Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MhzGPOsKQOTzy_Z7ldMu5xjP3vU.roa
File: MhzGPOsKQOTzy_Z7ldMu5xjP3vU.roa (raw, json)
Hash identifier: L8n0VcPJI/J2s3YDWKyFaFJA0jYjOekAuhyE4OU+jKw=
Subject key identifier: 32:1C:C6:3C:EB:0A:40:E4:F3:CB:F6:7B:95:D3:2E:E7:18:CF:DE:F5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3225
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MhzGPOsKQOTzy_Z7ldMu5xjP3vU.roa
Signing time: Mon 26 Aug 2024 05:31:19 +0000
ROA not before: Mon 26 Aug 2024 05:31:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12837 (0x3225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=321CC63CEB0A40E4F3CBF67B95D32EE718CFDEF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:74:48:22:cc:c4:cc:09:3e:64:5c:4e:0e:
3f:8a:a7:20:68:05:86:89:5b:4d:49:4e:f3:16:2d:
d6:53:99:d7:8c:ca:4a:85:7a:7e:1e:47:0c:a8:d7:
e6:f3:46:36:2d:79:9b:67:83:4e:83:d6:43:fd:0e:
66:d6:22:95:37:c4:03:22:4f:c5:21:f4:98:75:eb:
f9:0d:b0:d2:01:1c:a5:33:b0:13:22:a9:03:cf:e4:
60:0d:08:3b:85:82:08:1a:4e:0e:a1:a4:bf:e3:af:
d0:de:ca:02:3b:55:48:54:5a:88:b1:6c:96:67:91:
c8:36:03:df:04:fb:11:5e:2b:cb:40:9e:b0:f3:30:
43:dd:a4:85:3e:c7:1f:e3:e1:9c:0b:a5:c8:c2:10:
b2:3c:d2:da:4e:61:04:f1:1b:9f:c0:92:ca:d1:42:
40:a9:a2:73:b1:2a:37:e7:2f:22:44:b0:65:80:20:
c8:77:ef:b3:ac:f7:27:76:33:5d:8d:35:8e:41:b6:
1b:bc:21:64:16:f6:00:ae:9b:62:6d:88:5c:c1:bb:
df:a5:f8:43:f3:be:98:47:36:4b:15:fe:18:20:c1:
8b:34:dd:96:e5:f1:d4:08:d2:af:87:68:fc:4e:7e:
8d:d0:1f:98:1f:af:09:96:2a:cf:4f:d1:ba:70:59:
38:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1C:C6:3C:EB:0A:40:E4:F3:CB:F6:7B:95:D3:2E:E7:18:CF:DE:F5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MhzGPOsKQOTzy_Z7ldMu5xjP3vU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.102.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:1c:87:e3:fe:0a:de:80:e2:60:c7:80:54:e6:8d:8a:47:fd:
95:50:13:73:eb:57:ce:11:fd:4b:8c:b2:59:51:9d:9e:b7:35:
cd:64:fa:4c:dd:b1:f9:ab:a3:83:00:4d:07:a2:bd:fb:65:79:
05:61:57:0b:25:36:23:82:6d:ef:de:b7:45:30:60:38:ed:84:
4d:43:e6:69:b5:02:55:91:bf:d4:78:1b:d4:84:c0:4d:ce:be:
10:ab:76:1b:44:f4:3d:98:aa:e7:5a:35:15:1b:c8:9b:b3:ce:
ee:4d:f9:a0:c6:ec:12:10:47:8a:3b:23:3d:5e:ad:31:68:56:
b5:95:33:6b:9a:e4:0d:fa:84:c9:6d:1e:84:48:13:7b:ef:91:
a4:bc:b1:63:33:ca:1d:c5:5f:e3:41:9d:13:ef:5b:34:c4:12:
60:a6:cb:f3:19:2a:6b:de:72:1b:29:1b:78:d3:f1:e8:cd:cb:
3f:32:ef:8d:a3:69:06:e1:2a:fc:b9:81:a7:01:65:38:35:71:
4c:e5:60:94:11:66:d4:1b:00:6a:ec:96:49:a7:42:55:af:eb:
84:50:ce:cb:15:c3:94:7e:8a:a1:4e:df:30:50:da:e9:b6:e7:
24:26:c7:35:1d:e5:0c:3f:26:93:f6:10:d0:8c:c8:e3:8d:17:
4b:32:32:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:45:21 2025 by rpki-client