Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gfnUq3tcyofADWOp-RFi9KfVLfc.roa
File: gfnUq3tcyofADWOp-RFi9KfVLfc.roa (raw, json)
Hash identifier: 9wU/V9Nuiiv7oXTsxm1CWjIp+/KTiQNGp6gqbs1DF50=
Subject key identifier: 81:F9:D4:AB:7B:5C:CA:87:C0:0D:63:A9:F9:11:62:F4:A7:D5:2D:F7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35C2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gfnUq3tcyofADWOp-RFi9KfVLfc.roa
Signing time: Mon 10 Feb 2025 13:53:40 +0000
ROA not before: Mon 10 Feb 2025 13:53:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13762 (0x35c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:40 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=81F9D4AB7B5CCA87C00D63A9F91162F4A7D52DF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:f9:7b:f3:a7:f9:6e:1d:2c:27:bd:2e:b6:
f6:99:e4:6d:78:ba:30:e3:f6:fe:48:d0:52:a5:9b:
1b:91:a7:7f:54:67:29:d3:55:41:22:c4:14:b9:96:
61:dd:c5:b2:df:41:ac:bb:95:47:f7:3d:dc:25:a9:
4d:93:86:4b:45:36:65:53:b1:04:d1:5a:af:38:db:
37:64:79:3a:81:30:c7:fc:26:3c:fa:3c:10:16:b1:
0b:36:c5:4c:03:dd:fb:09:ec:f2:30:55:da:fc:fa:
ad:50:b9:fd:bc:f9:0b:88:98:c3:3e:cc:db:1c:06:
c6:76:cd:9f:92:af:ad:7a:fa:3f:4d:3c:a0:f9:59:
27:89:f5:cb:ed:59:f1:10:79:ed:42:1a:82:47:ad:
0e:a8:d9:7a:05:fa:a8:32:44:7b:be:93:f2:a1:18:
1d:28:ab:ec:91:70:64:ab:13:62:54:a0:5c:7b:c6:
47:ee:88:0e:ef:9a:fd:96:2e:d2:c4:3b:71:2e:b4:
0d:fa:72:6a:59:42:aa:67:48:1c:47:65:fd:b0:bb:
96:3d:dd:2f:a6:67:60:b0:e3:05:c8:bd:3a:b6:c0:
db:1c:d8:9d:b3:33:f8:f0:8f:2f:6f:02:01:c7:13:
93:26:84:eb:55:21:db:c6:90:61:66:d4:d9:53:fc:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F9:D4:AB:7B:5C:CA:87:C0:0D:63:A9:F9:11:62:F4:A7:D5:2D:F7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gfnUq3tcyofADWOp-RFi9KfVLfc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:08:38:f6:cc:3f:f0:f7:62:25:30:d6:39:b9:13:97:c1:7a:
0c:27:d5:0c:14:d5:52:5a:53:37:0d:69:55:86:bf:8f:6d:59:
74:c8:96:e4:12:06:d3:c1:54:e1:07:82:29:bb:37:86:49:67:
f8:25:78:bd:55:00:70:6f:40:b1:b4:5c:be:74:c0:d0:3c:7c:
de:11:ab:07:4f:cf:3c:b7:e2:b6:9c:7e:31:e4:de:01:ba:b3:
15:31:a9:93:f0:e3:33:72:4e:93:2b:90:68:b9:d1:48:8d:d7:
a9:3e:d0:ce:10:a6:89:b1:f2:3b:2d:8c:39:1e:eb:03:8b:4e:
25:fe:46:35:c5:f9:c0:c6:7a:a7:6f:b1:2c:ca:92:9a:07:6a:
61:34:92:46:7f:cf:40:f6:ff:d4:1f:87:5c:39:d9:48:23:0d:
93:41:64:27:1d:6d:e8:02:b7:af:d9:a7:40:24:87:19:81:9f:
3a:d8:18:f1:79:41:a2:d7:19:21:2a:03:50:fb:6d:c7:78:5f:
18:8c:04:86:37:76:af:a6:e9:50:33:ad:2e:2c:13:46:2f:2e:
d0:d6:cf:a6:33:48:91:92:82:53:eb:01:86:ef:1c:5f:d7:b3:
ec:26:76:1b:6e:63:b8:61:f4:45:ba:38:43:bf:44:31:b1:3b:
f4:2d:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:00:14 2025 by rpki-client