Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I72xTZcQZJMc_35thnQkO6pFoGY.roa
File: I72xTZcQZJMc_35thnQkO6pFoGY.roa (raw, json)
Hash identifier: Fa23ucKcYVOy6U2o8qCiRfsLnrAAKutcr0DljpXzo1U=
Subject key identifier: 23:BD:B1:4D:97:10:64:93:1C:FF:7E:6D:86:74:24:3B:AA:45:A0:66
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 315B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I72xTZcQZJMc_35thnQkO6pFoGY.roa
Signing time: Mon 26 Aug 2024 05:30:22 +0000
ROA not before: Mon 26 Aug 2024 05:30:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12635 (0x315b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=23BDB14D971064931CFF7E6D8674243BAA45A066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:3b:48:6d:1e:2f:45:8a:26:89:b3:62:e8:
0f:5e:03:89:14:f3:7f:35:cf:97:20:53:f9:f7:cd:
60:e3:cd:36:8d:04:a7:87:9f:32:90:18:7c:b1:cc:
17:e1:fb:cc:09:c9:a1:c0:d9:f7:53:88:ac:0d:3a:
05:4c:6d:90:9b:88:c1:00:ab:56:7b:22:95:ad:3f:
1e:0c:7a:92:0c:46:23:c8:a3:de:ce:38:f0:e0:ee:
65:e7:40:1a:6b:c4:5f:25:d7:31:54:55:78:67:8c:
48:f4:41:14:71:f9:a5:59:1d:cf:93:b5:ae:08:e6:
f3:f4:f5:47:b6:28:d5:e7:9f:91:c7:f4:f7:69:e7:
ac:a8:52:13:89:d3:3f:38:d6:40:9f:a8:bf:6c:1a:
f9:09:de:17:df:df:01:70:db:fa:af:76:6b:57:a5:
c7:22:80:0b:23:60:43:76:29:65:15:61:d0:65:62:
92:41:fd:7b:a9:d6:fa:58:ea:b4:3f:bc:05:f5:12:
eb:cb:13:b4:ef:08:04:9c:2b:a8:fa:95:3c:4e:4b:
ac:67:5e:81:c7:78:23:52:71:fe:6f:ab:cd:76:60:
77:be:b8:de:45:4b:85:41:bb:a9:9a:c6:63:3a:f8:
6b:b1:60:59:f6:85:97:aa:42:ba:8f:79:14:5d:69:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BD:B1:4D:97:10:64:93:1C:FF:7E:6D:86:74:24:3B:AA:45:A0:66
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I72xTZcQZJMc_35thnQkO6pFoGY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.132.0/24
Signature Algorithm: sha256WithRSAEncryption
22:d6:ca:95:ce:e1:91:3d:01:bf:2c:b4:78:b5:4b:2b:a3:25:
8e:b1:e7:b2:09:3c:29:64:ef:a3:c7:00:39:09:de:9f:00:02:
63:ac:0b:fc:2b:1d:e4:1d:98:22:4e:94:30:57:5f:df:c8:4a:
87:7f:ec:d0:38:7d:a5:f0:22:00:fb:0a:b2:6f:6c:79:ce:d4:
66:89:a4:7e:e2:4b:ff:41:50:10:b9:b2:c6:ae:15:03:4f:03:
59:17:15:82:ae:dc:5d:d7:14:a1:f7:35:f3:3c:04:7f:d8:8b:
93:66:3c:2f:42:ca:6d:a2:30:7c:86:df:0b:4e:c9:8c:d8:45:
8a:14:24:10:48:4c:42:b4:9d:92:05:f4:7c:34:c5:a2:29:5f:
42:02:2a:0d:2a:b0:37:98:9e:58:5a:6c:eb:85:17:13:29:3f:
9f:17:e5:fc:d3:8e:58:bb:6a:59:20:e0:9c:3b:af:d5:87:4a:
59:fe:0f:24:d0:f7:58:cd:c0:7e:ea:28:ed:52:ce:ef:4a:e4:
5d:1b:3b:02:40:30:6a:d6:91:6d:1f:af:12:1a:01:3f:11:89:
46:8b:5d:7c:92:ae:d5:5a:f3:9d:e1:98:26:49:30:99:65:e0:
d3:fb:8a:d7:0d:45:96:b7:44:46:79:f6:9a:09:7e:20:f4:2e:
73:0c:53:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:56:27 2025 by rpki-client