Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pk8uC9Z-KPSuOVNdTfKbTi-bNiU.roa
File: pk8uC9Z-KPSuOVNdTfKbTi-bNiU.roa (raw, json)
Hash identifier: wVM0Kpd4L9e4IRFr+OETrSBiuNuh9tSUvqpJLhvhon4=
Subject key identifier: A6:4F:2E:0B:D6:7E:28:F4:AE:39:53:5D:4D:F2:9B:4E:2F:9B:36:25
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3543
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pk8uC9Z-KPSuOVNdTfKbTi-bNiU.roa
Signing time: Mon 10 Feb 2025 13:53:10 +0000
ROA not before: Mon 10 Feb 2025 13:53:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.16.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13635 (0x3543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:10 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A64F2E0BD67E28F4AE39535D4DF29B4E2F9B3625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:35:cf:85:44:0e:5e:68:a3:d0:63:7c:60:fa:
93:83:14:51:07:42:3c:47:75:b0:f2:de:9d:a2:39:
68:ef:2a:f1:60:f1:c7:6a:f9:08:0f:1e:1e:5e:50:
c8:2b:90:31:c5:e4:fc:ae:fa:95:51:9e:b7:79:89:
80:a0:12:95:09:7b:ad:59:41:1e:3a:6e:6e:c8:0e:
82:8f:fe:30:f2:64:7d:6f:66:06:84:ef:8a:a0:35:
19:ec:a5:7b:c1:dd:79:7a:02:4b:b8:f6:8e:e1:6d:
70:5b:7c:0a:89:9c:28:14:2d:4c:a2:1f:c7:c1:32:
d7:f6:f7:56:5c:39:c6:52:03:40:b9:3e:56:89:12:
c4:5e:15:14:e2:00:48:57:cd:99:5a:2c:6a:90:ff:
a6:89:40:d2:46:a7:7e:f6:b8:23:44:bf:00:d9:16:
db:97:53:3b:8f:8a:66:b0:7d:26:ad:d0:7c:f2:b5:
e0:e2:96:e9:56:4b:c3:8e:55:49:e3:88:08:36:db:
d5:0c:86:95:cc:26:a7:45:11:7e:f0:b4:7c:f7:04:
91:be:7c:27:54:17:5b:20:f2:ca:b7:fd:8f:4b:6e:
7f:2f:b3:5d:da:67:f7:0c:f7:1b:cc:36:b9:03:50:
a5:27:f5:3c:27:d2:48:b7:d9:80:a7:56:e5:9c:e7:
de:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4F:2E:0B:D6:7E:28:F4:AE:39:53:5D:4D:F2:9B:4E:2F:9B:36:25
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pk8uC9Z-KPSuOVNdTfKbTi-bNiU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.16.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:4c:fb:d8:e8:31:2e:60:0e:3c:08:4a:69:38:82:93:9f:b5:
e0:4c:db:d2:ba:40:cd:63:81:17:97:49:6b:37:c6:07:42:55:
e6:b8:50:38:db:4b:60:4e:25:58:a9:f6:22:6b:c6:7e:c9:ef:
ed:f7:87:9d:9a:1f:27:5f:e6:b2:5f:2d:fd:45:83:7f:d3:4c:
ce:b8:fe:3b:97:99:61:c5:62:58:03:9a:a8:12:f0:5c:95:13:
34:07:99:f1:ad:de:75:a1:f2:e0:53:98:f1:b9:64:3c:39:f2:
2b:09:86:f7:b0:e2:d4:02:ae:b3:db:60:21:d0:86:0f:2e:33:
2a:84:3c:a9:fd:fc:5f:01:66:da:92:23:53:ec:7f:67:fe:f5:
f3:e6:af:f5:2a:84:3f:2e:96:8e:4b:60:49:43:55:73:9e:1b:
a9:cd:9c:e9:07:72:50:81:24:b1:ed:d5:b9:b5:f4:3e:24:fa:
e8:57:6b:40:45:a0:e9:db:35:ec:38:36:66:e6:7c:7b:56:0e:
30:26:92:03:ce:86:6f:15:83:4b:8f:a1:63:96:94:63:ee:7d:
7c:81:da:80:78:61:b4:9b:a1:97:97:20:68:6b:4b:74:fa:80:
6c:62:18:d1:f8:c8:fa:83:bc:2b:3c:a1:11:97:aa:20:ca:42:
dd:e0:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:45 2025 by rpki-client