Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmPjwniNEqP2-xU9H9Icqb4tgVg.roa
File: wmPjwniNEqP2-xU9H9Icqb4tgVg.roa (raw, json)
Hash identifier: x3Asj0eZyaqwYCCBVB/1jkQxQo1ONVDnHnagc7WNGSI=
Subject key identifier: C2:63:E3:C2:78:8D:12:A3:F6:FB:15:3D:1F:D2:1C:A9:BE:2D:81:58
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 356D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmPjwniNEqP2-xU9H9Icqb4tgVg.roa
Signing time: Mon 10 Feb 2025 13:53:20 +0000
ROA not before: Mon 10 Feb 2025 13:53:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13677 (0x356d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:20 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C263E3C2788D12A3F6FB153D1FD21CA9BE2D8158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:b5:20:9e:02:78:8d:52:f9:aa:c2:0a:0b:
8f:b1:a9:fd:aa:86:5c:30:50:d9:23:d7:78:c3:cc:
f7:ed:d5:99:ed:49:4c:93:5c:22:d4:ef:1e:11:2f:
be:5f:13:c1:5b:99:30:fa:1a:e7:92:7d:f0:84:60:
08:13:55:d3:00:13:43:17:0c:6b:21:65:10:31:f7:
d1:91:31:ab:dd:b9:ea:6a:a3:3e:19:9e:e9:14:0b:
28:5b:13:fb:09:ed:99:dc:42:a3:9a:75:98:58:fd:
1a:b7:2a:a3:af:48:4d:6e:7c:f8:34:62:62:b0:5d:
7e:8e:80:f6:21:80:bf:c0:ae:fc:81:73:1a:2b:cc:
83:c4:aa:07:3c:5a:47:46:ec:f7:ba:47:83:0d:c1:
1a:f4:bd:5b:e5:7d:f8:a6:55:e7:59:cd:f6:53:3f:
53:20:d0:79:33:37:c6:44:82:1a:0e:67:a1:c6:74:
e6:07:27:cb:70:d9:60:85:9a:9a:94:8c:0b:9b:7f:
8f:fd:09:f5:52:38:bd:bd:1a:a8:f8:59:20:76:04:
98:a0:24:6e:98:71:43:1d:bd:4e:aa:87:bb:11:4e:
16:66:cb:9c:f8:07:af:50:c1:0e:7c:7a:e5:bd:00:
63:62:35:b9:fb:c8:1c:ef:c9:b6:8c:3e:0f:0e:02:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:63:E3:C2:78:8D:12:A3:F6:FB:15:3D:1F:D2:1C:A9:BE:2D:81:58
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmPjwniNEqP2-xU9H9Icqb4tgVg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.134.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ba:bc:fa:bd:b8:31:c6:8f:54:6a:85:32:91:09:e0:d3:89:
31:8b:29:17:f4:74:54:8d:ae:bb:c0:be:0a:8b:05:f4:fa:52:
85:80:89:6f:c5:cb:b7:ca:14:47:67:e0:33:27:e7:87:2b:5e:
1e:c5:2c:2d:6c:27:c8:3f:52:ea:28:56:e8:24:11:a0:0c:ee:
3f:74:8e:74:a0:6d:e7:28:1b:c4:4f:17:52:ec:77:ca:5b:09:
01:02:96:8b:84:b5:6a:d7:96:e4:37:c2:f8:44:3f:ac:bb:33:
9e:1c:41:ae:c5:a7:fb:ea:37:f1:1d:b3:59:a6:02:43:9d:d2:
11:0c:4e:a3:2e:bf:3d:13:4e:82:d6:e9:e1:67:6d:81:9e:11:
51:10:8a:e0:19:d3:7a:47:f4:c9:81:f2:b4:35:16:5b:32:32:
05:27:5b:90:b8:de:9c:b9:ef:45:29:91:e6:f1:2f:36:48:fb:
c7:9c:fd:30:c2:00:58:52:a0:2c:6b:6b:de:98:89:ab:d3:7c:
7c:c6:a7:a8:bd:10:28:61:8b:6b:17:9b:e2:f4:0f:cd:37:3c:
86:00:db:bc:5b:b4:dc:fc:d2:f9:e1:4a:5b:71:81:df:5e:03:
2b:2e:45:ec:d1:2f:26:08:63:71:7f:b3:e6:c1:65:81:36:17:
60:27:06:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:18 2025 by rpki-client