Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u3-T98c4a1GJMtF5ipCboZ5lSMA.roa
File: u3-T98c4a1GJMtF5ipCboZ5lSMA.roa (raw, json)
Hash identifier: LDwLby9hXCTVYI10pPGFgUQEq6nWKteVHa9oyxLuvOo=
Subject key identifier: BB:7F:93:F7:C7:38:6B:51:89:32:D1:79:8A:90:9B:A1:9E:65:48:C0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34D9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u3-T98c4a1GJMtF5ipCboZ5lSMA.roa
Signing time: Mon 10 Feb 2025 13:52:44 +0000
ROA not before: Mon 10 Feb 2025 13:52:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13529 (0x34d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BB7F93F7C7386B518932D1798A909BA19E6548C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:bd:f0:6f:6b:b1:dc:54:b5:ce:71:09:2b:
c4:4e:46:4e:78:f1:a0:86:83:2e:cb:c6:36:16:52:
0a:0f:49:81:c2:ba:4f:6d:6f:f4:f4:b9:e6:ec:26:
61:8f:2b:87:0e:03:03:ab:36:16:94:f8:62:61:d7:
1d:eb:67:bf:57:fd:4b:88:5a:31:fe:70:ec:dc:52:
0d:b1:f8:0f:9e:6f:2d:01:19:22:d0:39:73:36:79:
5d:45:18:8b:87:58:eb:bf:44:a2:69:a3:cb:39:1b:
98:6d:85:ad:0c:59:8f:ce:ad:97:c5:65:2c:23:78:
67:16:2b:ad:86:1f:53:de:3d:5e:f3:6b:0e:67:70:
b0:09:b9:30:11:3a:5f:1d:b2:84:0c:d2:4e:22:21:
79:0d:d3:ed:bb:31:37:07:7c:49:b1:7f:f4:c7:8e:
0c:59:50:93:c5:22:52:00:b9:75:b5:34:6b:dc:af:
82:53:5b:3f:ea:5f:44:da:84:bc:2f:1a:47:b6:f4:
6b:1e:44:67:18:a4:63:7e:a8:e4:10:17:4c:3b:94:
93:1b:e5:8f:d5:16:25:84:2c:73:c3:cd:77:38:0f:
40:d9:fa:9b:78:be:06:c8:ea:12:c1:30:62:dc:7e:
4a:56:8a:84:68:97:4c:55:a0:44:80:61:5e:ac:6f:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7F:93:F7:C7:38:6B:51:89:32:D1:79:8A:90:9B:A1:9E:65:48:C0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u3-T98c4a1GJMtF5ipCboZ5lSMA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e0:89:48:24:35:8f:7b:93:19:f8:92:9b:6e:7e:29:63:0d:
79:c0:2e:e5:2a:f5:c6:72:fc:2c:c9:0a:6f:29:0a:68:50:73:
1e:c2:21:83:f2:b5:96:ef:ce:d9:8a:1f:c4:a8:44:bc:bf:ee:
d3:f8:ae:4a:58:1c:85:d1:ab:b6:b6:cb:ff:56:41:3b:db:ca:
2a:e7:ed:60:62:3d:71:10:ab:83:4c:59:77:d0:75:11:78:46:
77:6d:d8:30:3b:40:9c:94:73:b8:1e:1d:04:30:b6:a2:8a:98:
bc:54:cf:c5:2a:40:1d:4e:62:7a:83:cf:e3:39:41:3a:9c:f4:
7f:b1:62:f4:ed:87:51:72:66:07:46:6b:2d:c3:07:b6:e4:81:
ca:40:91:cf:b0:e3:16:6a:97:50:76:ea:df:36:13:5f:c9:1b:
86:3a:2a:c7:f3:59:04:30:18:6b:34:aa:21:c3:fb:41:a1:2d:
8c:44:6c:10:d7:32:a0:32:9f:93:1f:ab:4a:37:c7:60:f2:ec:
5c:ae:10:4a:2a:54:3a:fb:a2:06:91:5c:1e:01:43:1f:eb:1d:
e9:45:6e:5c:72:13:a5:99:55:d0:d5:e4:13:68:30:04:78:4b:
02:7c:16:48:a6:82:66:38:78:7f:2d:61:f3:ce:ae:51:7a:92:
d9:92:96:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:24 2025 by rpki-client