Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UjASBNIz0r4MZRBSx5L-hgvQydw.roa
File: UjASBNIz0r4MZRBSx5L-hgvQydw.roa (raw, json)
Hash identifier: vVMm9jE0UKDM6uQQRZis7SCzLNm5Z+mMmeHIJIRQ+jM=
Subject key identifier: 52:30:12:04:D2:33:D2:BE:0C:65:10:52:C7:92:FE:86:0B:D0:C9:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 322F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UjASBNIz0r4MZRBSx5L-hgvQydw.roa
Signing time: Mon 26 Aug 2024 05:31:23 +0000
ROA not before: Mon 26 Aug 2024 05:31:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12847 (0x322f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:23 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=52301204D233D2BE0C651052C792FE860BD0C9DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:67:c5:f2:18:f9:59:59:78:df:18:ca:d9:58:
6d:39:c9:0a:75:73:e3:1b:a6:62:64:d8:37:b9:da:
2a:76:24:f7:82:20:f1:5b:ab:2b:e1:78:bd:7e:74:
55:09:fb:30:04:af:d8:03:6f:a2:23:0a:72:e0:db:
63:db:14:1f:b5:e4:ac:ea:45:90:3b:e4:12:35:e7:
76:5a:01:88:0a:53:14:fe:e7:2c:72:1e:fd:04:78:
de:6a:c4:e1:c6:6a:6b:0e:52:55:c3:17:17:da:b3:
0e:6c:bb:4a:93:5a:d5:a1:bb:1d:d0:40:84:cd:1a:
bd:fe:cc:b2:17:69:28:8d:9d:80:ec:ce:97:79:9b:
88:f6:51:39:d5:30:ca:ef:30:eb:72:4c:b1:2a:45:
97:e2:64:7a:72:cd:dd:4f:6e:de:12:aa:b5:5e:ab:
f3:f4:71:f7:bd:c2:fc:3f:46:ee:b8:fa:1c:e8:da:
9a:45:97:a6:b5:c3:6a:86:9d:fd:7b:29:6a:ff:33:
ce:33:d2:52:16:da:9c:4d:c5:d3:31:f7:c1:5b:db:
76:d0:31:5d:9e:b0:41:93:c0:a4:6b:52:22:86:26:
85:12:72:89:f9:03:05:39:ac:b4:a1:19:89:c7:7b:
10:e5:9c:09:9d:bc:40:65:3c:d0:73:23:58:a7:1b:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:30:12:04:D2:33:D2:BE:0C:65:10:52:C7:92:FE:86:0B:D0:C9:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UjASBNIz0r4MZRBSx5L-hgvQydw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.128.0/22
Signature Algorithm: sha256WithRSAEncryption
63:c1:ba:54:f7:17:6b:08:d6:20:57:83:24:38:77:4a:7d:5c:
d4:4e:4c:4c:c0:c7:be:5f:03:05:eb:ba:18:d6:b9:fc:f1:8c:
9a:69:27:8e:67:86:c5:e8:9b:12:d8:88:50:c0:ba:a4:4a:ee:
ac:7c:27:4f:d8:df:8a:ca:53:f2:fc:4e:68:99:ea:2a:58:6c:
7f:14:4a:61:1f:73:91:23:c4:fd:1d:cf:d8:37:17:9c:7f:ec:
ee:78:e3:2d:c4:04:1e:24:04:7e:08:56:b1:23:a4:ba:20:c3:
eb:e1:b9:dd:9a:4c:cb:27:48:28:ed:29:c2:b2:ce:6b:5d:c0:
42:11:49:a1:08:cc:a4:f7:82:2f:74:05:27:d5:4d:8b:4f:e0:
27:ad:dc:f0:b3:f4:1d:ca:00:59:93:d8:d0:f2:27:9d:3f:f5:
70:e0:ea:41:8e:22:b7:93:64:2e:16:0c:cc:fe:4e:1f:6b:21:
ae:8f:ca:cd:ee:0d:0f:ec:33:00:31:ab:4f:64:e6:02:02:68:
35:c5:24:3f:49:7c:4b:e2:d4:c5:0a:e9:f2:6a:71:31:d5:b3:
ad:c3:ec:af:83:06:7b:8a:84:39:66:90:dc:79:4d:b5:88:95:
6d:bc:e4:5c:ba:40:ad:37:43:b5:1d:a2:42:71:89:ac:97:f1:
60:49:88:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:03:49 2025 by rpki-client