Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yuI0JP25MsHeANjU280S81AdgPk.roa
File: yuI0JP25MsHeANjU280S81AdgPk.roa (raw, json)
Hash identifier: AyTW4iplhpPtJu8cUtKw9S1mcWx+y5IsfZ2zRP0Yz+Q=
Subject key identifier: CA:E2:34:24:FD:B9:32:C1:DE:00:D8:D4:DB:CD:12:F3:50:1D:80:F9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3676
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yuI0JP25MsHeANjU280S81AdgPk.roa
Signing time: Mon 10 Feb 2025 13:54:21 +0000
ROA not before: Mon 10 Feb 2025 13:54:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13942 (0x3676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:21 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CAE23424FDB932C1DE00D8D4DBCD12F3501D80F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a6:ee:c5:db:6e:af:ef:bd:3f:99:07:ea:c1:
b6:00:bb:f3:6c:a2:07:c6:44:1e:73:1f:45:d5:68:
97:c4:4d:58:fd:02:79:10:75:b4:ea:c3:2d:96:b1:
73:85:d6:48:89:39:7e:45:ce:52:23:df:5e:aa:4b:
48:aa:cb:4c:28:fe:b0:cd:ba:5a:e8:dc:16:71:40:
76:da:f3:38:30:2f:21:07:7c:8f:1a:53:d0:45:d1:
e7:92:99:16:f9:11:a3:7b:cf:b3:af:86:ef:fa:b6:
0d:8c:18:b3:6f:fa:4e:02:e1:3d:ae:29:c5:28:4a:
1b:05:8a:c1:4f:ec:1a:b6:d9:87:64:8a:73:c6:ab:
b0:9e:89:70:e3:7d:b7:1a:da:73:ee:1c:80:bb:6b:
4e:12:ae:b2:1f:b7:36:29:12:84:e9:85:20:4a:72:
17:63:12:1f:03:42:40:f8:3f:ba:f7:86:ba:54:53:
d5:9e:90:1c:b2:f3:11:1b:45:7d:d8:3f:9d:de:b2:
9c:f9:f6:49:89:69:e8:50:a1:ed:0f:47:d8:7d:60:
28:bc:8e:bd:d4:a8:aa:65:53:f6:97:50:f4:78:d2:
27:f7:8b:b6:3d:ee:8c:ba:d3:70:ef:29:94:36:02:
e3:4f:dd:46:e1:b1:26:fe:4c:58:47:ab:9c:4c:3b:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E2:34:24:FD:B9:32:C1:DE:00:D8:D4:DB:CD:12:F3:50:1D:80:F9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yuI0JP25MsHeANjU280S81AdgPk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.128.0/24
Signature Algorithm: sha256WithRSAEncryption
79:bd:87:b5:53:7b:ed:c4:4f:ac:1f:4b:f6:51:5c:fd:62:5f:
d0:44:9d:6f:01:40:26:5c:a6:bb:a0:de:2b:3a:96:ee:1a:2a:
76:b2:b2:e0:de:41:2b:b4:4a:6d:16:41:cf:ba:35:4c:2e:5d:
a6:e1:97:a2:2f:b4:13:d1:46:e5:23:64:64:8a:69:bb:08:29:
50:45:17:21:01:64:06:de:d5:05:a5:35:e9:65:e2:82:92:17:
9b:30:0b:2d:1b:0a:44:30:9f:54:10:29:2c:9e:d1:68:b3:3a:
cb:4c:4c:fc:86:00:64:46:f7:7d:45:da:2c:69:17:fe:b9:90:
c2:52:ad:de:5c:41:1a:44:43:68:0d:84:2e:61:38:25:2d:ab:
e6:ff:58:99:3e:0a:9a:0a:6b:58:bd:1f:5e:8d:e2:6e:0b:b7:
c2:ff:8d:6b:bb:0d:a0:c9:b5:09:1b:7f:aa:49:45:9f:59:65:
db:8e:d8:ef:2c:bb:40:dc:1d:f0:50:d7:cc:1a:e4:6e:da:63:
80:b1:0a:90:fa:00:fb:5b:19:46:e6:b7:b7:13:77:6f:3e:30:
74:28:07:38:7c:90:4c:2a:42:66:63:4a:b1:bd:1d:ef:5a:dd:
1a:ac:a8:f0:87:d2:d7:ab:9a:ee:9d:a2:25:88:fc:ab:1c:a3:
35:54:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:15 2025 by rpki-client