c3:3c:c9:
41:7a:1f:64:e9:60:ee:d9:0f:46:4f:0f:4a:32:49:a9:b4:0e:
8f:7d:ab:a1:32:ab:3f:d6:4f:71:3d:ab:5e:e6:26:23:ca:54:
07:e3:4e:14:5d:09:1c:15:59:8e:d0:f0:09:f2:4e:d2:74:7d:
b9:63:d5:5b:5b:ea:bb:a0:44:01:c9:34:93:bd:7b:d2:f7:7b:
48:e4:9c:a7:13:20:b3:69:30:49:ac:f3:c3:55:6a:25:79:0f:
0c:d9:e7:b9:75:d7:32:75:91:3e:19:68:d9:cd:70:b4:99:81:
82:7f:72:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:14 2025 by rpki-client